Guides and notes from Aperca.

The XZ Backdoor Didn't Sneak Past Your Security Team — It Walked Past Your Build Process

A single obfuscated script injected during `configure` nearly handed attackers SSH access to millions of Linux servers. Two years later, most teams are still auditing the wrong thing.