Backdoor in XZ Utils poses security risk in Linux

CISA warns of a backdoor in XZ Utils, a Linux file compression tool, potentially allowing system access. Red Hat confirms the vulnerability affects certain beta Linux versions. Microsoft engineer discovers the flaw. Malicious code introduced by a long-time XZ contributor. CISA advises downgrading to secure versions. GitHub investigates exploit repository closure. Suspicions of nation-state involvement prompt FBI and NSA investigation. Open-source tool security debates reignite.