April 14, 2024, 3:57 a.m. | Abdul Issa

InfoSec Write-ups - Medium infosecwriteups.com

XZ Backdoor — Breaching Trust in Open-Source Collaborative Development

What The Open-Source Community Can Learn From This Incident

XZ Backdoor — CVE-2024–3094 (Source: Snyk.io)

If you have been reading security feeds, news sites, Reddit or Discord discussions, you would have undoubtedly read about the recent vulnerability in open-source software XZ Utils that has shocked the cybersecurity community. We will explore what it is and why this was significant enough to cause a buzz in the industry.

In March 2024, a …

cybersecurity hacking information security open source vulnerability

SOC 2 Manager, Audit and Certification

@ Deloitte | US and CA Multiple Locations

Senior Security Engineer

@ Core10 | Nashville, Tennessee, United States - Remote

Security Operations Engineer I

@ Jamf | US Remote

IT Security ISSO Specialist (15.10)

@ OCT Consulting, LLC | Washington, District of Columbia, United States

Compliance Officer

@ Aspire Software | Canada - Remote

Security Operations Center (SOC) - AVP

@ Paytm | Noida, Uttar Pradesh