Supply-chain attack using invisible code hits GitHub and other repositories

A March 2026 Ars Technica security roundup highlights a wave of high-impact incidents: a supply‑chain vector using invisible Unicode code affecting GitHub and other repos; a destructive wiper that has taken Stryker's Windows environment offline; ~14,000 Asus and other routers infected by resilient malware; state-linked campaigns targeting consumer security cameras; and CISA additions of multiple exploited iOS vulnerabilities. Other notable items include an AirSnitch Wi‑Fi encryption bypass, resurgence of Lumma Stealer and malicious packages that drained dYdX wallets, a Notepad++ updater supply