XZ Utils backdoor

[
  {
    "date": "2026-07-24Z",
    "views": 996
  },
  {
    "date": "2026-07-25Z",
    "views": 412
  },
  {
    "date": "2026-07-26Z",
    "views": 403
  },
  {
    "date": "2026-07-27Z",
    "views": 654
  },
  {
    "date": "2026-07-28Z",
    "views": 123078
  }
]

{
  "searchParameters": {
    "q": "XZ Utils backdoor",
    "type": "search",
    "autocorrect": false,
    "tbs": "qdr:w",
    "engine": "google"
  },
  "organic": [
    {
      "title": "Open Source, AI, and the Question of Security Readiness",
      "link": "https://www.linkedin.com/pulse/living-prayer-open-source-ai-question-security-readiness-manoj-g-s-i6qxc?utm_source=rss&utm_campaign=articles_sitemaps",
      "snippet": "Software supply chain is now an attack path: XZ Utils backdoor, compromised npm and PyPI packages, and malicious activity involving AI tooling illustrate a ...",
      "position": 1
    },
    {
      "title": "Software Supply Chain Security (SCS) Guide",
      "link": "https://www.harness.io/harness-devops-academy/what-is-software-supply-chain-security",
      "snippet": "Compromised maintainer accounts and malicious contributions. The XZ Utils backdoor is the clearest recent example: a contributor spent roughly two years ...",
      "date": "6 days ago",
      "position": 2
    },
    {
      "title": "SOFTWARE SUPPLY CHAINS ARE BECOMING A ...",
      "link": "https://cyberkach.com/blog/software-supply-chains-are-becoming-a-security-boundary",
      "snippet": "The attempted compromise of XZ Utils highlighted a different aspect of software supply chain risk. Over several years, an attacker established credibility ...",
      "date": "5 days ago",
      "position": 3
    },
    {
      "title": "Supply Chain Cyber Attacks: How Indian Enterprises Can ...",
      "link": "https://pjnetworks.com/supply-chain-cyber-attacks-how-indian-enterprises-can-assess-and-harden-third-party-vendor-risk/",
      "snippet": "The economics favour attackers: compromising one well-placed vendor yields access to hundreds of enterprises. The 2024 XZ Utils backdoor showed that even ...",
      "date": "4 days ago",
      "position": 4
    },
    {
      "title": "Sygnia Finds Critical Flaws in Claude-Built Application",
      "link": "https://www.sygnia.co/press-release/sygnia-penetration-test-claude-vibe-coded-vulnerabilities/",
      "snippet": "XZ Utils Backdoor – Advisory for Mitigation and Response. Threat Reports and Advisories. XZ Utils Backdoor – Advisory for Mitigation and Response.",
      "date": "14 hours ago",
      "position": 5
    },
    {
      "title": "In early 2024 a Microsoft engineer named Andres Freund ...",
      "link": "https://x.com/cyber_razz/status/2082082313933103567",
      "snippet": "... XZ Utils, a compression library present on virtually every Linux system on ... backdoor hidden inside the build process itself. Not in the source code ...",
      "position": 6
    },
    {
      "title": "The Linux Foundation",
      "link": "https://www.facebook.com/TheLinuxFoundation/posts/ai-is-changing-open-source-security-in-two-directions-at-once-at-open-source-sum/1696791599159569/",
      "snippet": "The infamous XZ Utils backdoor (2024) is a chilling reminder of how a single compromised maintainer can inject malicious code into core Linux components ...",
      "position": 7
    },
    {
      "title": "Keycloak + Sigstore: Binding Human Identity to Artifact ...",
      "link": "https://www.improving.com/es-mx/thoughts/keycloak-sigstore-identity-based-artifact-signing/",
      "snippet": "In 2024, a backdoor was found deliberately planted in xz-utils, a compression library embedded in most Linux distributions, inserted by someone who'd spent ...",
      "date": "2 days ago",
      "position": 8
    },
    {
      "title": "Modern Software Registries are a Trust Service",
      "link": "https://redmonk.com/kholterhoff/2026/07/28/modern-software-registries-trust-service/",
      "snippet": "The xz-utils backdoor remains the sharpest illustration of this, and it ... But as the xz backdoor and this year's provenance-carrying worms ...",
      "date": "15 hours ago",
      "position": 9
    },
    {
      "title": "The Backdoor That Almost Compromised Linux - XZ Utils",
      "link": "https://www.youtube.com/watch?v=Qy77sac9EUA",
      "snippet": "XZ Utils, CVE-2024-3094, the supply chain attack that nearly changed Linux forever. #xzutils #linux #cybersecurity #ethicalhacking #infosec.",
      "position": 10
    }
  ],
  "credits": 1
}