Backdoor found in xz Utils compression library used across Linux
29 Mar 2024
A Microsoft engineer spots a deliberately planted backdoor in the xz Utils library, narrowly preventing a major open source supply-chain compromise.
Headline-making news in information security, cyber security, privacy, and AI, from 2010 to today.
A Microsoft engineer spots a deliberately planted backdoor in the xz Utils library, narrowly preventing a major open source supply-chain compromise.
A ransomware attack on UnitedHealth’s Change Healthcare cripples claims and prescription processing across the US and exposes data on about 193 million people.
The UK’s National Crime Agency leads Operation Cronos, seizing LockBit’s infrastructure and leak site and turning it against the gang.
Hong Kong police reveal that a finance worker paid out HK$200m after a video call in which every other participant was a deepfake.
OpenAI’s board abruptly fired Sam Altman, saying he had not been consistently candid; he was reinstated days later after staff revolted.
The UK hosted the first global AI Safety Summit at Bletchley Park, where 28 countries and the EU signed a declaration on frontier AI risks.
Hackers used reused passwords to access 23andMe accounts and scraped ancestry data on about 6.9 million people.
A cyber attack on MGM Resorts shut down systems across its US casinos and hotels, costing the company around $100m.
The UK Electoral Commission disclosed that hostile actors had access to its systems for over a year, including registers with data on around 40 million voters.
A zero-day in Progress Software’s MOVEit Transfer let the Clop gang steal data from thousands of organisations, including BBC, BA, and Boots.
Microsoft and Five Eyes agencies warned that a Chinese state-sponsored group, Volt Typhoon, was hiding in US critical infrastructure networks.
Security firms found a trojanised version of 3CX’s widely used phone software, later traced to an earlier supply chain attack.