Terabytes of credentials leaked in massive supply-chain attack

Ars Technica security feed covering major cybersecurity developments, including credential theft through a compromised AI package, device hijacking via Zoom screen sharing, fake Wi-Fi hotspot attacks, account-takeover defenses, surveillance risks, passkey research, email-domain leakage, backdoored server management controllers, AI-assisted cyberattacks, and active exploitation of a critical Microsoft Exchange vulnerability. The feed indicates substantial risks across software supply chains, enterprise infrastructure, cloud services, authentication, and emerging AI-agent security.