Backdoor in XZ Utils That Almost Happened

Bruce Schneier writes about a recent potential cybersecurity catastrophe.

"We got extraordinarily lucky this time, but maybe we can learn from the catastrophe that didn’t happen. Like the power grid, communications network, and transportation systems, the software supply chain is critical infrastructure, part of national security, and vulnerable to foreign attack. The U.S. government needs to recognize this as a national security problem and start treating it as such."

Read more in Lawfare.