What we know about the xz Utils backdoor that almost infected the world
    NIGHTMARE SUPPLY CHAIN ATTACK SCENARIO    —
Malicious updates made to a ubiquitous tool were a few weeks away from going mainstream.
Enlarge / Malware Detected Warning Screen with abstract binary code 3d digital conceptGetty Images
On Friday, researchers revealed the discovery of a backdoor that was intentionally planted in xz Utils, an open-source data compression utility available on almost all installations of Linux and other Unix-like operating systems. The person or people behind this proje...
    Read more at arstechnica.com