CVE-2024-3094

CVE-2024-3094 CVE-2024-3094 exposed a backdoor in the XZ compression library, allowing remote SSH access by bypassing authentication. It’s a major supply chain attack affecting Linux systems, highlighting risks in trusted open-source components. The XZ Backdoor: A Supply‑Chain Threat that Reaches...