{"id":42068,"date":"2021-07-31T07:14:04","date_gmt":"2021-07-31T07:14:04","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/sysadmins-why-not-simply-verify-theres-no-backdoor-in-every-program-you-install-and-thus-avoid-any-cyber-drama\/"},"modified":"2021-07-31T07:14:04","modified_gmt":"2021-07-31T07:14:04","slug":"sysadmins-why-not-simply-verify-theres-no-backdoor-in-every-program-you-install-and-thus-avoid-any-cyber-drama","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/sysadmins-why-not-simply-verify-theres-no-backdoor-in-every-program-you-install-and-thus-avoid-any-cyber-drama\/","title":{"rendered":"Sysadmins: Why not simply verify there&#8217;s no backdoor in every program you install, and thus avoid any cyber-drama?"},"content":{"rendered":"<p>Half of publicly reported supply chain attacks were carried out by &#8220;well known APT groups&#8221;, according to an analysis by EU infosec agency ENISA, which warned such digital assaults need to drive &#8220;new protective methods.&#8221;<\/p>\n<p>Of the 24 supply-chain attacks studied by ENISA since January 2020, a dozen were attributed to APTs while 10 of them hadn&#8217;t been attributed to anyone at all in open-source reporting, the agency said.<\/p>\n<p>Juhan Lepassaar, ENISA&#8217;s exec director, said in a canned statement: \u201cDue to the cascading effect of supply chain attacks, threat actors can cause widespread damage affecting businesses and their customers all at once. With good practices and coordinated actions at EU level, Member States will be able to reach a similar level of capabilities raising the common level of cybersecurity in the EU.\u201d<\/p>\n<div aria-hidden=\"true\" class=\"adun\" data-pos=\"top\" data-raptor=\"condor\" data-xsm=\",fluid,mpu,\" data-sm=\",fluid,mpu,\" data-md=\",fluid,mpu,\"> <noscript> <a href=\"https:\/\/pubads.g.doubleclick.net\/gampad\/jump?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YQVJhbljKQvI667TQEqUXAAAAAM&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\" target=\"_blank\" rel=\"noopener\"> <img decoding=\"async\" src=\"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YQVJhbljKQvI667TQEqUXAAAAAM&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\" alt> <\/a> <\/noscript> <\/div>\n<p>The open-source study is intended as a primer on supply-chain attacks, which typically consist of targeting B2B software suppliers that have extensive customer lists. Once the supplier is compromised, the attackers then move laterally into their customers&#8217; networks, typically to steal data and extort the victims.<\/p>\n<div aria-hidden=\"true\" class=\"adun\" data-pos=\"top\" data-raptor=\"falcon\" data-xmd=\",fluid,mpu,leaderboard,\" data-lg=\",fluid,mpu,leaderboard,\" data-xlg=\",fluid,billboard,superleaderboard,mpu,leaderboard,\" data-xxlg=\",fluid,billboard,superleaderboard,brandwidth,brandimpact,leaderboard,mpu,\"> <noscript> <a href=\"https:\/\/pubads.g.doubleclick.net\/gampad\/jump?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=4&amp;c=44YQVJhbljKQvI667TQEqUXAAAAAM&amp;t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0\" target=\"_blank\" rel=\"noopener\"> <img decoding=\"async\" src=\"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=4&amp;c=44YQVJhbljKQvI667TQEqUXAAAAAM&amp;t=ct%3Dns%26unitnum%3D426raptor%3Dfalcon%26pos%3Dmid%26test%3D0\" alt> <\/a> <\/noscript> <\/div>\n<div class=\"adun_eagle_desktop_story_wrapper\">\n<div aria-hidden=\"true\" class=\"adun\" data-pos=\"mid\" data-raptor=\"eagle\" data-xxlg=\",mpu,dmpu,\"> <noscript> <a href=\"https:\/\/pubads.g.doubleclick.net\/gampad\/jump?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=3&amp;c=33YQVJhbljKQvI667TQEqUXAAAAAM&amp;t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0\" target=\"_blank\" rel=\"noopener\"> <img decoding=\"async\" src=\"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=3&amp;c=33YQVJhbljKQvI667TQEqUXAAAAAM&amp;t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0\" alt> <\/a> <\/noscript> <\/div>\n<\/p><\/div>\n<p>&#8220;An additional characteristic of supply chain attacks involves the complexity in handling them and the efforts required to mitigate and address such attacks,&#8221; said ENISA in its <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/www.enisa.europa.eu\/publications\/threat-landscape-for-supply-chain-attacks\">report<\/a>.