Record · corpus.blog/posts/01a0ca8c-ec4a-71c3-8136-6a3415ca369a

Assessing the Y, and How, of the XZ Utils incident

Kaspersky Securelist · published 24 April 2024

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at securelist.com Wayback capture

3blogs citing

First cited: 1 May 2024
Most recent: 12 Sept 2024
Rank this month: not ranked
Links from this post: 30
Words captured: 2,534

Cited by

Blog

In the post

Date

Christian Heilmann

A billion new developers thanks to AI? Read at the source ↗

12 Sept 2024

Christian Heilmann

Eine Milliarde neuer Entwickler dank KI? Linkliste Read at the source ↗

2 Sept 2024

espi.dev

An update on ProtectionStones Read at the source ↗

17 Jun 2024

Cubicgarden.com… – Thoughts and ideas of a dyslexic designer/developer

Public Service Internet monthly newsletter (May 2024) Read at the source ↗

1 May 2024

Links from this post

Link

Host

XZ backdoor story – Initial analysis Read at the source ↗

securelist.com

XZ backdoor: Hook analysis Read at the source ↗

securelist.com

Unraveling the Lamberts Toolkit Read at the source ↗

securelist.com

https://tukaani.org/xz-backdoor/

tukaani.org

DarkHalo after SolarWinds: the Tomiris connection Read at the source ↗

securelist.com

https://www.crowdstrike.com/blog/sunspot-malware-technical-analysis/

crowdstrike.com

Timeline of the xz open source attack Read at the source ↗

research.swtch.com

https://www.mail-archive.com/xz-devel@tukaani.org/

mail-archive.com

Everything I Know About the XZ Backdoor Read at the source ↗

boehs.org

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/04/23152628/XZ_backdoor_2_social_engineering_01.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/04/23152650/XZ_backdoor_2_social_engineering_02.png

media.kasperskycontenthub.com

https://github.com/tukaani-project/xz/pull/53

github.com

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1067708

bugs.debian.org

https://git.tukaani.org/?p=xz.git;a=search;h=HEAD;pg=4;s=jia+tan;st=author

git.tukaani.org

https://x.com/birchb0y/status/1773871381890924872

x.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/04/23152744/XZ_backdoor_2_social_engineering_03.jpg

media.kasperskycontenthub.com

https://www.mail-archive.com/xz-devel@tukaani.org/msg00512.html

mail-archive.com

https://www.mail-archive.com/xz-devel@tukaani.org/msg00555.html

mail-archive.com

https://www.mail-archive.com/xz-devel@tukaani.org/msg00557.html

mail-archive.com

https://www.mail-archive.com/xz-devel@tukaani.org/msg00565.html

mail-archive.com

https://www.mail-archive.com/xz-devel@tukaani.org/msg00566.html

mail-archive.com

https://www.mail-archive.com/xz-devel@tukaani.org/msg00568.html

mail-archive.com

https://www.mail-archive.com/xz-devel@tukaani.org/msg00570.html

mail-archive.com

https://www.mail-archive.com/xz-devel@tukaani.org/msg00562.html

mail-archive.com

https://www.mail-archive.com/xz-devel@tukaani.org/msg00569.html

mail-archive.com

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1067708;msg=17

bugs.debian.org

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1067708;msg=22

bugs.debian.org

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1067708;msg=27

bugs.debian.org

https://securelist.com/webinars/sas-2021-time-to-make-the-donuts/

securelist.com

https://openssf.org/blog/2024/04/15/open-source-security-openssf-and-openjs-foundations-issue-alert-for-social-engineering-takeovers-of-open-source-projects/

openssf.org