“TTF Trap” Phishing Emails Use Fake Font Files to Deliver Windows Malware

Multiple notable incidents and advisories: a new “TTF Trap” phishing campaign uses fake font (.ttf) files to deliver Windows malware via shipping/invoice-themed lures; OkoBot malware targets crypto users using fake installers, ClickFix and hidden browser extensions to steal wallets and seed phrases; a PromptFiction flaw in Claude Desktop allowed one‑click hidden prompts that exposed chats and could enable remote code execution; Microsoft’s July 2026 Patch Tuesday addressed 622 CVEs including exploited AD FS and SharePoint zero‑days and a disclosed BitLocker bypass — immediate patching is urged