open-source

The XZ Utils Backdoor: One Year Later, What Have We Learned?

A year after the discovery of the XZ Utils supply chain attack, examining what changed in open source security and what still keeps maintainers up at night.