"Linux Backdoor Vulnerabilities Expose Open Source Fragility"

A backdoor was discovered in the open source compression library xz, potentially allowing full remote code execution on machines with the vulnerable package. The sophisticated attack involved multiple commits and a pressure campaign on the maintainer, raising concerns about the security of open source software. The identity of the perpetrator is unknown, but the attack suggests the involvement of a well-funded adversary, possibly with ties to a nation-state intelligence agency. This incident highlights the fragility of open source and the challenges of securing software maintained by volunteers.