Widely used Trivy scanner compromised in ongoing supply-chain attack

Collection of recent Ars Technica security reports highlighting an active, broad threat landscape: an ongoing supply‑chain compromise of the Trivy scanner and other repo/package backdoors (including invisible/unicode obfuscation and a Notepad++ updater compromise); powerful iPhone exploit set (DarkSword) and CISA‑tracked iOS flaws being used in the wild; targeted wiper attacks (Stryker), large-scale router infections (Asus devices), and renewed malware campaigns (Lumma Stealer, malicious dYdX packages). Additional notable issues include a new Wi‑Fi bypass (AirSnitch), problems with password‑m²