Feds take notice of iOS vulnerabilities exploited under mysterious circumstances

Ars Technica security roundup highlighting multiple high-risk incidents and research: CISA added three iOS vulnerabilities to its known-exploited catalog (mysterious/advanced iOS exploit activity); LLMs shown capable of deanonymizing pseudonymous users at scale; Google rolling out Merkle-tree certificate support to quantum-proof HTTPS; a new “AirSnitch” technique that can bypass Wi‑Fi encryption; server-side compromises undermining password managers; resurgence of Lumma stealer via malicious lures; Secure Boot certificate expirations that could affect future OS boots; malicious packages that b