Latest / Security Weekly Podcast Network (Audio)
XZ - Backdoors and The Fragile Supply Chain - PSW #823
As most of you have probably heard there was a scary supply chain attack against the open source compression software called "xz". The security weekly hosts will break down all the details and provide valuable insights.
https://blog.qualys.com/vulnerabilities-threat-research/2024/03/29/xz-utils-sshd-backdoor
https://gynvael.coldwind.pl/?id=782
https://isc.sans.edu/diary/The+xzutils+backdoor+in+security+advisories+by+national+CSIRTs/30800
https://lcamtuf.substack.com/p/technologist-vs-spy-the-xz-backdoor
https://github.com/amlweems/xzbot…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.