New AirSnitch attack bypasses Wi-Fi encryption in homes, offices, and enterprises

This Ars Technica security feed aggregates multiple active, high-impact threats and incidents. Highlights include a new “AirSnitch” technique that can bypass Wi‑Fi encryption across home, guest, and enterprise networks; a resurgence of Lumma Stealer delivered via ClickFix lures and Castleloader; malicious supply‑chain and package attacks (Notepad++ updater compromise, malicious packages targeting dYdX) that have led to backdoors and emptying of crypto wallets; and an urgent Microsoft Office vulnerability being actively exploited by Russian-state actors. Other notable items: expiring Secure‑/UE