TechHara·Jun 3, 2024Compression algorithms benchmarkIn the quest for efficient data storage and transfer, compression algorithms play a pivotal role. Today, we’ll benchmark 5 widely-used…
Fariz Iskandar·Apr 25, 2024The XZ Backdoor: A Cautionary Tale of Supply Chain AttacksDitemukannya backdoor pada library XZ Utils yang banyak digunakan menjadi pengingat penting tentang kerentanan yang melekat pada rantai…
Interlynk·Apr 14, 2024xz backdoor: 5 LessonsCVE-2024–3094 — also known as xz-backdoor or xz-trojan — is the most concerning software supply chain attack to date.
Marco A. L. Calamari·Apr 5, 2024Cassandra Crossing/Xz, Solarwinds e l’Armageddon prossimo venturo(582) — Il sabotaggio della libreria Xz è stato sventato, ed ancora una volta i buoni hanno vinto. Ma siamo sicuri che altrove gli…
InIT Security In Plain Englishbyam·Apr 3, 2024My Experience with CVE-2024–3094 and the xz vulnerability checker & fixer scriptsMost of you are probably already aware of the recent CVE-2024–3094. If not, here’s a brief rundown: it’s a significant vulnerability that’s…
InDev GeniusbyLucas Oliveira·Apr 3, 2024Code Heist ; How to add backdoors on Open Source projectsThis last weekend something happening in the Open Source community that was something out of a “heist” movie. A backdoor were found in one…
Nick Felker·Apr 3, 2024Is open-source software ethical?I had this idea mulling in the back of my head for a few weeks but I didn’t know exactly how I wanted to write about it. Then over the…A response icon1A response icon1
InCheckmarx ZerobyYehuda Gelb·Apr 3, 2024March 2024 in Software Supply Chain SecurityIn March 2024, the software supply chain faced unprecedented threats, including one of the most advanced supply chain attacks known to…
Trevor Kutto Hacks·Apr 3, 2024XZ Utils Unmasked: Exposing Social Engineering Tactics and the Infiltration of a Sophisticated…The intricacies of the backdoor within XZ Utilities are notably complex. Notably, the backdoor eludes detection within the XZ GitHub…
InCheckmarx ZerobyJossef Harush Kadouri·Mar 31, 2024Backdoor Discovered in xz: The Most Advanced Supply Chain Attack Known to DateThe xz project, a tool used by many Linux distributions for compressing files, was compromised by a malicious actor who gradually took over…A response icon3A response icon3
