Supply chains and watering holes
On the apparently subtle distinction between supply chains and watering holes
CVE-2024-3094: Backdoor Attack Against xz and liblzma
sonatype.comLearn about a targeted backdoor supply chain attack against the popular XZ compression utility seen in many Linux distributions such as fedora and debian.