<\/p>\n<p>This was illustrated when IT management toolmaker Kaseya pulled the software-as-a-service offering of its VSA suite offline and told clients to turn off their on-prem deployments of VSA after installations of the software were <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/www.kaseya.com\/potential-attack-on-kaseya-vsa\/\">exploited<\/a> to deliver ransomware. Restoration of those services was <a target=\"_blank\" href=\"https:\/\/www.theregister.com\/2021\/07\/09\/kaseya_saas_restoration_july_11\/\" rel=\"noopener\">repeatedly delayed<\/a> as the biz tried to figure out how to patch its code to prevent any further infections.<\/p>\n<div aria-hidden=\"true\" class=\"adun\" data-pos=\"top\" data-raptor=\"falcon\" data-xsm=\",fluid,mpu,\" data-sm=\",fluid,mpu,\" data-md=\",fluid,mpu,\"> <noscript> <a href=\"https:\/\/pubads.g.doubleclick.net\/gampad\/jump?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=4&amp;c=44YQVJhbljKQvI667TQEqUXAAAAAM&amp;t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0\" target=\"_blank\" rel=\"noopener\"> <img decoding=\"async\" src=\"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=4&amp;c=44YQVJhbljKQvI667TQEqUXAAAAAM&amp;t=ct%3Dns%26unitnum%3D426raptor%3Dfalcon%26pos%3Dmid%26test%3D0\" alt> <\/a> <\/noscript> <\/div>\n<p>To the best of our knowledge, all we <a target=\"_blank\" href=\"https:\/\/www.theregister.com\/2021\/07\/06\/kaseya_update\/\" rel=\"noopener\">really know<\/a> is that, according to Kaseya, &#8220;the attackers were able to exploit zero-day vulnerabilities in the VSA product to bypass authentication and run arbitrary command execution. This allowed the attackers to leverage the standard VSA product functionality to deploy ransomware to endpoints.&#8221;<\/p>\n<p>ENISA criticized suppliers for either not knowing or not admitting in public how they were compromised. The UK is <a target=\"_blank\" href=\"https:\/\/www.theregister.com\/2021\/07\/27\/uk_security_breach_reporting_law_thresholds\/\" rel=\"noopener\">taking advantage<\/a> of Brexit to lower incident reporting thresholds in security frameworks first created by EU laws; perhaps the political bloc may follow suit.<\/p>\n<p>ENISA, which is soon to be dragged from its Greek home \u2013 split between capital Athens and the sunny island of Heraklion \u2013 to the grey towers of Brussels, also proposed its own unique taxonomy for analyzing supply chain attacks. In doing so it lightly pooh-poohed both MITRE&#8217;s <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/attack.mitre.org\/\">ATT&amp;CK<\/a> and Lockheed Martin&#8217;s <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/www.lockheedmartin.com\/en-us\/capabilities\/cyber\/cyber-kill-chain.html\">Cyber Kill Chain<\/a> analysis frameworks as &#8220;too generic.&#8221;<\/p>\n<p>The report lists the supply-chain incidents studied by ENISA. Aside from the high-profile ones involving Accellion, SolarWinds, and Kaseya, it also lists Fujitsu&#8217;s <a target=\"_blank\" href=\"https:\/\/www.theregister.com\/2021\/05\/27\/fujitsu_projectweb_supply_chain_attack\/\" rel=\"noopener\">ProjectWeb<\/a>, the <a target=\"_blank\" href=\"https:\/\/www.theregister.com\/2021\/06\/09\/eset_gelsemium_research\/\" rel=\"noopener\">Bignox Noxplayer Android emulator<\/a>, and more.<\/p>\n<h3 class=\"crosshead\"> <span>Er, is this good advice?<\/span><br \/>\n<\/h3>\n<p>&#8220;In order to compromise the targeted customers, attackers focused on the suppliers\u2019 code in about 66 per cent of the reported incidents,&#8221; noted ENISA. &#8220;This shows that organisations should focus their efforts on validating third-party code and software before using them to ensure these were not tampered with or manipulated.&#8221;<\/p>\n<p>Though we appreciate the spirit of this advice, it&#8217;s doing a lot of heavy lifting for what is a non-trivial issue.