Now, even Russia's most elite hackers are using Clickfix to infect devices

A cluster of high-impact security stories: sophisticated Russian actors and financially motivated criminals are increasingly using social‑engineering tools like Clickfix and targeting home routers; multiple Windows and Defender zero‑days (including a powerful 'HiveLegacy' primitive) and a Linux guest‑VM escape were disclosed; Secure Boot has long been undermined by unrevoked UEFI shims and key expirations are imminent; attackers are leveraging AI/LLM weaknesses (prompt injection/HalluSquatting) to build botnets and bypass guards; new macOS infostealer (PamStealer), a self‑propagating crypto‑th