#XZUtils
LightNews LightNews
lizrice.com
What do you do when you learn about a new 0-day like the xzutils CVE? Come to 0.14 at 11am to see how Tetragon makes it easier to cope. There will be demos! #OSSsummit #eBPF
Title slide "Coping with Zero-Days with Cilium Tetragon"
September 17, 2024 at 6:23 AM
neustradamus.bsky.social
#XZUtils 5.6.2 (stable) has been released ( #xz / #LZMAUtils / #LZMA / #LZMA2 / #DataCompression / #CVE / #CVE20243094) tukaani.org/xz/
XZ Utils
tukaani.org
May 29, 2024 at 7:48 PM
thenewoil.org
#dockerhub still hosts dozens of #linux images with the #xz #backdoor

https://www.bleepingcomputer.com/news/security/docker-hub-still-hosts-dozens-of-linux-images-with-the-xz-backdoor/

#cybersecurity #foss #docker #xzutils
Docker Hub still hosts dozens of Linux images with the XZ backdoor
The XZ-Utils backdoor, first discovered in March 2024, is still present in at least 35 Linux images on Docker Hub, potentially putting users, organizations, and their data at risk. [...]
www.bleepingcomputer.com
August 14, 2025 at 2:03 PM
matricedigitale.bsky.social
XZ Utils introduce nuove opzioni di build multipiattaforma, mentre Rescuezilla 2.6 migliora la compatibilità hardware e UEFI con Ubuntu 24.10.

#backup #clonezilla #immagineISO #Linux #Partclone #rescuezilla #Rescuezilla26 #SecureBoot #Ubuntu2410 #XZUtils
www.matricedigitale.it/tech/xz-util...
March 26, 2025 at 7:30 AM
clainchoupi.bsky.social
En plus de faire des lives recaps du #DevFestNantes, @ponceto91.bsky.social nous présente l'anatomie de la faille de l'enfer sur xzutils ! Terrifiant 🙀
Olivier Poncet sur la scène du DevFest Nantes
October 18, 2024 at 1:14 PM
6or6z.bsky.social
the jstor logo looks like the pfp from jia tan the group from the xzutils backdoor shit
September 20, 2024 at 12:32 AM
sosordinet.bsky.social
“Même un code malveillant de courte durée peut rester longtemps inaperçu” : DockerHub recèlerait la porte dérobée XZ dans les paquets #xzutils !

blog.sosordi.net/2025/08/meme...

#securite #Internet #Linux #Docker
August 14, 2025 at 1:34 PM
shawnbrink.bsky.social
#Microsoft FAQ and guidance for #XZUtils backdoor #vulnerability in #Linux distributions
www.elevenforum.com/t/microsoft-...
April 2, 2024 at 1:33 PM
nicileaks.eu
Die CVE-2024-3094 ist ja echt wild. Gar nicht primär das technische (das auch!), sondern wie strategisch das anscheinend geplant wurde. PsyOp vom Feinsten. #xz #xzutils
April 2, 2024 at 8:37 AM
neustradamus.bsky.social
#XZUtils 5.8.1 (stable) has been released ( #xz / #LZMAUtils / #LZMA / #LZMA2 / #DataCompression ) tukaani.org/xz/
XZ Utils
tukaani.org
April 8, 2025 at 11:39 PM
neustradamus.bsky.social
#XZUtils 5.6.4 (stable) has been released ( #xz / #LZMAUtils / #LZMA / #LZMA2 / #DataCompression ) tukaani.org/xz/
XZ Utils
tukaani.org
February 23, 2025 at 5:19 AM
gtbarry.bsky.social
XZ Utils had been deliberately sabotaged by one of its developers, a move that could have carved out a secret door to millions of servers across the internet

#Microsoft #XZUtils #backdoor #software #developer #security #cybersecurity #hackers #hacking

www.reuters.com/technology/c...
Why a near-miss cyberattack put US officials and the tech industry on edge
German software developer Andres Freund was running some detailed performance tests last month when he noticed odd behavior in a little known program. What he found when he investigated has sent shudders across the software world and drawn attention from tech executives and government officials.
www.reuters.com
April 9, 2024 at 2:08 PM
aprotim.com
The latter is particularly concerning to me because we just don't know what potential adversarial training can do. If somebody cracks that, with just some commits to public GitHub repos, they could seed vulnerabilities/backdoors that make the XZUtils operation look quaint.
August 8, 2025 at 3:58 AM
ruthmottram.bsky.social
Was talking #Linux to a friend and mentioned most of the internet is built on it. He, a well-informed person, had never heard about #XZutils attack but #Zetland have a very nice summary (in Danish, DeepL works well) so I'm sharing it again here
🎁
Et halvt sekund reddede internettet fra kollaps. Nogen havde plantet en tidsindstillet bombe. Men hvem?
I foråret saboterede en tysk computeringeniør, hvad der kunne have været et af de mest ødelæggende cyberangreb. Det var rent tilfælde. Hvorfor er verden sådan? Det undersøger vi i dag.
www.zetland.dk
June 1, 2024 at 10:20 AM
jgreig.bsky.social
We still need to know what country was behind the #Xz vulnerability and whether it was ever used to breach any orgs #XZutils