<\/p>\n<p>The most high-profile supply-chain attack of late was the <a target=\"_blank\" href=\"https:\/\/www.theregister.com\/2021\/02\/03\/solarwinds_patch_trustwave\/\" rel=\"noopener\">SolarWinds<\/a> Orion compromise. In this, Russian spies <a target=\"_blank\" href=\"https:\/\/www.theregister.com\/2021\/01\/12\/solarwinds_tech_analysis_crowdstrike\/\" rel=\"noopener\">compromised<\/a> the vendor&#8217;s systems to hide a backdoor in an update for the Orion network management and monitoring software. The end goal being that SolarWinds&#8217; customers would install the tainted update, and selected valuable targets would be infiltrated via the implanted vulnerability.<\/p>\n<div aria-hidden=\"true\" class=\"adun\" id=\"story_eagle_xsm_sm_md_xmd_lg_xlg\" data-pos=\"mid\" data-raptor=\"eagle\" data-xsm=\",mpu,dmpu,\" data-sm=\",mpu,dmpu,\" data-md=\",mpu,dmpu,\" data-xmd=\",mpu,dmpu,\" data-lg=\",mpu,dmpu,\" data-xlg=\",mpu,dmpu,\"> <noscript> <a href=\"https:\/\/pubads.g.doubleclick.net\/gampad\/jump?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=3&amp;c=33YQVJhbljKQvI667TQEqUXAAAAAM&amp;t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0\" target=\"_blank\" rel=\"noopener\"> <img decoding=\"async\" src=\"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=3&amp;c=33YQVJhbljKQvI667TQEqUXAAAAAM&amp;t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0\" alt> <\/a> <\/noscript> <\/div>\n<p>That update was fetched by 18,000 organizations through normal channels, none of them suspecting any foul play; the backdoor was stashed in <a target=\"_blank\" href=\"https:\/\/www.theregister.com\/2020\/12\/20\/solarwinds_update_trump_contradicts_pompeo_russia_attribution\/\" rel=\"noopener\">a signed .dll file<\/a>. It&#8217;s tricky to see how your common or garden end-user organization could have detected that.<\/p>\n<p>It&#8217;s not feasible to ask every org to break out disassemblers, source code editors, and network and memory analysis tools, and have staff on hand capable of using them, to inspect every update, be they open or closed source.<\/p>\n<p>It would be better to have robust mechanisms in place to verify that software packages are legit, and released and fetched as intended by their maintainers, and in a way that if build systems are infiltrated, as we saw with SolarWinds, unauthorized changes are still apparent. This can be done, though making it completely airtight is not quite as easy as one might hope if your adversary is the Kremlin.<\/p>\n<p>Crucially, even then, it&#8217;s on the suppliers to first create these mechanisms, and customers to then use them.<\/p>\n<p>That all said, Google&#8217;s <a target=\"_blank\" href=\"https:\/\/www.theregister.com\/2021\/06\/18\/google_slsa_supply_chain_rust\/\" rel=\"noopener\">SLSA proposal<\/a> may prove be useful down the line. \u00ae<\/p>\n<p> READ MORE <a href=\"https:\/\/go.theregister.com\/feed\/www.theregister.com\/2021\/07\/31\/enisa_supply_chain_attack_report\/\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Just &#8216;validate third-party code before using it&#8217;, says Euro body Half of publicly reported supply chain attacks were carried out by &#8220;well known APT groups&#8221;, according to an analysis by EU infosec agency ENISA, which warned such digital assaults need to drive &#8220;new protective methods.&#8221;\u2026 READ MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[63],"tags":[],"class_list":["post-42068","post","type-post","status-publish","format-standard","hentry","category-the-register"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Sysadmins: Why not simply verify there&#039;s no backdoor in every program you install, and thus avoid any cyber-drama? 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/sysadmins-why-not-simply-verify-theres-no-backdoor-in-every-program-you-install-and-thus-avoid-any-cyber-drama\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Sysadmins: Why not simply verify there&#039;s no backdoor in every program you install, and thus avoid any cyber-drama? 