Defense in depth: XZ Utils

Wiz summarizes the XZ Utils backdoor (CVE-2024-3094) discovered by Microsoft, describing how Wiz rapidly added coverage and provided customers with agentless scanning, SBOM inventory search, CI/CD and image scanning, and runtime detection/response options to identify, investigate, and remediate affected systems; the post emphasizes defense-in-depth, proactive CI/CD controls, and runtime monitoring to detect second-stage activity despite early discovery limiting the number of impacted organizations.