Now, even Russia's most elite hackers are using Clickfix to infect devices

A collection of Ars Technica security headlines covering a wave of high-impact vulnerabilities, malware, and nation-state activity. Highlights include Russian state and criminal actors adopting the Clickfix social‑engineering technique and targeting home routers; multiple Windows 0‑days (including a named primitive, HiveLegacy) and a Windows Defender flaw; a long‑standing Secure Boot bypass caused by unrevoked shims; a Google‑paid high‑severity Linux guest VM escape; new macOS infostealer (PamStealer) and a lightweight crypto‑stealing backdoor; large credential breach affecting major vendors;,