A potentially catastrophic cyberattack was narrowly avoided last week, thanks to the discovery of a backdoor in XZ Utils, a widely used compression tool in Linux distributions. The backdoor, inserted by someone operating under the persona “Jia Tan,” has raised concerns among security experts, who believe it may be the work of a nation-state actor, with suspicions pointing to Russia.
In other cybersecurity news, a hacker known as “P4x” successfully took down the internet of North Korea before being revealed as Alejandro Caceres, a Colombian American. Despite pitching a hacking team to the US military, Caceres has now launched his own startup, Hyperion Gray, to pursue his controversial approach to cyberwarfare.
Meanwhile, a bizarre incident involving damaged undersea cables in the Arabian Sea has been linked to Houthi rebels in Yemen. A WIRED analysis found that the cables were likely damaged by the trailing anchor of a cargo ship bombed by the rebels, causing millions to lose internet access.
In a surprising turn of events, a hospital systems administrator pleaded guilty to using another man’s identity for over 30 years. Matthew David Keirans stole the identity of William Woods in 1988, leading to a series of crimes that have now come to light.
And in the tech world, Microsoft has come under fire for failing to prevent an intrusion by China-backed hackers into hundreds of Microsoft Exchange Online email accounts. The company faces criticism for its inadequate security practices and a corporate culture that prioritized other aspects over security.
These are just some of the latest developments in the world of cybersecurity and technology. Stay tuned for more updates on these and other stories.