Attacker Social-Engineered Backdoor Code Into XZ Utils

Unlike the SolarWinds and CodeCov incidents, all that it took for an adversary to nearly pull off a massive supply chain attack was some slick social engineering and a string of pressure emails.

Related Keywords

Kurt Baumgartner ,Lasse Collin ,Hans Jansen ,Lasse Collins ,Jigar Kumar ,Kaspersky ,Openjs Foundation For Javascript ,Microsoft ,Source Security Foundation ,Engineering The Open Source Software Supply Chain ,Open Source Software Supply ,Open Source Security Foundation ,Arch Linux ,Jia Tan ,Dennis Ens ,Wide Cast ,Dark Reading ,