Attacker Social-Engineered Backdoor Code Into XZ Utils : vim

Unlike the SolarWinds and CodeCov incidents, all that it took for an adversary to nearly pull off a massive supply chain attack was some slick social engineering and a string of pressure emails.

Related Keywords

Kurt Baumgartner , Lasse Collin , Hans Jansen , Lasse Collins , Jigar Kumar , Kaspersky , Openjs Foundation For Javascript , Microsoft , Source Security Foundation , Engineering The Open Source Software Supply Chain , Open Source Software Supply , Open Source Security Foundation , Arch Linux , Jia Tan , Dennis Ens , Wide Cast , Dark Reading ,