New "Storm" infostealer skips local decryption, sending browser data to attacker servers. Varonis shows how server-side decryption enables session hijacking, bypassing passwords and MFA.
Officially, we don't know what France's forthcoming Linux desktop will look like, but this is what my sources and experience ...