therecord.media/malicious-ba...
Malicious backdoor code embedded in popular Linux tool, CISA and Red Hat warn
The malicious code affects XZ Utils, a tool that helps compress large file formats which is present in nearly every Linux distribution.
therecord.media
April 1, 2024 at 4:15 PM
cybersecboardrm.bsky.social
The Mystery of ‘Jia Tan,’ the XZ Backdoor Mastermind
www.wired.com/story/... #cybersecurity #nationstate #software #malware #backdoors #XZUtils
April 4, 2024 at 2:00 PM
nogajun.mastodon.social.ap.brid.gy
バックドア付きXZ utilsがDockerイメージに残っている話。バックドアが付いたままイメージ作って更新されなければ、そりゃ残るよなぁ #linux #docker #xzutils

Persistent Risk: XZ Utils Backdoor Still Lurking in Docker Images: https://www.binarly.io/blog/persistent-risk-xz-utils-backdoor-still-lurking-in-docker-images
August 19, 2025 at 2:33 AM
neustradamus.bsky.social
Warning, #XZUtils 5.6.0 has a #backdoor (#xz/#LZMAUtils/#LZMA/#LZMA2/#DataCompression), please revert quickly! #CVE20243094 (CVE-2024-3094) www.openwall.com/lists/oss-se...
March 30, 2024 at 10:56 AM
neroqc.bsky.social
Backdoor in XZ Utils That Almost Happened
schneier.com/blog/archive...
#Infosec #Security #Cybersecurity #CeptBiro #Backdoor #XZUtils #SchneierOnSecurity
Backdoor in XZ Utils That Almost Happened - Schneier on Security
schneier.com
April 11, 2024 at 12:36 PM
neroqc.bsky.social
CVE-2024-3094: RCE Vulnerability Discovered in XZ Utils
kratikal.com/blog/cve-202...
#Infosec #Security #Cybersecurity #CeptBiro #RCE #Vulnerability #XZUtils
CVE-2024-3094: RCE Vulnerability Discovered in XZ Utils - Kratikal Blogs
CVE-2024-3094 is a critical Remote Code Execution (RCE) vulnerability found in the popular open-source XZ Utils library.
kratikal.com
April 9, 2024 at 12:36 PM
andranglin.bsky.social
CVE-2025-31115: XZ Utils Hit Again with High-Severity Multithreaded Decoder Bug
A critical flaw in XZ Utils affects multithreaded decoding, risking system crashes and potential exploitation. Patch your systems now.

securityonline.info/cve-2025-311...
#Cybersecurity #XZUtils #Vulnerability
CVE-2025-31115: XZ Utils Hit Again with High-Severity Multithreaded Decoder Bug
Learn about the XZ Utils vulnerability and its impact on data compression tools. Understand CVE-2025-31115 and its risks.
securityonline.info
April 7, 2025 at 7:20 AM
skrozoc.bsky.social
On peut aussi parler de xzutils où on est passé à ça de la catastrophe... (en plus c'est tellement plus un scénario de roman d'espionnage qu'un pauvre déploiement qui a foiré)
July 19, 2024 at 11:33 AM
matricedigitale.bsky.social
Backdoor in XZ Utils attiva in Docker Hub, attacchi brute-force su Fortinet e 3300 NetScaler vulnerabili aggravano l’allerta cyber globale.

#backdoor #bruteforce #CitrixBleed #fortinet #Matrix #NetScaler #supplychain #XZUtils
www.matricedigitale.it/2025/08/13/b...
August 13, 2025 at 11:35 AM
erikmeusel.bsky.social
Fehler zu beheben, sie weiter zu entwickeln, zu auditieren, zu portieren, zu pflegen.

Beispiele wie die Backdoor in den xzutils legen schonungslos offen, dass wir teilweise zentrale Komponenten der IT Security, ➡️
May 10, 2025 at 6:44 AM
pablolarah.bsky.social
🐛 What we know about the xz Utils backdoor that almost infected the world
by Dan Goodin @dangoodin001 dan.goodin@arstechnica.com at @arstechnica
#XZbackdoor #xzUtils #malware

arstechnica.com/security/202...
Dark green text on pink background: What we know about the xz Utils backdoor that almost infected the world
April 1, 2024 at 11:02 PM