Now, even Russia's most elite hackers are using Clickfix to infect devices

Recent Ars Technica security coverage highlights a surge in high-impact and diverse threats: Russian state and elite criminal actors are leveraging social‑engineering (Clickfix) and targeting residential routers; multiple Windows zero‑days (including HiveLegacy and a Defender flaw) and longstanding Secure Boot shim weaknesses enable serious persistent compromises; Google paid for Linux guest VM escape flaws, and macOS sees new infostealers like PamStealer. Concurrent trends raise alarm about AI-enabled abuse (prompt‑injection, LLM‑assisted botnets/HalluSquatting and AI‑browser attacks), a huge