Mike Sheward (@[email protected])

“Are we impacted by this XZ vulnerability?” “No. Fortunately, our patching process prevented the malicious code from ever getting anywhere close to our environment.” “But we don’t have a patching process?” “Exactly.”

Infosec Exchange
OpenEmbedded Layer Index - xz

Everything I know about the XZ backdoor

Please note: This is being updated in real-time. The intent is to make sense of lots of simultaneous discoveries

@kerker00 https://youtu.be/jqjtNDtbDNI?si=rbAgeMhiieGVd7gc

Das ist schon echt beeindruckend gut versteckt. Meine Güte. Insofern eher erstaunlich, dass es schon nach zwei Versionen entdeckt wurde. Durch Timing-Auffälligkeiten!

malicious backdoor found in ssh libraries

YouTube