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/sysadmins-why-not-simply-verify-theres-no-backdoor-in-every-program-you-install-and-thus-avoid-any-cyber-drama\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2021-07-31T07:14:04+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YQVJhbljKQvI667TQEqUXAAAAAM&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/sysadmins-why-not-simply-verify-theres-no-backdoor-in-every-program-you-install-and-thus-avoid-any-cyber-drama\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/sysadmins-why-not-simply-verify-theres-no-backdoor-in-every-program-you-install-and-thus-avoid-any-cyber-drama\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Sysadmins: Why not simply verify there&#8217;s no backdoor in every program you install, and thus avoid any cyber-drama?\",\"datePublished\":\"2021-07-31T07:14:04+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/sysadmins-why-not-simply-verify-theres-no-backdoor-in-every-program-you-install-and-thus-avoid-any-cyber-drama\\\/\"},\"wordCount\":797,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/sysadmins-why-not-simply-verify-theres-no-backdoor-in-every-program-you-install-and-thus-avoid-any-cyber-drama\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/pubads.g.doubleclick.net\\\/gampad\\\/ad?co=1&amp;iu=\\\/6978\\\/reg_security\\\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YQVJhbljKQvI667TQEqUXAAAAAM&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\",\"articleSection\":[\"The Register\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/sysadmins-why-not-simply-verify-theres-no-backdoor-in-every-program-you-install-and-thus-avoid-any-cyber-drama\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/sysadmins-why-not-simply-verify-theres-no-backdoor-in-every-program-you-install-and-thus-avoid-any-cyber-drama\\\/\",\"name\":\"Sysadmins: Why not simply verify there's no backdoor in every program you install, and thus avoid any cyber-drama? 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/sysadmins-why-not-simply-verify-theres-no-backdoor-in-every-program-you-install-and-thus-avoid-any-cyber-drama\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/sysadmins-why-not-simply-verify-theres-no-backdoor-in-every-program-you-install-and-thus-avoid-any-cyber-drama\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/pubads.g.doubleclick.net\\\/gampad\\\/ad?co=1&amp;iu=\\\/6978\\\/reg_security\\\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YQVJhbljKQvI667TQEqUXAAAAAM&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\",\"datePublished\":\"2021-07-31T07:14:04+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/sysadmins-why-not-simply-verify-theres-no-backdoor-in-every-program-you-install-and-thus-avoid-any-cyber-drama\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/sysadmins-why-not-simply-verify-theres-no-backdoor-in-every-program-you-install-and-thus-avoid-any-cyber-drama\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/sysadmins-why-not-simply-verify-theres-no-backdoor-in-every-program-you-install-and-thus-avoid-any-cyber-drama\\\/#primaryimage\",\"url\":\"https:\\\/\\\/pubads.g.doubleclick.net\\\/gampad\\\/ad?co=1&amp;iu=\\\/6978\\\/reg_security\\\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YQVJhbljKQvI667TQEqUXAAAAAM&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\",\"contentUrl\":\"https:\\\/\\\/pubads.g.doubleclick.net\\\/gampad\\\/ad?co=1&amp;iu=\\\/6978\\\/reg_security\\\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YQVJhbljKQvI667TQEqUXAAAAAM&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/sysadmins-why-not-simply-verify-theres-no-backdoor-in-every-program-you-install-and-thus-avoid-any-cyber-drama\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Sysadmins: Why not simply verify there&#8217;s no backdoor in every program you install, and thus avoid any cyber-drama?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Sysadmins: Why not simply verify there's no backdoor in every program you install, and thus avoid any cyber-drama? 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/sysadmins-why-not-simply-verify-theres-no-backdoor-in-every-program-you-install-and-thus-avoid-any-cyber-drama\/","og_locale":"en_US","og_type":"article","og_title":"Sysadmins: Why not simply verify there's no backdoor in every program you install, and thus avoid any cyber-drama? 