News 2 min read XZ Utils 2.0: the supply chain backdoor that almost broke everything CVE-2026-3094 reveals a backdoor in XZ Utils, a compression utility present on nearly all Linux systems. Analysis of a historic near-miss. March 24, 2026