Attacker Social-Engineered Backdoor Code Into XZ Utils
Unlike the SolarWinds and CodeCov incidents, all that it took for an adversary to nearly pull off a massive supply chain attack was some slick social engineering and a string of pressure emails.
Stay updated with breaking news from Jigar Kumar. Get real-time updates on events, politics, business, and more. Visit us for reliable news and exclusive interviews.
Unlike the SolarWinds and CodeCov incidents, all that it took for an adversary to nearly pull off a massive supply chain attack was some slick social engineering and a string of pressure emails.
The internet is far less secure than it should be.
The Solarwinds attack showed that threat actors are increasingly moving to software supply chain attacks on software, and compromising low-handing fruit in its delivery. These threat actors often…
Read about a supply chain attack that involves XZ Utils, a data compressor widely used in Linux systems, and learn how to protect from this threat.