FeedBagel

All Topics

Art

The XZ backdoor CVE-2024-3094

2y agoen

programming

Source

SnykThe XZ backdoor CVE-2024-3094snyk.io

Snippet from the RSS feed

On the 29th of March 2024, the high-stakes investment and prolonged campaign to plant a backdoor in the Linux software library liblzma to gain access to multiple operating systems via Linux distributions was carried out by a malicious actor.

You might also wanna read

Malicious Backdoor Discovered in XZ Utils Compression Software Affecting Linux Systems

The article details the discovery of a sophisticated backdoor in the XZ Utils compression software, a critical open-source component used in

en.wikipedia.org·6mo ago

Ongoing Cybersecurity Threat: XZ Utils Backdoor Persists in Docker Images

The article discusses the lingering threat of the XZ Utils backdoor, initially discovered in March last year, which was inserted into the li

binarly.io·10mo ago

Analyzing How Better Git and Debian Packaging Practices Could Have Detected the XZ Backdoor

This article analyzes the 2024 XZ Utils backdoor incident and examines whether improved Git and Debian packaging practices could have detect

optimizedbyotto.com·8mo ago

GNU IFUNC, Not xz-utils, Is the Real Culprit Behind CVE-2024-3094 Backdoor

This article argues that the real culprit behind CVE-2024-3094 (the xz-utils backdoor) is not the malicious code injection itself, but rathe

GitHub·2mo ago

China-Linked SprySOCKS Backdoor Expands from Linux to Windows with Kernel-Level Rootkit Variants

ESET researchers discovered in June 2026 that the China-linked SprySOCKS Linux backdoor has evolved into two new Windows variants (WIN_DRV a

undercodetesting.com·17d ago

Exploiting CVE-2024-50264: Using Kernel-Hack-Drill to Overcome Linux Kernel Vulnerability Challenges

This technical article details the exploitation of CVE-2024-50264, a challenging Linux kernel vulnerability that won the Pwnie Award 2025 fo

a13xp0p0v.github.io·10mo ago

Comments

No comments yet. Be the first.