"Unintentional Discovery of Critical Internet Security Breach Averts Potential Disaster"

A Microsoft engineer discovered a heavily disguised backdoor security breach in the widely used file compression software package "xz utils," which could have allowed remote access to entire systems. The breach was found to have been introduced over a series of commits to the Tukaani Project on GitHub by a user named JiaT75. The discovery led to an industry-wide reckoning with the common practice of relying on overworked individuals for open source projects, prompting the US Cybersecurity & Infrastructure Security Agency to issue an alert on the supply chain compromise affecting XZ Utils data compression library.