If the reporting is correct, a back door for the XZ compression library only made it to somewhat on the edge Linux distributions (Debian Testing & Unstable and Fedora Rawhide/41 to name a couple). Still, no bueno:
https://hackaday.com/2024/03/29/security-alert-potential-ssh-backdoor-via-liblzma/ #LinuxSecurity #SSHBackdoor #Cybersecurity
Security Alert: Potential SSH Backdoor Via Liblzma
In breaking news that dropped just after our weekly security column went live, a backdoor has been discovered in the xz package, that could potentially compromise SSH logins on Linux systems. The m…
Hackaday
Cybercriminals Ramp Up Exploits Against Serious Zyxel Flaw
More than 100,000 Zyxel networking products could be vulnerable to a hardcoded credential vulnerability (CVE-2020-29583) potentially allowing cybercriminal device takeover.
Threatpost - English - Global - threatpost.com