In 2024, the Linux world sidestepped a pitfall. A backdoor discovered in XZ Utils — a core utility woven into nearly every major distribution — was just inches away from granting an unknown attacker full admin access across millions of servers worldwide.
The truly terrifying part wasn’t that it was a sophisticated brute-force hack. It was actually a three-year “long game”: a social-engineering sting targeting a single, exhausted maintainer named Lasse Collin.
As TNS contributor Charles Humble explores in our latest feature, the story of attacker “Jia Tan” is a cautionary tale about the fragility of the human element in open-source technology. When Collin found himself solo and unsupported, he accepted help from a stranger who turned out to be a Trojan horse.
From the mystery of Jia Tan’s true identity to the rise of the Commonhaus Foundation — a nonprofit led by Erin Schnabel that provides “legal scaffolding” maintainers need to survive — this deep dive explains why the next big exploit might be sitting in a burnt-out developer’s inbox right now.
Everyone shipped agents. The Pentagon picked sides.
I'm Matt Burns, Director of Editorial at Insight Media Group. Each week, I round up the most important AI developments. And not just the headlines, but what they mean for people and organizations putting this technology to work. The thesis is simple: workers who learn to use AI will define the next era of their industries, and this newsletter is here to help you...
Explore ways to engage with Microsoft at the leading AI conference of the year. Read the Azure Tech Community Blog for all the details on Microsoft-led talks and panels, in-booth sessions, hands-on labs, demos, and more.
Join us on March 18 to explore why real-time context is now the core data primitive for intelligent systems and how purpose-built infrastructure supports modern AI/ML workloads at scale.
Join us live on March 24 to learn what it takes to run agentic AI in production. We'll explore how end-to-end observability, deterministic real-time context, and a centralized control plane enable reliable autonomy.
Rising identity complexity: How CISOs can prevent it from becoming an attacker’s roadmap
Learn how CISOs can combat identity sprawl and credential misuse by transforming IAM from an administrative utility into a proactive, threat-aware defense layer.
