Google quantum-proofs HTTPS by squeezing 15kB of data into 700-byte space
2026-03-04T19:42:09Z•487f6d1f7efe44b74c772dec9024c2f980ee18e5e6785277d5c2b8c01366a491
AirSnitchCastleloaderClickFixLumma StealerMerkle tree certificatesMicrosoft OfficeNotepad++OTP phishing vulnerability (SMS)Poland energy gridSMS sign‑in linksSecure BootSecure Boot certificatesTLSUEFIWPA/WPA2/WPA3Wi‑FidYdXmalicious packagespassword managersquantum‑proofingstate‑sponsoredsupply‑chain attackwallet theftwiper malwarezero‑day
What happened
Ars Technica security roundup (Jan–Feb 2026) covering multiple high‑risk developments: Google is rolling out Merkle‑tree “quantum‑proof” certificates for HTTPS; a new AirSnitch attack can bypass Wi‑Fi encryption; password‑manager and software‑update server compromises (Notepad++) highlight supply‑chain risks; Lumma stealer has returned using ClickFix lures and Castleloader distribution; Microsoft warns of expiring Secure Boot certificates and released an urgent Office patch being exploited by Russian‑state actors; malicious packages drained dYdX wallets; a wiper targeted Poland’s energy grid (
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- arstechnica_security
- Record identifier
- 487f6d1f7efe44b74c772dec9024c2f980ee18e5e6785277d5c2b8c01366a491
- Enrichment time
- 2026-03-04T19:42:09Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.