Your uncle’s frozen Mac says it’s infected after viewing a Google ad. Now what?

A September 2026 Ars Technica security feed covering active cyber threats and research, including malvertising and scareware, ClickFix social engineering, exploit kits targeting Chrome and Windows, supply-chain compromises, ransomware and data breaches, BGP hijacking, compromised surveillance cameras and streaming devices, AI-agent and LLM security weaknesses, and criminal activity by groups including ShinyHunters and TeamPCP. The collection indicates significant ongoing risk across endpoint, cloud, identity, network, software supply-chain, and AI environments.