"Critical Backdoor Alert: XZ Utilities Compromise Linux Distros"
A backdoor vulnerability (CVE-2024-3094) has been found in XZ Utils, the XZ format compression utilities included in many Linux distributions, allowing unauthorized access to the entire system remotely. The malicious code was discovered in versions 5.6.0 and 5.6.1 of the xz libraries, affecting various Linux distros. Red Hat, SUSE, and Debian have released fixes, while CISA has advised downgrading to uncompromised versions and monitoring for malicious activity. Kali Linux users are urged to apply the latest updates to address the issue.