Binarly Releases Free Detection Tool for XZ Backdoor
1.4.2024 23:39:00 EEST | Business Wire | Press release
Binarly, provider of an industry leading AI-powered firmware and software supply chain security platform, has created and released a free scanning tool to help defenders spot signs of the dangerous XZ backdoor (CVE-2024-3094).
The XZ.fail detection tool was released less than 24 hours after the discovery of a backdoor in the open-source XZ Utils, which provides lossless data compression on virtually all Unix-like operating systems, including Linux. (See CISA advisory).
According to Binarly chief executive Alex Matrosov, the tool includes generic IFUNC implantation detection with close to zero false-positives, showcasing the company’s binary code intelligence engine in action.
“This detection is based on behavioral analysis and can detect any invariants automatically if a similar backdoor is implanted somewhere else,” Matrosov added.
“Such a complex and professionally designed implantation framework is not developed for a one-shot operation. It could already be deployed elsewhere or partially reused in other operations. That’s exactly why we started focusing on more generic detection for this complex backdoor,” Matrosov added.
For those seeking more comprehensive detection and remediation strategies, the Binarly Transparency Platform offers an in-depth solution. With XZ detection capabilities deployed, the platform facilitates easy identification of malicious activities at scale, enabling users to take prompt and effective action to safeguard their software supply chains.
The XZ backdoor came to light on March 29, 2024, when a thread was published on Openwall's oss-security mailing list by Andres Freund, revealing a potential compromise in the open-source code.
For more information read our research article and access the free XZ backdoor scanner at XZ.fail.
About Binarly:
Binarly is a global firmware and software supply chain security company founded in 2021. The company’s flagship Binarly Transparency Platform is an enterprise-class, AI-powered solution used by device manufacturers, OEMs, IBVs and product security teams to identify known and unknown vulnerabilities, misconfigurations and signs of malicious code implantation. Binarly’s validated remediation playbooks have significantly reduced the cost and time to respond to security exposures. Based in Los Angeles, California, Binarly brings decades of research and program analysis expertise to build solutions to protect businesses, critical infrastructure, and consumers around the world.
To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.
View source version on businesswire.com: https://www.businesswire.com/news/home/20240401230046/en/
Contact information
media@binarly.io
818.351.9637
About Business Wire
For more than 50 years, Business Wire has been the global leader in press release distribution and regulatory disclosure.
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
Acadia Pharmaceuticals Announces Phase 3 Enabling Topline Results from Phase 2 RADIANT Study of Remlifanserin for the Treatment of Alzheimer’s Disease Psychosis (ADP)24.9.2026 14:00:00 EEST | Press release
Acadia Pharmaceuticals Inc. (Nasdaq: ACAD) today announced Phase 3 enabling topline results from the Phase 2 portion of the ongoing RADIANT clinical trial program evaluating remlifanserin for the treatment of hallucinations and delusions associated with Alzheimer’s disease psychosis (ADP). For the primary endpoint of change from baseline in the Scale for the Assessment of Positive Symptoms-Hallucinations and Delusions subscales (SAPS-H+D), once daily 60 mg remlifanserin demonstrated a change of -12.6 versus a -10.4 change for placebo at week 6, yielding a standardized effect size of 0.26 (p=0.0603). For the key secondary endpoint, Clinical Global Impression – Severity (CGI-S-ADP), the 60 mg dose achieved a change from baseline of -1.3 versus a change of -0.9 for placebo at week 6, yielding a standardized effect size of 0.37 [p=0.0077 (nominal)]. On both efficacy measures, the difference in the 60 mg dose versus placebo increased through the 6-week treatment period. The 30 mg dose showe
Arthur D. Little GEMRIX 2026 Report: The EV TRANSITION is Now an Ecosystem Race, With China Setting the Global Pace24.9.2026 13:15:00 EEST | Press release
Ecosystem, not vehicle technology is now decisive in electric vehicle (EV) adoption, and is responsible for sharp differences between markets. This is the key finding of Arthur D. Little (ADL)'s 2026 Global Electric Mobility Readiness Index (GEMRIX), which shows where ecosystems are ready and where structural gaps hold EVs back. China and Norway have both passed the point where EVs have achieved parity with internal combustion engine (ICE) vehicles. The most comprehensive study of its kind, the third edition of GEMRIX assesses 31 markets across five dimensions: macro factors, EV market/competition, customer readiness, public charging infrastructure, total cost of ownership and regulation. A score of 100 indicates broad market-readiness parity between EVs and ICE vehicles. The study highlights three global conclusions: A small group has pulled ahead. China (106) and Norway (103) are the only markets above 100; Singapore (96) and the Netherlands (90) follow closely. Sustained adoption co
Hytera Launches DIB-R6 SMART to Simplify TETRA Infrastructure and Enable Flexible Capacity Scaling24.9.2026 12:50:00 EEST | Press release
Hytera Communications, a leading global provider of critical communications technologies and solutions, announced the launch of the DIB-R6 SMART, a next-generation TETRA Digital Integrated Base Station. Engineered to simplify deployment and reduce the total cost of ownership (TCO) of mission-critical networks, it combines a multi-carrier Software-Defined Radio (SDR) architecture with operational reliability and multi-layer security. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260923810257/en/ Hytera DIB-R6 SMART TETRA Digital Integrated Base Station "Critical communications cannot afford the luxury of downtime, nor should operators be constrained by rigid, overweight legacy hardware," said Calvin Wang, Vice President of Hytera. "By combining enterprise-grade TETRA capacity with built-in redundancy in an all-in-one design, the DIB-R6 SMART gives operators the flexibility to scale capacity on demand and deploy across enviro
MVC Group Acquires Tailfin, Entering the Premium Bikepacking Sector24.9.2026 11:30:00 EEST | Press release
MVC Group, a group specialising in technical apparel for cycling and outdoor sports, announces the acquisition of Tailfin, the global leader in the premium technical bikepacking segment. Founded in Bristol in 2017 by Nick Broadbent – CEO, mechanical engineer and product designer – Tailfin has rapidly established itself as a leading international name in premium bikepacking bags, racks and accessories, combining design and performance with a strong focus on innovation. The company has developed proprietarytechnologies protected by more than 20 granted and pending patents, building a leading position based on engineering excellence, materials research and rigorous product development and validation processes. Over the past five years, Tailfin has achieved average annual growth of approximately 50%, reaching almost €10 million in revenues in 2025 across global markets. More than half of its revenues were generated in the US, UK and Germany, as the company progressively expanded its intern
LTM Introduces BlueVerse ™ OneToken with Harnessing Capabilities to Optimize Token Spend24.9.2026 11:30:00 EEST | Press release
LTM, the Business Creativity partner to the world’s largest enterprises, today announced BlueVerse™ OneToken, a workload routing and governance layer with Harnessing Capabilities that automatically channels enterprise AI requests to the right model at the right cost. As enterprises scale agentic workflows, requests are often routed to expensive frontier models even when lower-cost options can deliver the required outcome. BlueVerse OneToken manages model selection across workloads including code, voice, service, research and agents, matching each task with the most appropriate model, based on the client’s quality, security and performance requirements. Clients can deploy BlueVerse OneToken over their existing AI environment, giving them a single subscription for AI consumption enabling them to consume AI through their existing cloud providers using OneToken plug-ins, available across AWS, Google Cloud and Microsoft Azure. LTM manages any mix of frontier, mainstream, small language, and
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom