Knicks sent employees fake offer of championship rings in phishing test: Report

Ars Technica security feed covering active exploitation, critical software vulnerabilities, TLS certificate authority and registry compromises, phishing, data exposure, malware delivery, IoT security incidents, AI-agent abuse, and emerging protocol and cryptographic risks. Several reports describe real-world attacks, including PHP2Shell exploitation, compromised Tor exit nodes, exploited Plex vulnerabilities, counterfeit TLS certificates, Zimbra command injection, and zero-click mercenary spyware delivery.