Binarly Releases Free Detection Tool for XZ Backdoor
1.4.2024 23:39:00 EEST | Business Wire | Press release
Binarly, provider of an industry leading AI-powered firmware and software supply chain security platform, has created and released a free scanning tool to help defenders spot signs of the dangerous XZ backdoor (CVE-2024-3094).
The XZ.fail detection tool was released less than 24 hours after the discovery of a backdoor in the open-source XZ Utils, which provides lossless data compression on virtually all Unix-like operating systems, including Linux. (See CISA advisory).
According to Binarly chief executive Alex Matrosov, the tool includes generic IFUNC implantation detection with close to zero false-positives, showcasing the company’s binary code intelligence engine in action.
“This detection is based on behavioral analysis and can detect any invariants automatically if a similar backdoor is implanted somewhere else,” Matrosov added.
“Such a complex and professionally designed implantation framework is not developed for a one-shot operation. It could already be deployed elsewhere or partially reused in other operations. That’s exactly why we started focusing on more generic detection for this complex backdoor,” Matrosov added.
For those seeking more comprehensive detection and remediation strategies, the Binarly Transparency Platform offers an in-depth solution. With XZ detection capabilities deployed, the platform facilitates easy identification of malicious activities at scale, enabling users to take prompt and effective action to safeguard their software supply chains.
The XZ backdoor came to light on March 29, 2024, when a thread was published on Openwall's oss-security mailing list by Andres Freund, revealing a potential compromise in the open-source code.
For more information read our research article and access the free XZ backdoor scanner at XZ.fail.
About Binarly:
Binarly is a global firmware and software supply chain security company founded in 2021. The company’s flagship Binarly Transparency Platform is an enterprise-class, AI-powered solution used by device manufacturers, OEMs, IBVs and product security teams to identify known and unknown vulnerabilities, misconfigurations and signs of malicious code implantation. Binarly’s validated remediation playbooks have significantly reduced the cost and time to respond to security exposures. Based in Los Angeles, California, Binarly brings decades of research and program analysis expertise to build solutions to protect businesses, critical infrastructure, and consumers around the world.
To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.
View source version on businesswire.com: https://www.businesswire.com/news/home/20240401230046/en/
Contact information
media@binarly.io
818.351.9637
About Business Wire
For more than 50 years, Business Wire has been the global leader in press release distribution and regulatory disclosure.
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
SES and Air Astana Introduce Multi-orbit Inflight Connectivity on A321LR Fleet30.10.2026 19:35:00 EET | Press release
SES was selected by Air Astana, the award-winning flag carrier of Kazakhstan, to introduce next-generation inflight connectivity services across its Airbus A321LR fleet. The first connected aircraft entered commercial service on 29 October 2026. Fleet-wide deployment will continue across the remaining A321LR fleet. Equipped with SES’s new electronically steered array (ESA) antenna, the aircraft delivers reliable connectivity over the SES multi-orbit network. SES will provide a fully managed inflight connectivity service across the fleet, enabling Air Astana passengers to enjoy a seamless online experience throughout their journey. “Airlines are increasingly looking for connectivity solutions that deliver a seamless passenger experience while providing the flexibility to evolve with changing customer expectations,” said Blane Boynton, Senior Vice President, Aviation at SES. “SES's multi-orbit solution will enable Air Astana to offer a consistent, high-quality online experience across it
CIRCOR to Expand Industrial Portfolio with Acquisition of Green Silence Group S.p.A.30.10.2026 18:06:00 EET | Press release
CIRCOR, a KKR portfolio company and global manufacturer of flow control products for industrial and naval markets, today announced that it has signed a definitive agreement to acquire Green Silence Group S.p.A., an Italian provider of hydraulic pumps, electric motors and advanced engineering solutions. The acquisition will bring together the complementary capabilities of Settima, Motive and Spin expanding CIRCOR’s Industrial portfolio with three-screw and ultra-low-noise hydraulic pumps, Motive electric motors, high-efficiency rare-earth-free motor technologies, power electronics and advanced engineering capabilities. Together, these technologies will broaden CIRCOR’s ability to deliver integrated solutions that improve system efficiency, reduce energy consumption and critical raw materials dependency, and address evolving customer needs across industrial and mobile applications. The combination will also provide Green Silence Group access to CIRCOR’s global commercial and operational
Quectel Sues Telit, Alleging False Statements, Cybersquatting and Unfair Competition30.10.2026 17:41:00 EET | Press release
Quectel Wireless Solutions, a global end-to-end IoT solutions provider, today announced that it has filed legal action in the United States District Court for the Southern District of Florida against Telit IoT Solutions Inc. The lawsuit seeks to bring an end to Telit’s campaign of false and misleading claims about Quectel and its products. Quectel alleges that, rather than competing on the strength of its products and technology, Telit engaged in a coordinated campaign to undermine Quectel’s reputation by exploiting geopolitical concerns surrounding Chinese technology companies. According to the complaint, Telit funded, promoted, and amplified false and misleading claims about Quectel’s products while positioning itself to customers as a safer “Western” alternative. The lawsuit further alleges that Telit engaged in cybersquatting involving Quectel’s U.S. domain name to advance its campaign. Quectel maintains that these alleged actions have caused substantial harm to its sales, customer
TestMu AI Launches Kane CLI Exploration, an AI Agent That Maps an Entire Web App From a Single URL and Turns It Into Tests30.10.2026 16:00:00 EET | Press release
TestMu AI, the Full Stack Agentic AI Quality Engineering platform, announced Kane CLI Exploration, an autonomous agent that learns a web application before anyone writes a test. Given a single URL, it walks the entire app on its own, flags problems along the way and gives Kane CLI the context it needs to generate and run tests, even when no requirements, user stories or acceptance criteria exist. Every test plan starts from something written down, and many apps never had it. Legacy products lose their specs when the people who wrote them move on, and apps a coding agent built in a week often have no record of intended behavior beyond the prompt history. With nothing to test against, a testing agent ends up grading the app against itself. Starting from the URL a developer provides, the exploration agent moves through every page, junction and flow it can reach, the way a new QA engineer clicks through a product in their first week. For each page it records the controls, the flows in and
The Estée Lauder Companies and Microsoft Announce a New Strategic Partnership to Power Enterprise Efficiency and Consumer-Centric Growth30.10.2026 15:22:00 EET | Press release
The Estée Lauder Companies Inc. (NYSE: EL) today announced a new strategic partnership with Microsoft Corp. to advance its cloud and data foundation and support the responsible adoption of AI-enabled capabilities across the enterprise. The collaboration will help connect data and intelligent tools to support faster innovation, more efficient operations, and more relevant consumer experiences. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20261030616823/en/ This new partnership is a critical part of The Estée Lauder Companies’ One Operating Ecosystem, which brings together shared platforms, connected data, and best-in-class partners to enable consistent, scalable, and effective execution across the enterprise. A key initiative of this expanded partnership is harnessing the Microsoft platform to advance the company’s Unified Data Platform. This foundation is the core enabler for AI and agility—connecting the company's data acro
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom