CVE-2024-3094 2

Vulnerability (CVE)

Threat Brief: Vulnerability in XZ Utils Data Compression Library Impacting Multiple Linux Distributions (CVE-2024-3094)

On March 28, 2024, Red Hat announced CVE-2024-3094, a supply chain compromise in XZ Utils versions 5.6.0 and 5.6.1 rated a critical CVSS score of 10, in which malicious code modifies functions during the liblzma build process and may allow unauthorized...

Data Breaches

Connecting the Dots: Securing the Overlooked Corners of the Software Development Lifecycle (SDLC) Supply Chain

Cyber Risks Unit 42 Palo Alto Networks

Unit 42 reports that supply chain attacks have shifted in scale and velocity over the last 12-18 months, with attackers targeting developer tools and build processes rather than finished software - citing the XZ Utils backdoor (CVE-2024-3094), the Axios...

Malware