Stay updated with breaking news from Jia Tan. Get real-time updates on events, politics, business, and more. Visit us for reliable news and exclusive interviews.
In a reminder that open source products can carry significant risks beyond intellectual property, a vulnerability in a compression tool commonly used by developers has triggered...
Recent attempts to sabotage free-to-use software components have a leading developers group working to spread the word about exploits.
Unlike the SolarWinds and CodeCov incidents, all that it took for an adversary to nearly pull off a massive supply chain attack was some slick social engineering and a string of pressure emails.
As shown by the xz backdoor, relying on luck is not a sustainable cybersecurity strategy when much of the world depends on secure software.
The repository of the open-source compression utility xz Utils, in which a backdoor was found prior to the Easter weekend, has now been restored to Gi...