From Iran to Ukraine, everyone's trying to hack security cameras

A collection of Ars Technica security stories covering widespread, active threats and systemic risks: state-linked campaigns targeting consumer security cameras and Office/iOS zero‑day exploits being actively used; supply‑chain compromises (Notepad++, malicious dYdX packages) and a resurgence of Lumma Stealer; a new Wi‑Fi AirSnitch bypass and concerns about expiring Secure Boot certificates; privacy risks from LLM deanonymization and an exposed kids’ AI chat portal; plus infrastructure worries (wiper malware against Poland’s grid), high‑profile law enforcement takedowns, and growing noise from