Binarly Releases Free Detection Tool for XZ Backdoor
1.4.2024 23:39:00 EEST | Business Wire | Press release
Binarly, provider of an industry leading AI-powered firmware and software supply chain security platform, has created and released a free scanning tool to help defenders spot signs of the dangerous XZ backdoor (CVE-2024-3094).
The XZ.fail detection tool was released less than 24 hours after the discovery of a backdoor in the open-source XZ Utils, which provides lossless data compression on virtually all Unix-like operating systems, including Linux. (See CISA advisory).
According to Binarly chief executive Alex Matrosov, the tool includes generic IFUNC implantation detection with close to zero false-positives, showcasing the company’s binary code intelligence engine in action.
“This detection is based on behavioral analysis and can detect any invariants automatically if a similar backdoor is implanted somewhere else,” Matrosov added.
“Such a complex and professionally designed implantation framework is not developed for a one-shot operation. It could already be deployed elsewhere or partially reused in other operations. That’s exactly why we started focusing on more generic detection for this complex backdoor,” Matrosov added.
For those seeking more comprehensive detection and remediation strategies, the Binarly Transparency Platform offers an in-depth solution. With XZ detection capabilities deployed, the platform facilitates easy identification of malicious activities at scale, enabling users to take prompt and effective action to safeguard their software supply chains.
The XZ backdoor came to light on March 29, 2024, when a thread was published on Openwall's oss-security mailing list by Andres Freund, revealing a potential compromise in the open-source code.
For more information read our research article and access the free XZ backdoor scanner at XZ.fail.
About Binarly:
Binarly is a global firmware and software supply chain security company founded in 2021. The company’s flagship Binarly Transparency Platform is an enterprise-class, AI-powered solution used by device manufacturers, OEMs, IBVs and product security teams to identify known and unknown vulnerabilities, misconfigurations and signs of malicious code implantation. Binarly’s validated remediation playbooks have significantly reduced the cost and time to respond to security exposures. Based in Los Angeles, California, Binarly brings decades of research and program analysis expertise to build solutions to protect businesses, critical infrastructure, and consumers around the world.
To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.
View source version on businesswire.com: https://www.businesswire.com/news/home/20240401230046/en/
Contact information
media@binarly.io
818.351.9637
About Business Wire
For more than 50 years, Business Wire has been the global leader in press release distribution and regulatory disclosure.
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
Rehlko Joins Wisconsin Data Center Coalition as Newest Energy Resilience Member, Reinforcing Its Role at the Center of AI and Digital Infrastructure Growth27.8.2026 16:15:00 EEST | Press release
Rehlko, a global industrial energy resilience platform providing custom-engineered, integrated power solutions for mission-critical infrastructure worldwide, today announced it has joined the Wisconsin Data Center Coalition (WIDCC) as the organization's newest energy resilience member. The membership reflects Rehlko's commitment to advancing Wisconsin's role as a leader in responsible AI infrastructure development, built on reliable and scalable power. Rapid growth in hyperscale and enterprise data center investment is reshaping markets across the world, and Rehlko is building the power infrastructure that makes it possible. Sitting at the intersection of the structural forces driving AI infrastructure expansion, grid reliability, and accelerating electrification, Rehlko brings more than a century of engineering depth and lifecycle capability to the table. WIDCC brings together stakeholders from across Wisconsin's technology, utility, economic development, workforce development, govern
GenNx360 Capital Partners Closes Fourth Flagship Fund at $865 Million27.8.2026 15:30:00 EEST | Press release
GenNx360 Capital Partners (“GenNx360” or “the Firm”), a New York City-based private equity firm investing in U.S. lower middle market industrial services and business services companies, today announced the successful closing of GenNx360 Capital Partners IV, L.P. (“Fund IV” or “the Fund”), with $865 million in commitments, exceeding its target. Fund IV is the largest fund raised in GenNx360’s history. Fund IV was supported by a diverse group of existing and new investors including leading pensions, asset managers, insurance companies, foundations, and family offices, reflecting conviction in the firm’s disciplined investment approach, operational value creation model, and tenured, diverse team. Fund IV will continue GenNx360’s differentiated strategy of partnering with lower middle market founders and management teams to scale essential services businesses. Fund IV has made five investments to date across infrastructure services, testing and inspection services, aerospace and defense,
Alipay Ant Forest Turns 700 Million Users’ Daily Green Actions into 700 Million Trees Over a Decade of Technology-enabled Environmental Program27.8.2026 15:02:00 EEST | Press release
Alipay Ant Forest, Ant Group’s green initiative that encourages people to participate in environmental protection through simple, everyday low-carbon actions, today announced that more than 700 million users across China have joined the program as of August 2026. Together, they have helped support the planting of over 700 million trees, contributing to ecological restoration efforts in some of China’s most arid and environmentally fragile regions. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260827995848/en/ Before (2019) and after (2026) comparison of Ant Forest Project No. 464 in Inner Mongolia. Launched in 2016 within the Alipay app, Ant Forest transforms individual environmental choices into collective climate action. When users make greener lifestyle choices, such as taking public transportation, cycling, paying bills online to avoid paper invoices, or choosing digital services, they earn virtual “green energy points”
Omilia Appoints Michael Weiss as Vice President, DACH27.8.2026 15:00:00 EEST | Press release
Omilia, a global leader in Self-Learning Agentic CX, today announced the appointment of Michael Weiss as Vice President, DACH. Weiss will lead Omilia's go-to-market strategy across Germany, Austria, and Switzerland, as the company expands its European footprint, with a focus on regulated sectors where enterprise demand for AI that moves past pilot-stage containment is accelerating. In his new role, Weiss will be responsible for enterprise sales, partner development, and go-to-market execution across DACH, building the team and customer relationships needed to scale Omilia's presence in a market where large, heavily regulated enterprises have historically been slow to move off legacy IVR and first-generation AI. Weiss brings more than two decades of enterprise sales leadership in SaaS, cloud, and customer experience (CX) technology. Most recently, he provided fractional Chief Revenue Officer services through his own advisory practice where he advised CX and cloud communications provider
Visa Expands Support for its Clients and the Industry as Organizations Navigate New AI Era of Cybersecurity27.8.2026 15:00:00 EEST | Press release
Visa (NYSE: V) today announced enhancements to its cybersecurity portfolio to help organizations identify and fix vulnerabilities more effectively. Unveiling the next evolution of the Visa Vulnerability Agentic Harness (VVAH), its open-source, model-agnostic framework, Visa is helping organizations significantly reduce the Mean Time to Adapt (MTTA), the time between discovery and resolution of attack paths, with some resolutions shrinking from weeks to hours. And to help clients navigate this evolving threat landscape, Visa also announced the expansion of its Visa Consulting & Analytics (VCA) Cybersecurity Advisory Practice with new advisory services designed to help clients assess risk, prioritize remediation efforts and strengthen resilience in an evolving threat environment. "AI is compressing the time between vulnerability discovery and exploitation, which means defenders need a faster, more reliable path to action," said Rajat Taneja, President, Technology, Visa. "By advancing VVA
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom