Tag

backdoor-analysis

Safeguard articles tagged "backdoor-analysis" — guides, analysis, and best practices for software supply chain and application security.

1 article

The XZ Utils Backdoor: A Timeline and Technical Post-Mortem

A technical post-mortem of CVE-2024-3094, the XZ Utils backdoor: how a trusted maintainer identity was used to plant a supply chain backdoor in sshd.