CROC Talks - XZ Utils backdoor explained

The backdoor in XZ Utils is shaking the industry 🔔
How could we not talk about it?
Tune in to the special unscheduled episode of Crying Out Cloud with Eden Naftali and Amitai Cohen as they delve into the stealthy supply chain attack!
In this episode:
🔍 The Alert from CISA regarding CVE-2024-3094, a vulnerability in XZ Utils Data Compression Library versions 5.6.0 and 5.6.1
🛑 The potential risks posed by the embedded malicious code and the unauthorized access it may grant to affected systems
🛡️ Security Team Action Plans
Tune in now!

[@benpeirce3050]

Excellent overview. You 2 are amazing. The most impressive feature is the social engineering. pls comment in another video. ☺

[@xCheddarB0b42x]

Barring another thunderous event, this one was the story of the year in Security IMO.