Binarly Releases Free Detection Tool for XZ Backdoor
1.4.2024 23:39:00 EEST | Business Wire | Press release
Binarly, provider of an industry leading AI-powered firmware and software supply chain security platform, has created and released a free scanning tool to help defenders spot signs of the dangerous XZ backdoor (CVE-2024-3094).
The XZ.fail detection tool was released less than 24 hours after the discovery of a backdoor in the open-source XZ Utils, which provides lossless data compression on virtually all Unix-like operating systems, including Linux. (See CISA advisory).
According to Binarly chief executive Alex Matrosov, the tool includes generic IFUNC implantation detection with close to zero false-positives, showcasing the company’s binary code intelligence engine in action.
“This detection is based on behavioral analysis and can detect any invariants automatically if a similar backdoor is implanted somewhere else,” Matrosov added.
“Such a complex and professionally designed implantation framework is not developed for a one-shot operation. It could already be deployed elsewhere or partially reused in other operations. That’s exactly why we started focusing on more generic detection for this complex backdoor,” Matrosov added.
For those seeking more comprehensive detection and remediation strategies, the Binarly Transparency Platform offers an in-depth solution. With XZ detection capabilities deployed, the platform facilitates easy identification of malicious activities at scale, enabling users to take prompt and effective action to safeguard their software supply chains.
The XZ backdoor came to light on March 29, 2024, when a thread was published on Openwall's oss-security mailing list by Andres Freund, revealing a potential compromise in the open-source code.
For more information read our research article and access the free XZ backdoor scanner at XZ.fail.
About Binarly:
Binarly is a global firmware and software supply chain security company founded in 2021. The company’s flagship Binarly Transparency Platform is an enterprise-class, AI-powered solution used by device manufacturers, OEMs, IBVs and product security teams to identify known and unknown vulnerabilities, misconfigurations and signs of malicious code implantation. Binarly’s validated remediation playbooks have significantly reduced the cost and time to respond to security exposures. Based in Los Angeles, California, Binarly brings decades of research and program analysis expertise to build solutions to protect businesses, critical infrastructure, and consumers around the world.
To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.
View source version on businesswire.com: https://www.businesswire.com/news/home/20240401230046/en/
Contact information
media@binarly.io
818.351.9637
About Business Wire
For more than 50 years, Business Wire has been the global leader in press release distribution and regulatory disclosure.
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
The Estée Lauder Companies and the Breast Cancer Research Foundation Launch Largest Global Research Initiative on Breast Cancer in Younger Women23.9.2026 15:30:00 EEST | Press release
The Estée Lauder Companies today announced a new five-year commitment to the Breast Cancer Research Foundation to establish the Global Research Initiative on Breast Cancer in Younger Women. This first-of-its-kind research coalition will address the alarming global rise in breast cancer diagnoses among younger women, building on more than three decades of partnership between The Estée Lauder Companies and the Breast Cancer Research Foundation. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260923337773/en/ The $15 millioncommitment from The Estée Lauder Companies Charitable Foundation is designed to confront an urgent and significantly underfunded need. Diagnoses among women under age 45 increased by 11 percent from 2012 to 2022,1 while an estimated only 0.6 percent of breast cancer research funding since 2020 has focused on younger women. Breast cancer in younger women is more likely to be diagnosed at a later stage and to b
Enginzyme Raises SEK 75 Million to Advance Its Commercial Biomanufacturing Strategy23.9.2026 15:07:00 EEST | Press release
Enginzyme AB has closed a new equity round raising SEK 75 million. The round marks a key milestone in the company's shift from R&D to a commercially driven strategy. "With our growth strategy established, closing this new investment round was a priority for enginzyme," said Aymeric de Gantes, enginzyme's CEO. "We are also very excited to welcome new shareholders with complementary expertise, who will all contribute to our mission to deliver biomanufacturing solutions for the personal care, food, and pharmaceutical industries. Our technology enables lower cost in use for higher-quality ingredients, obtained through more sustainable manufacturing processes." Lotus One Investment Pte. Ltd. and Valquest Partners Europe are joining the company as new shareholders and members of the Board of Directors. Sofinnova Partners, Stiftelsen Industrifonden, Navigare Ventures AB and Almi Invest GreenTech were key participants, combined with several other new and existing shareholders. On Thursday, Sep
SLB Awarded Major Contract by OQEP for Integrated Facility Expansion in Oman23.9.2026 15:04:00 EEST | Press release
SLB (NYSE: SLB) has been awarded a contract by OQ Exploration & Production (OQEP) to deliver the Bisat-B Expansion Production Facility in Oman. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260922635677/en/ SLB has been awarded a contract by OQ Exploration & Production (OQEP) to deliver the Bisat-B Expansion Production Facility in Oman. Under the contract, SLB will provide design, engineering, procurement, construction and commissioning services for the facility, along with four years of operations and maintenance support. Under the contract, SLB will provide design, engineering, procurement, construction and commissioning services for the facility, along with four years of operations and maintenance support. The expansion will increase the facility’s gross fluids handling capacity to 548,000 barrels per day. The project is scheduled for completion within 19 months. The award marks the next phase of development for the Bisa
Datavault AI Announces Rights Offering to Shareholders23.9.2026 15:03:00 EEST | Press release
Datavault AI Inc. (Nasdaq: DVLT) (“Datavault AI” or the “Company”), an Artificial Intelligence Platform (“AIP”) company providing data monetization, credentialing and tokenization technologies, today announced that its board of directors (the “Board”) has approved a rights offering to holders of its common stock (“Common Stock”) and certain other Datavault AI securities. Moody Capital Solutions, Inc. (“Moody Capital”) will act as dealer manager for the rights offering. The Rights Offering to include investors in a process usually reserved exclusively for banks Under the rights offering, the Company will distribute, at no charge, transferable subscription rights to holders of record of Common Stock and certain other Company securities with a contractual right to participate in the distribution. The Company has set a record date of October 9, 2026 for such offering (the “Record Date”). Such holders will receive one subscription right for a Common Unit for each share of Common Stock owned
Copeland Completes Acquisition of Dickson, Advancing Cold Chain Intelligence for Healthcare and Life Sciences23.9.2026 15:00:00 EEST | Press release
Copeland, a global leader in compression technologies and controls solutions, today announced it has completed the acquisition of Dickson, a Chicago-based provider of environmental monitoring and compliance technology solutions for highly regulated life sciences and healthcare environments. Increasing regulatory demands across the pharmaceutical and life sciences cold chain require continuous visibility from production through final delivery. Together, Dickson’s cloud-native monitoring platform and Copeland’s controls, monitoring and enterprise software solutions will enable a more connected, intelligent and compliant cold chain. “We are pleased to welcome our new colleagues from Dickson into Copeland,” said Ross B. Shuster, CEO of Copeland. “The acquisition of Dickson further strengthens our ability to serve customers across every stage of the healthcare and life sciences cold chain, from pharmaceutical manufacturing through distribution and patient care.” Enabling a Smarter, More Con
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom