Think twice before installing this device promising free movies

Ars Technica security feed covering active exploitation of endpoint vulnerabilities, supply-chain compromises, credential theft, malicious or unowned code installation, browser and device fingerprinting, AI-agent abuse, LLM prompt-injection data exfiltration, phishing and session hijacking, infrastructure backdoors, and emerging surveillance and wireless threats. The most immediately actionable items concern actively exploited Mac screen-sharing flaws, large-scale credential leaks, supply-chain attacks, exposed motherboard controllers, and unauthorized access through collaboration tools.