<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>Supply Chain VM Image Compromise on URE</title><link>https://ure.us/tags/supply-chain-vm-image-compromise/</link><description>Recent content in Supply Chain VM Image Compromise on URE</description><generator>Hugo -- 0.164.0</generator><language>en-us</language><lastBuildDate>Fri, 07 Aug 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://ure.us/tags/supply-chain-vm-image-compromise/index.xml" rel="self" type="application/rss+xml"/><item><title>The Root Backdoor Every QEMU VM Ships by Default</title><link>https://ure.us/articles/root-shell-wired-into-every-qemu-host/</link><pubDate>Fri, 07 Aug 2026 00:00:00 +0000</pubDate><guid>https://ure.us/articles/root-shell-wired-into-every-qemu-host/</guid><description>An account on a QEMU host can run root commands inside your running VMs over a serial channel. No guest password, and nothing your VM&amp;#39;s SIEM will flag.</description></item></channel></rss>