Binarly Releases Free Detection Tool for XZ Backdoor
Binarly, provider of an industry leading AI-powered firmware and software supply chain security platform, has created and released a free scanning tool to help defenders spot signs of the dangerous XZ backdoor (CVE-2024-3094).
The XZ.fail detection tool was released less than 24 hours after the discovery of a backdoor in the open-source XZ Utils, which provides lossless data compression on virtually all Unix-like operating systems, including Linux. (See CISA advisory).
According to Binarly chief executive Alex Matrosov, the tool includes generic IFUNC implantation detection with close to zero false-positives, showcasing the company’s binary code intelligence engine in action.
“This detection is based on behavioral analysis and can detect any invariants automatically if a similar backdoor is implanted somewhere else,” Matrosov added.
“Such a complex and professionally designed implantation framework is not developed for a one-shot operation. It could already be deployed elsewhere or partially reused in other operations. That’s exactly why we started focusing on more generic detection for this complex backdoor,” Matrosov added.
For those seeking more comprehensive detection and remediation strategies, the Binarly Transparency Platform offers an in-depth solution. With XZ detection capabilities deployed, the platform facilitates easy identification of malicious activities at scale, enabling users to take prompt and effective action to safeguard their software supply chains.
The XZ backdoor came to light on March 29, 2024, when a thread was published on Openwall's oss-security mailing list by Andres Freund, revealing a potential compromise in the open-source code.
For more information read our research article and access the free XZ backdoor scanner at XZ.fail.
About Binarly:
Binarly is a global firmware and software supply chain security company founded in 2021. The company’s flagship Binarly Transparency Platform is an enterprise-class, AI-powered solution used by device manufacturers, OEMs, IBVs and product security teams to identify known and unknown vulnerabilities, misconfigurations and signs of malicious code implantation. Binarly’s validated remediation playbooks have significantly reduced the cost and time to respond to security exposures. Based in Los Angeles, California, Binarly brings decades of research and program analysis expertise to build solutions to protect businesses, critical infrastructure, and consumers around the world.
To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.
View source version on businesswire.com: https://www.businesswire.com/news/home/20240401230046/en/
Contact information
media@binarly.io
818.351.9637
About Business Wire
For more than 50 years, Business Wire has been the global leader in press release distribution and regulatory disclosure.
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
TOXINS 2026: Clinical Updates on Galderma’s Leading Neuromodulator Portfolio Further Reinforce Its Leadership in Injectable Aesthetics14.1.2026 08:00:00 EET | Press release
Galderma (SIX: GALD) will present data on its innovative and industry-leading neuromodulator portfolio at the TOXINS 2026 International Conference in Madrid, Spain from January 14-17, 2026. The company will share data from five abstracts on two neuromodulators from its portfolio, Relfydess – the first and only ready-to-use liquid neuromodulator designed with PEARL Technology – and Dysport. Additionally, Galderma will be hosting a Relfydess Masterclass in which expert speakers will delve into the science and clinical data behind Relfydess. “At TOXINS 2026, we will demonstrate our continued leadership in neuromodulation through updates on our leading portfolio, and an educational session on Relfydess, an innovative, science-backed neuromodulator that delivers advanced performance. As the only company with a portfolio of neuromodulators, we’re building on our heritage in the space by developing next-generation solutions that address the evolving expectations of both patients and practitio
Zayed Sustainability Prize Honours Global Pioneers Advancing Progress14.1.2026 03:35:00 EET | Press release
The Zayed Sustainability Prize, the UAE’s pioneering award for innovative solutions to global challenges, today announced the cohort of 2026 winners, celebrating 18 years of empowering communities and driving inclusive, sustainable progress around the world. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260113958706/en/ The 2026 winners of the Zayed Sustainability Prize were recognised by the President of the UAE in Abu Dhabi on 13 January 2026 (Photo: AETOSWire) In a ceremony held during Abu Dhabi Sustainability Week (ADSW) and attended by Heads of State, Ministers, and business leaders, His Highness Sheikh Mohamed bin Zayed, President of the UAE, awarded the winners for their outstanding contributions to advancing sustainable development worldwide. H.H. Sheikh Mohamed bin Zayed Al Nahyan said: “The UAE remains firmly committed to supporting efforts that enhance people’s well-being and strengthen the foundations of stabili
Alta Semper Secures USD 57.5 Million from EIB Group and IFC for Growth Fund II to Expand Healthcare Access Across Africa13.1.2026 20:30:00 EET | Press release
Alta Semper Capital LLP (“Alta Semper”), a London-based private equity firm focused on healthcare and consumer investments in high-growth markets, today announced that it has secured USD 57.5 million in commitments to Alta Semper Growth Fund II. These commitments come from a consortium of investors including the European Investment Bank (EIB) Group and the International Finance Corporation (IFC). This landmark partnership was signified earlier today with a momentous signing ceremony held at a Government Ministry in Cairo. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260113837616/en/ Andrew McDowell (EIB), Cheick Oumar Sylla (IFC), Gelsomina Vigliotti (EIB), Rania Al-Mashat (Minister of Planning, Economic Development and International Cooperation of Egypt), Bassel Rahmy (MSMEDA), Afsane Jetha (CEO, Alta Semper) and Mark Bryson-Richardson MBE (British Ambassador to Egypt) at the signing ceremony in Cairo. (Photo: AETOSWire)
500 Global and Creators HQ Support Creators and Founders Building Startups Collectively Valued at US$130M+13.1.2026 18:00:00 EET | Press release
500 Global, one of the world’s most active Silicon Valley-based venture capital firms1, and Creators HQ, the first content creator hub in the UAE and the Middle East enabling the creator ecosystem globally, announced the Creators Ventures Accelerator program is building and supporting creator-led startups collectively valued at over US$130 million.2 The Creators Ventures Accelerator received over 1,100 applications from content creators and technology startup founders across more than 70 countries. Following a competitive selection process, 21 creators and founders were chosen for the program. This cohort serves a community of 20M+ followers, subscribers, and users across platforms. “Creators represent a growing class of bona fide entrepreneurs, with 50 million creators globally, projected to grow at 10-20% annually over the next 5 years. The first iteration of this industry was built on visibility and virality to monetize. With consumers getting savvier and more discerning, we believe
Nexo Becomes First-Ever Title Partner of the U.S. ATP 500 Dallas Open in Multi-Year Deal13.1.2026 17:30:00 EET | Press release
Nexo, the digital assets wealth platform, has been named the U.S. ATP 500 Dallas Open’s first-ever Title Partner under a multi-year agreement beginning in 2026, as the company advances its long-term brand strategy through leading global sports properties. The partnership was unveiled in Dallas alongside the debut of the Nexo Dallas Open brand and the resurfacing of two public tennis courts in North Texas. As one of only two ATP 500 tournaments in the U.S. and the country’s sole indoor ATP Tour championship, the Dallas Open places Nexo among a limited group of ATP 500 title partners. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260113901822/en/ The Nexo Dallas Open “This partnership with Nexo represents a transformative milestone for the Dallas Open,” said Tournament Director Peter Lebedevs. “Securing a title sponsor of this caliber as we launch into year two as an ATP 500 event continues to elevate our tournament on the gl
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom