"Years-Long Hacking Plot Uncovered: Critical Backdoor Found in Popular Linux Utility"

TL;DR Summary
The widely used file compression software "xz utils" has been found to contain a cleverly embedded backdoor, allowing unauthorized access to shell login connections. The backdoor was discovered in versions 5.6.0 and 5.6.1, added by a GitHub user named "Jia Tan." The malicious code made its way into various Linux distributions and third-party package managers, posing a significant security risk to internet-enabled devices. The discovery has raised concerns about the security of open-source software and the potential for malicious code to be injected during the compiling process.
- 'xz utils' Software Backdoor Uncovered in Years-Long Hacking Plot - UNICORN RIOT Unicorn Riot
- Thwarted supply-chain hack sets off alarm bells across DC POLITICO
- Critical Backdoor Internet Security Breach Accidentally Found Before Implementation Mish Talk
- Linux maintainers assess blast radius of xz-utils backdoor The Stack
- Urgent High Severity Security Backdoor Found In Popular Linux Utility Hot Hardware
Reading Insights
Total Reads
0
Unique Readers
0
Time Saved
10 min
vs 11 min read
Condensed
96%
2,044 → 87 words
Want the full story? Read the original article
Read on Unicorn Riot