Jigar Kumar News Today

Unlike the SolarWinds and CodeCov incidents, all that it took for an adversary to nearly pull off a massive supply chain attack was some slick social engineering and a string of pressure emails.

The internet is far less secure than it should be.

The Solarwinds attack showed that threat actors are increasingly moving to software supply chain attacks on software, and compromising low-handing fruit in its delivery. These threat actors often…

Read about a supply chain attack that involves XZ Utils, a data compressor widely used in Linux systems, and learn how to protect from this threat.

Posts about xz utils written by Mike Masnick

Posts about jia tan written by Mike Masnick

The Solarwinds attack showed that threat actors are increasingly moving to software supply chain attacks on software, and compromising low-handing fruit in its delivery. These threat actors often…

A maintainer for a Linux-based database identified malicious code hidden in a tool called XZ Utils and stopped a global security breach in its tracks.

Details are starting to emerge about a stunning supply chain attack that sent the open source software community reeling.

Malicious updates made to a ubiquitous tool were a few weeks away from going mainstream.