Feds take notice of iOS vulnerabilities exploited under mysterious circumstances

Ars Technica security feed covering actively exploited iOS vulnerabilities, large-scale infostealer and supply-chain campaigns, ransomware and destructive malware, cloud and web data exposure, authentication and certificate lifecycle risks, Wi-Fi attacks, cryptocurrency theft, and emerging AI-related security and privacy threats. The most urgent items involve CISA-listed iOS flaws, exploitation of an Office vulnerability by Russian state-linked actors, a compromised Notepad++ update channel, Lumma Stealer distribution, and malware targeting Poland’s energy grid.