12 stories tagged backdoor, newest first.
582 points by abhisek | 192 comments
SafeDep analysis of the compromised LiteLLM 1.107.0 PyPI release, which installed a credential stealer and remote-code backdoor via .pth and sitecustomize files, with IOCs.
110 points by hacb | 107 comments
Kim Zetter's Zero Day article on a roughly $100 million crypto theft via hardware backdoors planted in Ledger wallets sold by resellers in Asia and Europe.
1552 points by lwhsiao | 295 comments
Blog post by developer Roman Imankulov describing a backdoor hidden in code sent as part of a LinkedIn job offer, how it triggers, and the borrowed identities used.
523 points by nolok | 223 comments
TechSpot news article about a researcher's claim that Microsoft built a BitLocker backdoor, with a released YellowKey exploit that bypasses encryption via USB and WinRE.
1116 points by speckx | 312 comments
Anchor Hosting blog post describing how someone acquired 30 WordPress plugins and inserted a backdoor into each of them.
594 points by latexr | 223 comments
The Register news article reporting Apple has filed a complaint with the UK Investigatory Powers Tribunal challenging a government order to break iCloud encryption.
855 points by riverdroid | 345 comments
Truffle Security blog post describing a backdoor found in the Eight Sleep smart bed that allowed remote access, and how the authors removed it.
319 points by ksec | 219 comments
Washington Post article reporting that U.S. lawmakers warn a U.K. demand for a back door into Apple's encrypted cloud data threatens Americans.
1105 points by throw0101d | 574 comments
MacRumors article reporting that the UK government secretly ordered Apple to provide backdoor access to encrypted iCloud content worldwide, citing The Washington Post.
642 points by Despegar | 925 comments
Washington Post exclusive reporting that the U.K. secretly ordered Apple to provide blanket access to users' encrypted iCloud backups worldwide.
468 points by transpute | 267 comments
Rob Mensching blog post, adapted from a Twitter thread, reflecting on the xz/liblzma backdoor as a microcosm of interactions in open source projects.
4122 points by rkta | 1526 comments
Andres Freund's oss-security mailing list post disclosing a backdoor in upstream xz/liblzma tarballs 5.6.0 and 5.6.1 that compromises SSH servers.