03/29

oss-security - backdoor in upstream xz/liblzma leading to ssh server compromise

https://www.openwall.com/lists/oss-security/2024/03/29/4
oss-security - backdoor in upstream xz/liblzma leading to ssh server compromise

Red Hat, CISA Warn of XZ Utils Backdoor | Decipher

https://duo.com/decipher/red-hat-warns-of-malicious-code-in-xz-utils
Red Hat, CISA Warn of XZ Utils Backdoor | Decipher

Reported Supply Chain Compromise Affecting XZ Utils Data Compression Library, CVE-2024-3094 | CISA

https://www.cisa.gov/news-events/alerts/2024/03/29/reported-supply-chain-compromise-affecting-xz-utils-data-compression-library-cve-2024-3094
Reported Supply Chain Compromise Affecting XZ Utils Data Compression Library, CVE-2024-3094 | CISA

SSTIC2024 » Challenge 2024

https://www.sstic.org/2024/challenge
SSTIC2024 » Challenge 2024

PyPI Halts Sign-Ups Amid Surge of Malicious Package Uploads Targeting Developers

https://thehackernews.com/2024/03/pypi-halts-sign-ups-amid-surge-of.html
PyPI Halts Sign-Ups Amid Surge of Malicious Package Uploads Targeting Developers

Prof Ross Anderson, RIP – Dropsafe

https://alecmuffett.com/article/109513
Prof Ross Anderson, RIP – Dropsafe

Dormakaba Locks Used in Millions of Hotel Rooms Could Be Cracked in Seconds

https://thehackernews.com/2024/03/dormakaba-locks-used-in-millions-of.html
Dormakaba Locks Used in Millions of Hotel Rooms Could Be Cracked in Seconds

Beware! Backdoor found in XZ utilities used by many Linux distros (CVE-2024-3094) - Help Net Security

https://www.helpnetsecurity.com/2024/03/29/cve-2024-3094-linux-backdoor/
Beware! Backdoor found in XZ utilities used by many Linux distros (CVE-2024-3094) - Help Net Security

Red Hat warns of backdoor in XZ tools used by most Linux distros

https://www.bleepingcomputer.com/news/security/red-hat-warns-of-backdoor-in-xz-tools-used-by-most-linux-distros/
Red Hat warns of backdoor in XZ tools used by most Linux distros