Binarly Releases Free Detection Tool for XZ Backdoor
1.4.2024 23:39:00 EEST | Business Wire | Press release
Binarly, provider of an industry leading AI-powered firmware and software supply chain security platform, has created and released a free scanning tool to help defenders spot signs of the dangerous XZ backdoor (CVE-2024-3094).
The XZ.fail detection tool was released less than 24 hours after the discovery of a backdoor in the open-source XZ Utils, which provides lossless data compression on virtually all Unix-like operating systems, including Linux. (See CISA advisory).
According to Binarly chief executive Alex Matrosov, the tool includes generic IFUNC implantation detection with close to zero false-positives, showcasing the company’s binary code intelligence engine in action.
“This detection is based on behavioral analysis and can detect any invariants automatically if a similar backdoor is implanted somewhere else,” Matrosov added.
“Such a complex and professionally designed implantation framework is not developed for a one-shot operation. It could already be deployed elsewhere or partially reused in other operations. That’s exactly why we started focusing on more generic detection for this complex backdoor,” Matrosov added.
For those seeking more comprehensive detection and remediation strategies, the Binarly Transparency Platform offers an in-depth solution. With XZ detection capabilities deployed, the platform facilitates easy identification of malicious activities at scale, enabling users to take prompt and effective action to safeguard their software supply chains.
The XZ backdoor came to light on March 29, 2024, when a thread was published on Openwall's oss-security mailing list by Andres Freund, revealing a potential compromise in the open-source code.
For more information read our research article and access the free XZ backdoor scanner at XZ.fail.
About Binarly:
Binarly is a global firmware and software supply chain security company founded in 2021. The company’s flagship Binarly Transparency Platform is an enterprise-class, AI-powered solution used by device manufacturers, OEMs, IBVs and product security teams to identify known and unknown vulnerabilities, misconfigurations and signs of malicious code implantation. Binarly’s validated remediation playbooks have significantly reduced the cost and time to respond to security exposures. Based in Los Angeles, California, Binarly brings decades of research and program analysis expertise to build solutions to protect businesses, critical infrastructure, and consumers around the world.
To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.
View source version on businesswire.com: https://www.businesswire.com/news/home/20240401230046/en/
Contact information
media@binarly.io
818.351.9637
About Business Wire
For more than 50 years, Business Wire has been the global leader in press release distribution and regulatory disclosure.
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
Grid Dynamics Appoints Industry Veteran Nikita Ivanov as Head of AI26.8.2026 23:05:00 EEST | Press release
Grid Dynamics Holdings, Inc. (Nasdaq: GDYN) (“Grid Dynamics”), a premier AI transformation partner for the Fortune 1000, is advancing its AI strategy under the leadership of Nikita Ivanov, Vice President, Head of AI. Ivanov is responsible for leading the transition efforts of Grid Dynamics’ clients toward an AI-native software delivery model, and he oversees all elements of Grid Dynamics AI Native (GAIN) platforms. Ivanov brings more than two decades of experience founding and leading technology companies to his role as Vice President, Head of AI. He founded and led GridGain, a distributed computing company built for in-memory data processing. During his 15-year tenure at GridGain, Ivanov also founded the natural language processing framework Apache NLPCraft and, later, Humatron AI, an AI workforce platform. He then served as Field CTO for GenAI at DataStax. That same pattern of building foundational tools now runs through Grid Dynamics’ own AI-SDLC tools, Allium, Rosetta, and SpecFlow
Arc'teryx Introduces System 0™, a New Framework for the Future of Product Design and Circularity26.8.2026 16:00:00 EEST | Press release
Arc'teryx Equipment, the global design company specializing in technical high-performance apparel and equipment, today introduced System 0™, a new framework that reimagines how products can be designed, manufactured, used, repaired, and ultimately regenerated. System 0 represents the next evolution for sustainability in the outdoor industry, as it embeds circular thinking across an entire product lifecycle while maintaining the uncompromising performance standards that define the Arc’teryx brand. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260826686539/en/ Arc’teryx athlete, Craig Murray, wearing the Sperro SV, a multisport mountain-grade hardshell built with circular design principles, available September 4, 2026. The first product being introduced as part of the System 0 platform is the Sperro SV jacket, a multisport mountain-grade hardshell engineered for durability, repairability, and disassembly at end of life – the
Xsolla Announces Five-Year Partnership With the Global Esports Federation26.8.2026 16:00:00 EEST | Press release
Xsolla, a global commerce company, today announced a landmark five-year strategic partnership with the Global Esports Federation (GEF), the world-convening body for esports. As GEF's exclusive partner for commerce, payments, wallet, loyalty, and distribution, Xsolla will power the entire GEF ecosystem, including the flagship Global Esports Games, pro-series Global Esports Tour, global GEFcon, and 180+ Member Federations across five continents. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260826948844/en/ Graphic: Xsolla The announcement comes as GEF marks 100 days to go to the Los Angeles 2026 Global Esports Games (GEGLA26), adding further momentum to the road to Los Angeles and GEF’s flagship global esports celebration this December. The partnership launches at the GEGLA26, where Xsolla will begin serving as the unified commerce and payments layer for the GEF ecosystem. Across GEF properties, in more than 200 markets, Xso
FlightSafety International Reaches Agreement to Acquire Acron Technologies’ Commercial Training Solutions26.8.2026 16:00:00 EEST | Press release
FlightSafety International Inc. (FSI), a leading global provider of aviation training and simulation technology, today announced it has signed a definitive agreement with Acron Technologies, a portfolio company of TJC LP, to acquire its Commercial Training Solutions (CTS) business, including its Training Systems, Training Services, Aviation Academy, and Driver Training portfolio. The agreement marks a significant expansion of FSI’s capabilities in the commercial aviation market, broadening and complementing its simulator manufacturing capabilities and global training footprint. CTS brings over eight decades of experience in commercial aviation training and simulation. With a long-standing heritage in commercial airline simulator manufacturing, CTS has delivered more than 850 training devices throughout its history, with over 300 full-flight simulators currently in operation worldwide today. Its training and manufacturing locations across the U.S., U.K., and Thailand support pilot and d
NABEP Appoints Sara Chouraqui as General Counsel26.8.2026 16:00:00 EEST | Press release
North American Blue Energy Partners (NABEP) has appointed Sara Chouraqui as General Counsel, with Elizabeth Collery and Victoria Jacobson each joining as Deputy General Counsel. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260826168543/en/ Sara Chouraqui joins NABEP as its General Counsel, bringing decades of legal expertise. These additions significantly strengthen NABEP’s senior leadership team and legal expertise as the company improves its operations, increases production and develops new strategic and commercial partnerships. As General Counsel, Chouraqui will lead NABEP’s global legal function and advise the company’s leadership on its legal, regulatory and corporate priorities, including major transactions and partnerships, governance, compliance and the management of legal and regulatory risk across the company’s operations. Her experience navigating complex cross-border legal and regulatory matters will be particu
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom