XZ Utils Backdoor Explained: How to Mitigate Risks | John Has Trust Issues
Channel: StrongDM
Date: 2024-04-04

In today's episode, cybersecurity savant John Martinez explains the XZ Utils Backdoor debacle and shares how to mitigate the risks.🚪 

Last week, Red Hat issued a warning regarding the potential presence of a malicious backdoor in the widely utilized data compression software library XZ, which may affect instances of Fedora Linux 40 and the Fedora Rawhide developer distribution. CISA, or Cybersecurity & Infrastructure Security Agency, confirmed and issued an alert for the same CVE.

After two years of slowly contributing both legitimate and, as we now know, malicious code to XZ Utils, this developer nearly brought Linux to its knees. Keep watching for all the details and tips for protecting yourself. 

My blog post: https://www.strongdm.com/blog/xz-backdoor

Sources:
1) https://www.techspot.com/news/102456-linux-could-have-brought-down-backdoor-found-widely.html
2) https://www.theregister.com/2024/03/29/malicious_backdoor_xz/?ref=upstract.com
3) https://news.ycombinator.com/item?id=39865810
4) https://archlinux.org/news/the-xz-package-has-been-backdoored/
5) https://securityaffairs.com/161224/malware/backdoor-xz-tools-linux-distros.html
6) https://arstechnica.com/security/2024/03/backdoor-found-in-widely-used-linux-utility-breaks-encrypted-ssh-connections/

Subscribe for more!