Massive leak exposes 41,000 DHS workers and undercover ICE agents

Ars Technica security RSS content covering major data breaches, critical vulnerabilities, TLS certificate authority compromises, malware and spyware delivery, exploited internet-facing devices, phishing, AI-agent abuse, and emerging AI/IoT security risks. The most severe topics include UEFI code execution affecting EDK2-based systems, actively exploited PHP and Plex vulnerabilities, compromised TLS intermediates enabling fraudulent certificates, and large-scale government data exposure. No CVE identifiers are provided in the document.