9.5 CVE-2024-3094
XZ Utils Backdoor — CVE-2024-3094 Deep Dive
How a supply chain attacker spent two years building trust before planting a backdoor in a critical compression library.
Security Feed
Live CVE feed from NVD and CISA KEV, plus curated incident write-ups.
Live CVE Feed
CVEs published in the last 48 hours, refreshed hourly.
Severity:
Date:
Sort:
Loading CVE data…
Per page:
Security Write-ups
Curated incident analyses and vulnerability deep dives.
-
-
Ivanti Connect Secure Zero-Days — CVE-2025-0282 & CVE-2025-0283
Two zero-day vulnerabilities in Ivanti Connect Secure allowed unauthenticated remote code execution before patches were available.