On the critical path to implant backdoors and the effectiveness of potential mitigation techniques: Early learnings from XZ

Mario Lins, René Mayrhofer, Michael Roland +2

An emerging supply-chain attack due to a backdoor in XZ Utils has been identified. The backdoor allows an attacker to run commands remotely on vulnerable servers utilizing SSH with…