EPISODE · Apr 1, 2024 · 7 MIN

ISC StormCast for Monday, April 1st, 2024

from SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast) · host Dr. Johannes B. Ullrich

xz-utils Backdoor CVE-2024-3094 https://www.openwall.com/lists/oss-security/2024/03/29/4 https://tukaani.org/xz-backdoor/ https://gist.github.com/thesamesam/223949d5a074ebc3dce9ee78baad9e27 Backdoor reverse analysis https://bsky.app/profile/did:plc:x2nsupeeo52oznrmplwapppl/post/3kowjkx2njy2b YARA Rule https://github.com/byinarie/CVE-2024-3094-info/blob/main/CVE-2024-3094.yar Social Engineering Attempts to Include Backdoor in Distros https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1067708 https://news.ycombinator.com/item?id=39866275 Github Repo (now disabled) https://github.com/tukaani-project/xz Statements from Distributions https://www.kali.org/blog/about-the-xz-backdoor/ https://archlinux.org/news/the-xz-package-has-been-backdoored/ https://access.redhat.com/security/cve/CVE-2024-3094 https://bugs.gentoo.org/928134 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1068024

Episode metadata supplied by the publisher feed · Published Apr 1, 2024

Embed this episode

Attribution link and audio player

What this episode covers

Daily 5 min cyber security news summary. News, patches, vulnerabilities and trends in information and network security. xz-utils Backdoor (CVE-2024-3094)

Distinct summary based on available episode metadata or transcript content.

NOW PLAYING

ISC StormCast for Monday, April 1st, 2024

0:00 7:37

1×

No transcript for this episode yet

We transcribe on demand. Request one and we'll notify you when it's ready — usually under 10 minutes.

Share this episode

Similar Episodes

No similar episodes found.

Similar Podcasts

No similar podcasts found.

Frequently Asked Questions

How long is this episode of SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)?

This episode is 7 minutes long.

When was this SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast) episode published?

This episode was published on April 1, 2024.

Is there a transcript available for this episode?

Yes, a full transcript is available for this episode. You can read the complete transcript on the episode page.

Can I download this SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast) episode?

Yes. Use the download control on the episode player to save the publisher-provided media file.

URL copied to clipboard!