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/sysadmins-why-not-simply-verify-theres-no-backdoor-in-every-program-you-install-and-thus-avoid-any-cyber-drama\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2021-07-31T07:14:04+00:00","og_image":[{"url":"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YQVJhbljKQvI667TQEqUXAAAAAM&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0","type":"","width":"","height":""}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/sysadmins-why-not-simply-verify-theres-no-backdoor-in-every-program-you-install-and-thus-avoid-any-cyber-drama\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/sysadmins-why-not-simply-verify-theres-no-backdoor-in-every-program-you-install-and-thus-avoid-any-cyber-drama\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Sysadmins: Why not simply verify there&#8217;s no backdoor in every program you install, and thus avoid any cyber-drama?","datePublished":"2021-07-31T07:14:04+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/sysadmins-why-not-simply-verify-theres-no-backdoor-in-every-program-you-install-and-thus-avoid-any-cyber-drama\/"},"wordCount":797,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/sysadmins-why-not-simply-verify-theres-no-backdoor-in-every-program-you-install-and-thus-avoid-any-cyber-drama\/#primaryimage"},"thumbnailUrl":"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YQVJhbljKQvI667TQEqUXAAAAAM&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0","articleSection":["The Register"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/sysadmins-why-not-simply-verify-theres-no-backdoor-in-every-program-you-install-and-thus-avoid-any-cyber-drama\/","url":"https:\/\/www.threatshub.org\/blog\/sysadmins-why-not-simply-verify-theres-no-backdoor-in-every-program-you-install-and-thus-avoid-any-cyber-drama\/","name":"Sysadmins: Why not simply verify there's no backdoor in every program you install, and thus avoid any cyber-drama? 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/sysadmins-why-not-simply-verify-theres-no-backdoor-in-every-program-you-install-and-thus-avoid-any-cyber-drama\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/sysadmins-why-not-simply-verify-theres-no-backdoor-in-every-program-you-install-and-thus-avoid-any-cyber-drama\/#primaryimage"},"thumbnailUrl":"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YQVJhbljKQvI667TQEqUXAAAAAM&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0","datePublished":"2021-07-31T07:14:04+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/sysadmins-why-not-simply-verify-theres-no-backdoor-in-every-program-you-install-and-thus-avoid-any-cyber-drama\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/sysadmins-why-not-simply-verify-theres-no-backdoor-in-every-program-you-install-and-thus-avoid-any-cyber-drama\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/sysadmins-why-not-simply-verify-theres-no-backdoor-in-every-program-you-install-and-thus-avoid-any-cyber-drama\/#primaryimage","url":"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YQVJhbljKQvI667TQEqUXAAAAAM&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0","contentUrl":"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YQVJhbljKQvI667TQEqUXAAAAAM&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0"},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/sysadmins-why-not-simply-verify-theres-no-backdoor-in-every-program-you-install-and-thus-avoid-any-cyber-drama\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Sysadmins: Why not simply verify there&#8217;s no backdoor in every program you install, and thus avoid any cyber-drama?"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/42068","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=42068"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/42068\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=42068"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=42068"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=42068"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}