Binarly Releases Free Detection Tool for XZ Backdoor
1.4.2024 23:39:00 EEST | Business Wire | Press release
Binarly, provider of an industry leading AI-powered firmware and software supply chain security platform, has created and released a free scanning tool to help defenders spot signs of the dangerous XZ backdoor (CVE-2024-3094).
The XZ.fail detection tool was released less than 24 hours after the discovery of a backdoor in the open-source XZ Utils, which provides lossless data compression on virtually all Unix-like operating systems, including Linux. (See CISA advisory).
According to Binarly chief executive Alex Matrosov, the tool includes generic IFUNC implantation detection with close to zero false-positives, showcasing the company’s binary code intelligence engine in action.
“This detection is based on behavioral analysis and can detect any invariants automatically if a similar backdoor is implanted somewhere else,” Matrosov added.
“Such a complex and professionally designed implantation framework is not developed for a one-shot operation. It could already be deployed elsewhere or partially reused in other operations. That’s exactly why we started focusing on more generic detection for this complex backdoor,” Matrosov added.
For those seeking more comprehensive detection and remediation strategies, the Binarly Transparency Platform offers an in-depth solution. With XZ detection capabilities deployed, the platform facilitates easy identification of malicious activities at scale, enabling users to take prompt and effective action to safeguard their software supply chains.
The XZ backdoor came to light on March 29, 2024, when a thread was published on Openwall's oss-security mailing list by Andres Freund, revealing a potential compromise in the open-source code.
For more information read our research article and access the free XZ backdoor scanner at XZ.fail.
About Binarly:
Binarly is a global firmware and software supply chain security company founded in 2021. The company’s flagship Binarly Transparency Platform is an enterprise-class, AI-powered solution used by device manufacturers, OEMs, IBVs and product security teams to identify known and unknown vulnerabilities, misconfigurations and signs of malicious code implantation. Binarly’s validated remediation playbooks have significantly reduced the cost and time to respond to security exposures. Based in Los Angeles, California, Binarly brings decades of research and program analysis expertise to build solutions to protect businesses, critical infrastructure, and consumers around the world.
To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.
View source version on businesswire.com: https://www.businesswire.com/news/home/20240401230046/en/
Contact information
media@binarly.io
818.351.9637
About Business Wire
For more than 50 years, Business Wire has been the global leader in press release distribution and regulatory disclosure.
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
Rigaku and Tohoku University Establish a New Research Institute for X-Ray Metrology28.8.2026 17:00:00 EEST | Press release
Rigaku Corporation, a group company of Rigaku Holdings and a global solutions partner for X-ray analytical systems (Head Office: Akishima, Tokyo; President and CEO: Jun Kawakami; “Rigaku”), and Tohoku University (Sendai, Miyagi; President: Teiji Tominaga; “Tohoku University”) have established the Rigaku-Tohoku University Co-Creation Research Institute for X-ray Metrology: Beyond The Limits (the “Institute”) at Tohoku University on August 1, 2026. The Institute will advance X-ray metrology technology, develop new metrology methods, and foster the next generation of researchers through an initial three-year collaboration, with the possibility of extension based on its achievements. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260828688510/en/ Inside the Institute As semiconductors become smaller, more multilayered, and incorporate a wider range of materials, manufacturing processes are becoming increasingly complex. X-ray me
BLK: Portfolio Company of Enry’s Island S.p.A., Lists on Euronext Dublin28.8.2026 16:34:00 EEST | Press release
Enry’s Island S.p.A. (WBAG:EIOS), an international venture builder with headquarters in the Tremiti Islands and the Metaverse, announces that BLK Global PLC, one of the portfolio companies within its ecosystem, has successfully completed its admission to trading on Euronext Access Dublin. Trading in the company’s shares commenced on Friday, July 31, 2026, under ticker BLKX and ISIN GB00BPSKS130. BLK was one of the thousands of applications received by Enry’s Island which, following an assessment process based on the Enry’s Model, was selected for a one-year incubation and acceleration programme. The programme supported the company through its subsequent growth stages, ultimately leading to its current stock market listing. Alessandro Pacciana, Investor Relations Manager of Enry’s Island S.p.A., said: “BLK’s listing is the second stock market listing in two years among Enry’s Island’s portfolio companies, while Enry’s Island itself is the world’s first listed venture builder. We are pro
Zambon Announces European Commission Approval of Hopledo® for Adults with Parkinson's Disease and Moderate to Severe Motor Fluctuations28.8.2026 12:00:00 EEST | Press release
Zambon today announced that the European Commission (EC) has granted marketing authorization for Hopledo® (modified-release levodopa/carbidopa) for the treatment of adult patients with Parkinson’s disease and moderate to severe motor fluctuations who have not been sufficiently stabilized with oral levodopa/dopa decarboxylase (DDC) inhibitor-based treatment regimens. Zambon expects to begin the phased introduction of Hopledo® across European markets starting October 2026. The company is working closely with healthcare authorities and other stakeholders to support timely access for people with Parkinson’s disease who continue to experience moderate to severe motor fluctuations despite current oral therapies. Hopledo® is a first-in-class, oral, modified-release formulation of levodopa/carbidopa (LD/CD) approved for the treatment of motor fluctuations of Parkinson’s disease, the fastest growing neurological condition in the world according to the World Health Organization1. Despite availab
MTG-I2 Safely in Orbit, Unlocking Faster and Sharper Weather Monitoring Across Europe28.8.2026 11:16:00 EEST | Press release
The Meteosat Third Generation Imager 2 satellite (MTG-I2) has successfully passed its first critical post-launch milestones, completing the first full Meteosat Third Generation constellation in orbit. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260828243790/en/ Credit: Arianespace livestream The imager satellite MTG-I2 is safely in orbit and operating as expected following its successful launch yesterday at 22:11 CEST on board an Ariane 6 rocket from Europe’s Spaceport in French Guiana. Our teams have established communication with the spacecraft, which has also deployed its solar panels to ensure its autonomous production of energy. MTG-I2 is in perfect shape to start its Launch and Early Operations Phase that will bring it to a higher orbit, 36 000km above Earth over the following two weeks, where a longer period of calibration and validation of its instruments will begin. This summer’s extreme weather and wildfires hav
New Daiichi Sankyo Data Underscore the Effect of Bempedoic Acid in the Real-World Management of Dyslipidemia and Cardiovascular risk28.8.2026 11:00:00 EEST | Press release
Daiichi Sankyo (TSE:4568) today announced new results from the MILOS study that demonstrate the real-world impact of bempedoic acid administered either alone or as a fixed-dose combination with ezetimibe, in the management of dyslipidaemia. Presented at the European Society of Cardiology Congress 2026 in Munich, the findings show that the clinically relevant reductions in low-density lipoprotein cholesterol (LDL-C) achieved within the first year of treatment are estimated to translate into clinically meaningful reductions in 10-year cardiovascular (CV) risk.1 The data further reinforce the clinical value of bempedoic acid, and its fixed-dose combination with ezetimibe, across a diverse range of patient subtypes, regardless of gender and glycaemic profile (diabetes, pre-diabetes, or normoglycemia).2,3 Key findings from the new analyses of the MILOS study include: 10-year CV risk estimate reduction: An analysis of 960 at-risk patients estimated that one year of bempedoic acid-add-on ther
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom