Search: “XZ Utils”

43 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 31 Malware 22 Exploit / PoC 10 Ransomware 8 Data breach 3 Phishing & fraud 2 Research 1 Threat actor 1

SeverityAll critical 43 high 33 medium 1 low 1 info 0

What we know about the xz Utils backdoor that almost infected the world

Ars Technica · SecurityApr 1, 06:55 UTC · Apr 1, 2024Malware

55

Backdoor in XZ Utils That Almost Happened

Schneier on SecurityApr 15, 00:00 UTC · Apr 15, 2024Malware1

55

Beware! Backdoor found in XZ utilities used by many Linux distros (CVE-2024-3094)

Help Net SecurityApr 8, 13:25 UTC · Apr 8, 2024Vulnerability CVE-2024-3094

60

Researchers stop ‘credible takeover attempt’ similar to XZ Utils backdoor incident

The RecordApr 15, 19:44 UTC · Apr 15, 2024Malware

55

Researchers Spot XZ Utils Backdoor in Dozens of Docker Hub Images, Fueling Supply Chain Risks

The Hacker NewsAug 15, 00:00 UTC · Aug 15, 2025Malware CVE-2024-3094

60

XZ Utils Backdoor

Schneier on SecurityApr 10, 08:06 UTC · Apr 10, 2024Malware

55

Week in review: Backdoor found in XZ utilities, weaponized iMessages, Exchange servers at risk

Help Net SecurityMar 31, 00:00 UTC · Mar 31, 2024Malware in the wildCVE-2024-3094 CVE-2023-48022 CVE-2023-24955

60

Open Source Leaders Warn of XZ Utils

Infosecurity MagazineApr 16, 10:15 UTC · Apr 16, 2024Vulnerability

55

Focus on what matters most: Exposure management and your attack surface

Help Net SecurityApr 8, 17:17 UTC · Apr 8, 2025Exploit / PoC CVE-2024-3400

60

Focus on What Matters Most: Exposure Management and Your Attack Surface

The Hacker NewsAug 23, 10:55 UTC · Aug 23, 2024Exploit / PoC CVE-2024-3400

60

OpenJS Foundation Targeted in Potential JavaScript Project Takeover Attempt

The Hacker NewsApr 17, 05:00 UTC · Apr 17, 2024Vulnerability

55

Paid open-source maintainers spend more time on security

Help Net SecuritySep 23, 00:00 UTC · Sep 23, 2024Vulnerability

55

Polyfill, Cloudflare trade barbs after reports of supply chain attack threatening 100,000 websites

The RecordJun 27, 00:00 UTC · Jun 27, 2024Vulnerability

55

Third-Party Cyber Attacks: The Threat No One Sees Coming

The Hacker NewsJul 30, 09:59 UTC · Jul 30, 2024Ransomware

60

⚡ Weekly Recap: NFC Fraud, Curly COMrades, N

The Hacker NewsNov 20, 10:46 UTC · Nov 20, 2025Phishing & fraud in the wildCVE-2025-8875 CVE-2025-8876 CVE-2025-26633+36 CVEs

60

Week in review: Palo Alto Networks firewalls under attack, Microsoft patches two exploited zero-days

Help Net SecurityApr 14, 00:00 UTC · Apr 14, 2024Exploit / PoC in the wildCVE-2024-3400 CVE-2024-29988 CVE-2024-26234+1 CVEs

60

Establishing a security baseline for open source projects

Help Net SecurityMay 13, 00:00 UTC · May 13, 2024Vulnerability

55

SSHamble: Open-source security testing of SSH services

Help Net SecurityAug 8, 00:00 UTC · Aug 8, 2024Vulnerability

55

Leveraging Wazuh for Zero Trust security

The Hacker NewsNov 5, 11:00 UTC · Nov 5, 2024Data breach in the wildCVE-2024-3094

60

Malicious packages in open

CyberScoopOct 10, 21:42 UTC · Oct 10, 2024Exploit / PoC

60

New open-source project takeover attacks spotted, stymied

Help Net SecurityApr 16, 00:00 UTC · Apr 16, 2024Vulnerability

55

Senate Intel chair urges national cyber director to safeguard against open

CyberScoopDec 18, 18:35 UTC · Dec 18, 2025Exploit / PoC in the wild

60

Review of supply chain attacks in 2024 and potential disruption scenarios for 2025

Kaspersky SecurelistDec 9, 10:54 UTC · Dec 9, 2024Data breach in the wild

60

Over 110,000 Websites Affected by Hijacked Polyfill Supply Chain Attack

The Hacker NewsJun 28, 04:05 UTC · Jun 28, 2024Vulnerability CVE-2024-34102 CVE-2024-2961

60

Advanced threat predictions for 2025

Kaspersky SecurelistNov 25, 10:02 UTC · Nov 25, 2024Exploit / PoC CVE-2024-23222 CVE-2024-23225 CVE-2024-23296+3 CVEs

60

Growing Up The Hard Way

The Hacker NewsAug 7, 11:55 UTC · Aug 7, 2026Vulnerability1

55

A little-known npm package was North Korea’s warm

CyberScoopJul 29, 21:09 UTC · Jul 29, 2026Exploit / PoC in the wild

60

What public money does to open-source projects

Help Net SecurityJul 16, 00:00 UTC · Jul 16, 2026Vulnerability

55

EU unveils tech sovereignty package to cut reliance on US, Chinese suppliers

The RecordJun 5, 13:43 UTC · Jun 5, 2026Vulnerability

55

Shai-Hulud worm returns stronger and more automated than ever before

CyberScoopNov 24, 22:45 UTC · Nov 24, 2025Data breach in the wild

60

What happens when vulnerability scores fall apart?

Help Net SecurityNov 24, 00:00 UTC · Nov 24, 2025Vulnerability

55

The npm incident frightened everyone, but ended up being nothing to fret about

CyberScoopSep 10, 14:35 UTC · Sep 10, 2025Exploit / PoC in the wild

60

Security Affairs newsletter Round 537 by Pierluigi Paganini

Security AffairsAug 17, 00:26 UTC · Aug 17, 2025Ransomware in the wildCVE-2025-25256

60

Unverified code is the next national security threat

CyberScoopJun 9, 15:56 UTC · Jun 9, 2025Exploit / PoC in the wild

60

Here’s how carefully concealed backdoor in fake AWS files escaped mainstream notice

Ars Technica · SecurityJul 15, 00:00 UTC · Jul 15, 2024Malware

55

New OpenSSH Vulnerability Could Lead to RCE as Root on Linux Systems

The Hacker NewsJul 9, 04:22 UTC · Jul 9, 2024Vulnerability CVE-2024-6387 CVE-2006-5051 CVE-2008-4109

60

New 'Siren' mailing list aims to share threat intelligence for open source projects

The RecordMay 20, 14:20 UTC · May 20, 2024Exploit / PoC

60

Week in review: Palo Alto firewalls mitigation ineffective, PuTTY client vulnerable to key recovery attack

Help Net SecurityApr 21, 00:00 UTC · Apr 21, 2024Ransomware CVE-2024-3400 CVE-2024-31497 CVE-2024-29204+1 CVEs

60

What’s the deal with the massive backlog of vulnerabilities at the NVD?

Cisco TalosApr 19, 14:30 UTC · Apr 19, 2024Vulnerability in the wild

60

Other Attempts to Take Over Open Source Projects

Schneier on SecurityApr 18, 11:06 UTC · Apr 18, 2024Vulnerability

55