Now, even Russia's most elite hackers are using Clickfix to infect devices

Multiple recent Ars Technica reports highlight an escalation in both sophisticated state‑actor tradecraft and widely exploitable vulnerabilities. Russian actors are adopting the Clickfix social‑engineering technique and targeting home routers; Microsoft Secure Boot has long‑standing shim-related bypasses while a string of Windows 0‑days (including a Defender issue and HiveLegacy primitive) and record patching activity were disclosed. Other notable issues: high‑value Google‑rewarded Linux guest VM escapes, a new macOS infostealer (PamStealer), USB‑spreading crypto clippers, large credential exf