Post
Faisal Yahya
faisalyahya.com
did:plc:xythugrpjg5fb5j4ghdgynim
Look at the XZ Utils backdoor (CVE-2024-3094). The attack vector wasn't a zero-day exploit against a hardened perimeter. It was a multi-year social engineering campaign targeting an exhausted open-source maintainer. The threat was human.
2026-06-27T05:01:44.069Z