Binarly Releases Free Detection Tool for XZ Backdoor
1.4.2024 23:39:00 EEST | Business Wire | Press release
Binarly, provider of an industry leading AI-powered firmware and software supply chain security platform, has created and released a free scanning tool to help defenders spot signs of the dangerous XZ backdoor (CVE-2024-3094).
The XZ.fail detection tool was released less than 24 hours after the discovery of a backdoor in the open-source XZ Utils, which provides lossless data compression on virtually all Unix-like operating systems, including Linux. (See CISA advisory).
According to Binarly chief executive Alex Matrosov, the tool includes generic IFUNC implantation detection with close to zero false-positives, showcasing the company’s binary code intelligence engine in action.
“This detection is based on behavioral analysis and can detect any invariants automatically if a similar backdoor is implanted somewhere else,” Matrosov added.
“Such a complex and professionally designed implantation framework is not developed for a one-shot operation. It could already be deployed elsewhere or partially reused in other operations. That’s exactly why we started focusing on more generic detection for this complex backdoor,” Matrosov added.
For those seeking more comprehensive detection and remediation strategies, the Binarly Transparency Platform offers an in-depth solution. With XZ detection capabilities deployed, the platform facilitates easy identification of malicious activities at scale, enabling users to take prompt and effective action to safeguard their software supply chains.
The XZ backdoor came to light on March 29, 2024, when a thread was published on Openwall's oss-security mailing list by Andres Freund, revealing a potential compromise in the open-source code.
For more information read our research article and access the free XZ backdoor scanner at XZ.fail.
About Binarly:
Binarly is a global firmware and software supply chain security company founded in 2021. The company’s flagship Binarly Transparency Platform is an enterprise-class, AI-powered solution used by device manufacturers, OEMs, IBVs and product security teams to identify known and unknown vulnerabilities, misconfigurations and signs of malicious code implantation. Binarly’s validated remediation playbooks have significantly reduced the cost and time to respond to security exposures. Based in Los Angeles, California, Binarly brings decades of research and program analysis expertise to build solutions to protect businesses, critical infrastructure, and consumers around the world.
To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.
View source version on businesswire.com: https://www.businesswire.com/news/home/20240401230046/en/
Contact information
media@binarly.io
818.351.9637
About Business Wire
For more than 50 years, Business Wire has been the global leader in press release distribution and regulatory disclosure.
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
Fi Expands International Footprint to 38 Countries Worldwide2.6.2026 20:25:00 EEST | Press release
Fi, the leader in smart pet technology, today announced a major international expansion, bringing its AI-powered GPS pet wearables and connectivity network to 38 countries across North America and Europe. Fi devices are now available for purchase in 29 markets, including newly added countries such as Finland, Sweden, Denmark, Austria, Belgium, the Netherlands, Romania, Slovakia, and Latvia. Through Fi's international connectivity network, customers can also use Fi in Switzerland, Norway, Liechtenstein, Iceland, and Turkey, bringing Fi's total coverage footprint to 38 countries. The expansion reflects growing demand from pet owners who want reliable connectivity and health insights, whether they're at home or traveling abroad. "Wherever your pet roams, Fi should work," said Jonathan Bensamoun, Founder and CEO of Fi. "As more pet owners travel internationally and expect seamless connectivity, we're expanding Fi's footprint to help them stay connected to their pets across more of Europe a
XFolio AI Acquires Absolute Payment Solutions to Unify Treasury and Payments for UK Corporates2.6.2026 20:16:00 EEST | Press release
XFolio AI (xfolio.ai), a Paris-based treasury and cash management technology group, has acquired Absolute Payment Solutions (APS) (https://www.absolutepayments.com/), one of a select number of Pay.UK-accredited Bacs service providers in the UK. This acquisition creates an integrated platform spanning Bacs and all payment types, open banking, risk management, and treasury—giving UK corporates of all sizes the tools to manage cash and execute payments in one place. APS’s Bacs accreditation underpins payment services relied upon daily by organisations across both the public and private sectors, from SMEs running payroll and direct debit collections to large corporates processing high-volume payment flows. While enterprise payment platforms often demand significant scale and budget, and lighter solutions trade capability for speed of setup, APS and XFolio together deliver accredited Bacs infrastructure combined with advanced treasury intelligence across SWIFT, API, H2H, and EBICS rails—wit
Amazfit Introduces a New Era of Hybrid Training with Balance 3 and Balance Ultra2.6.2026 20:00:00 EEST | Press release
Amazfit, a leading global smart wearable brand owned by Zepp Health, today unveiled the Amazfit Balance 3 and Amazfit Balance Ultra, the newest additions to the Balance series and the hero watches for Amazfit’s new Hybrid Training System, connecting performance tracking with intelligent training guidance through the Zepp App. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260602329170/en/ Built around how modern athletes train today, Balance 3 and Balance Ultra are designed for people balancing strength, endurance, recovery, work, stress, and daily life. The devices serve as the engine layer of the connected Hybrid Training ecosystem, capturing how users train, recover, and respond over time. The products were unveiled at a launch event in New York during a panel hosted by leading voices from the fitness and HYROX community. Built around how modern athletes train today, Balance 3 and Balance Ultra are designed for people bal
Mouser's Rise of the Robots Program Explores Humanoid Design Considerations2.6.2026 18:19:00 EEST | Press release
Mouser Electronics, Inc., the authorized global distributor with the newest electronic components and industrial automation products, today announced the latest installment of its Empowering Innovation Together (EIT) technology series, Rise of the Robots, which explores key technologies behind humanoid robots and their potential for transformation. The series shares how these robots have progressed from simple machinery to critical tools used in caregiving, industrial automation, education, and even in the harshest environments. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260602293561/en/ The latest EIT installment explores the engineering design process, system integration challenges, and the role of legacy infrastructure, safety, and ROI in shaping scalable humanoid robot deployment. While science fiction has long envisioned robots resembling humans, recent advances in sensing, actuation, AI, embedded computing, and pow
Blue Cloud Ventures Announces Final Close of Blue Cloud Ventures V2.6.2026 17:35:00 EEST | Press release
Blue Cloud Ventures (BCV), a venture growth firm focused on investing in enterprise software companies, announced the final close of its fifth fund, Blue Cloud Ventures V (BCV V). This milestone reinforces the firm’s continued mission to back category-defining companies that are poised to thrive in the age of AI. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260602186634/en/ At the core of BCV’s strategy is building deep conviction in and backing companies that possess the potential to define or reshape entire industries. With BCV V, the firm is doubling down on its AI-first investment thesis, aiming to back and support visionary teams on their long-term growth journey as they build the systems that will serve as the backbone of the modern enterprise. Blue Cloud typically invests between $10 and $30 million as a lead, co-lead, or co-investor. Beyond support with strategy, recruiting, and customer introductions, the firm pro
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom