A developer hid malicious code in XZ Utils, a widely trusted software library, by gaining maintainer access through social engineering. The attack exploited the gap between trust and trustworthiness: organizations used the tool without verifying it was actually secure.
More from Anton
EP286 Building an AI-pilled, solo vibe-coded, Clickhouse-based SIEM with Dan Lussier
EP284 Closest Alligator to the Canoe: How Transforming SOC Became P0 for Lloyds Bank
EP282: Debating Coupled or Decoupled SIEM with Alex Hurtado and Christopher Witter
Native vs Third Party Cloud Security Which is REALLY Better #shorts #podcast #CloudSecurity
The Future of Multi Cloud Is Working WITH Each Provider? #shorts #podcast #CloudSecurity
AI Accelerates, Humans Ensure Enforcement Accuracy! #shorts #podcast #cybersecurity #CloudSecurity
Unlock Agentic #SOC Success - Start Right for Sustainable Wins! #shorts #podcast #cybersecurity #AI
AI's Code Revolution - Secure Production & Faster Response! #shorts #podcast #cybersecurity #AI #SOC