Supply-chain attack using invisible code hits GitHub and other repositories

Ars Technica's security feed highlights a wave of high-impact incidents and emerging threats: a novel supply‑chain attack using invisible Unicode in code repositories (affecting GitHub and others); a destructive wiper that has taken Stryker's Windows network offline; ~14,000 mostly Asus routers infected by resilient malware; widespread attempts (attributed to Iranian actors) to hijack consumer security cameras; CISA adding three iOS flaws to its Known Exploited Vulnerabilities list; research showing LLMs can deanonymize pseudonymous users at scale; Google's rollout of Merkle‑tree certificate (