Binarly Releases Free Detection Tool for XZ Backdoor
1.4.2024 23:39:00 EEST | Business Wire | Press release
Binarly, provider of an industry leading AI-powered firmware and software supply chain security platform, has created and released a free scanning tool to help defenders spot signs of the dangerous XZ backdoor (CVE-2024-3094).
The XZ.fail detection tool was released less than 24 hours after the discovery of a backdoor in the open-source XZ Utils, which provides lossless data compression on virtually all Unix-like operating systems, including Linux. (See CISA advisory).
According to Binarly chief executive Alex Matrosov, the tool includes generic IFUNC implantation detection with close to zero false-positives, showcasing the company’s binary code intelligence engine in action.
“This detection is based on behavioral analysis and can detect any invariants automatically if a similar backdoor is implanted somewhere else,” Matrosov added.
“Such a complex and professionally designed implantation framework is not developed for a one-shot operation. It could already be deployed elsewhere or partially reused in other operations. That’s exactly why we started focusing on more generic detection for this complex backdoor,” Matrosov added.
For those seeking more comprehensive detection and remediation strategies, the Binarly Transparency Platform offers an in-depth solution. With XZ detection capabilities deployed, the platform facilitates easy identification of malicious activities at scale, enabling users to take prompt and effective action to safeguard their software supply chains.
The XZ backdoor came to light on March 29, 2024, when a thread was published on Openwall's oss-security mailing list by Andres Freund, revealing a potential compromise in the open-source code.
For more information read our research article and access the free XZ backdoor scanner at XZ.fail.
About Binarly:
Binarly is a global firmware and software supply chain security company founded in 2021. The company’s flagship Binarly Transparency Platform is an enterprise-class, AI-powered solution used by device manufacturers, OEMs, IBVs and product security teams to identify known and unknown vulnerabilities, misconfigurations and signs of malicious code implantation. Binarly’s validated remediation playbooks have significantly reduced the cost and time to respond to security exposures. Based in Los Angeles, California, Binarly brings decades of research and program analysis expertise to build solutions to protect businesses, critical infrastructure, and consumers around the world.
To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.
View source version on businesswire.com: https://www.businesswire.com/news/home/20240401230046/en/
Contact information
media@binarly.io
818.351.9637
About Business Wire
For more than 50 years, Business Wire has been the global leader in press release distribution and regulatory disclosure.
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
The Rock-It Company Expands Dynamic Dox to Provide ATA Carnet Services Across the US and Canada9.9.2026 18:00:00 EEST | Press release
The Rock-It Company announced today the expansion of Dynamic Dox, the industry-leading provider of ATA Carnets, to now service partners and projects based in the United States, Canada and beyond. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260909137375/en/ Following over a decade of expertise and leading service across the United Kingdom since 2014, Dynamic Dox will now provide new regions with dedicated document preparation for time-sensitive logistics projects, and urgent ATA Carnets for international shipments and critical business travel needs. The news of the expansion follows Dynamic Dox’s recent brand refresh, introducing an updated identity and connection to The Rock-It Company as Dynamic Dox By Rock-It. The expansion is led by Amanda Barlow, VP of Global ATA Carnets at The Rock-It Company, who has helped to drive the platform’s growth in ATA Carnets, customs services and beyond. The Rock-It Company recently enabl
Ennov Appoints Oxana Pickeral as Chief Executive Officer9.9.2026 17:00:00 EEST | Press release
Ennov (the “Company”), a global provider of a unified compliance platform that streamlines regulatory, clinical, quality, and pharmacovigilance operations for life sciences and healthcare companies, today announced the appointment of Dr. Oxana Pickeral as Chief Executive Officer. Founder and outgoing CEO, Olivier Pâris, will join Ennov’s Board of Directors and continue to support the company as a Strategic Advisor. Dr. Pickeral has spent her career at the forefront of innovation in life sciences technology, from her early work on the Human Genome Project to growing Amazon Web Services’ Healthcare & Life Sciences partner business, enabling modern cloud solutions across the industry. She joins Ennov most recently from Honeywell, where she served as Global Software and Connected Life Sciences business leader, and previously as President and CEO of Sparta Systems, a Honeywell company. Across her leadership roles, she has successfully scaled global companies at the intersection of life scie
Three Chugai Researchers Behind the Discovery of Hemlibra for Hemophilia A Receive Prestigious U.S. Lasker Award, One of the World’s Most Respected Scientific Honors9.9.2026 16:45:00 EEST | Press release
Chugai Pharmaceutical Co., Ltd. (TOKYO: 4519) today announced that Dr. Kunihiro Hattori (former Senior Fellow of Chugai), Dr. Takehisa Kitazawa (Deputy Head of Research Division, Chugai), and Dr. Tomoyuki Igawa (Head of Research Division, Chugai), who led the creation of Hemlibra (emicizumab), a treatment for hemophilia A, have been awarded the Lasker-DeBakey Clinical Medical Research Award, one of the world's most prestigious scientific honors. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260909923883/en/ From left: Dr. Kitazawa, Dr. Hattori, and Dr. Igawa Hemophilia A is caused by a deficiency of coagulation Factor VIII, one of the proteins required for normal blood clotting. When activated, Factor VIII serves as a bridge that facilitates the activation of Factor X by activated Factor IX on the surface of activated platelets. The award recognizes the unconventional concept of replacing this function of Factor VIII with a
AMCS Appoints Richard Humphrey as Chief Product and Technology Officer9.9.2026 16:00:00 EEST | Press release
AMCS, a leading technology provider for the waste and recycling industry, today announced the appointment of Richard Humphrey as Chief Product and Technology Officer. Based in Boston, Humphrey will lead the company’s global product organisation. Humphrey brings more than 25 years of experience developing software for construction and other complex industrial environments. He joins AMCS as the company deepens its focus on waste and recycling and expands the role of AI across its platform. Most recently, Humphrey served as Chief Product and Technology Officer at Contruent, where he led product strategy for a construction cost-management platform used on major capital programmes. He previously held vice president roles at Bentley Systems and B2W Software. Earlier in his career, he spent more than a decade at Autodesk, where he led its Civil Design and Construction software business as Senior Director. “Richard understands what it takes to build software for industries where the work is ex
BBH Launches a New Technology Business, Braid, Solving for Intelligent Data Transformation9.9.2026 15:45:00 EEST | Press release
Brown Brothers Harriman (BBH) today announced the launch of a new technology affiliate, Braid LLC, focused on solving enterprise data transformation for financial services. Braid offers an AI-native data transformation platform that gives firms a scale solution to transform, connect, and manage their data with confidence. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260909294398/en/ Braid empowers teams to build, automate, and oversee reliable production-grade data transformations in a fraction of the time typically required today. Instead of requiring engineers to build data automations, Braid allows business users to describe their needs in natural language that AI agents use to build intelligent data transformations that are transparent and fully auditable. Braid’s enterprise-grade engine then processes and delivers those data transformations in a controlled and deterministic environment. Built by financial services exp
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom