1 Matching Annotations
  1. Apr 2026
    1. The industry average time to detect a supply chain breach is 267 days. SolarWinds went undetected for 14 months. XZ Utils took two years to surface.

      令人惊讶的是:软件供应链漏洞的平均检测时间长达267天,有些攻击如XZ Utils甚至需要两年才被发现。这意味着攻击者有充足的时间在系统中潜伏并造成广泛损害,而组织往往在损害发生后才意识到问题。