XZ Utils Supply Chain Attack: A Threat Actor Spent Two Years to Implement a Linux Backdoor

from TechRepublic 4 weeks ago

XZ Utils, a tool for compression/decompression, was infiltrated by a backdoor enabling remote code execution via SSH login certificates, impacting versions 5.6.0 and 5.6.1.
TechRepublichttps://www.techrepublic.com/article/xz-backdoor-linux/

The backdoor implementation in XZ Utils, with potential state sponsorship, went undetected for about two years before being discovered serendipitously by a Microsoft engineer.
TechRepublichttps://www.techrepublic.com/article/xz-backdoor-linux/

Read at TechRepublic

#xz-utils #backdoor-implementation #ssh-security #supply-chain-attack #state-sponsored-threats

[

]

[

...

]

XZ Utils Supply Chain Attack: A Threat Actor Spent Two Years to Implement a Linux BackdoorXZ Utils Supply Chain Attack: A Threat Actor Spent Two Years to Implement a Linux Backdoor Briefly

XZ Utils Supply Chain Attack: A Threat Actor Spent Two Years to Implement a Linux Backdoor
XZ Utils Supply Chain Attack: A Threat Actor Spent Two Years to Implement a Linux Backdoor
Briefly