Software supply chain security. A new backdoor. An intelligence agency fumbles a RAT. A warning on commercial surveillance.

Dateline the Internet: the open source software supply chain.

Log4j and other issues in open-source software. (The CyberWire) Remediating Log4shell is a large and varied problem, but it’s only on instance of the complicated relationship between upstream providers and downstream users of the open…