Binarly Releases Free Detection Tool for XZ Backdoor
1.4.2024 23:39:00 EEST | Business Wire | Press release
Binarly, provider of an industry leading AI-powered firmware and software supply chain security platform, has created and released a free scanning tool to help defenders spot signs of the dangerous XZ backdoor (CVE-2024-3094).
The XZ.fail detection tool was released less than 24 hours after the discovery of a backdoor in the open-source XZ Utils, which provides lossless data compression on virtually all Unix-like operating systems, including Linux. (See CISA advisory).
According to Binarly chief executive Alex Matrosov, the tool includes generic IFUNC implantation detection with close to zero false-positives, showcasing the company’s binary code intelligence engine in action.
“This detection is based on behavioral analysis and can detect any invariants automatically if a similar backdoor is implanted somewhere else,” Matrosov added.
“Such a complex and professionally designed implantation framework is not developed for a one-shot operation. It could already be deployed elsewhere or partially reused in other operations. That’s exactly why we started focusing on more generic detection for this complex backdoor,” Matrosov added.
For those seeking more comprehensive detection and remediation strategies, the Binarly Transparency Platform offers an in-depth solution. With XZ detection capabilities deployed, the platform facilitates easy identification of malicious activities at scale, enabling users to take prompt and effective action to safeguard their software supply chains.
The XZ backdoor came to light on March 29, 2024, when a thread was published on Openwall's oss-security mailing list by Andres Freund, revealing a potential compromise in the open-source code.
For more information read our research article and access the free XZ backdoor scanner at XZ.fail.
About Binarly:
Binarly is a global firmware and software supply chain security company founded in 2021. The company’s flagship Binarly Transparency Platform is an enterprise-class, AI-powered solution used by device manufacturers, OEMs, IBVs and product security teams to identify known and unknown vulnerabilities, misconfigurations and signs of malicious code implantation. Binarly’s validated remediation playbooks have significantly reduced the cost and time to respond to security exposures. Based in Los Angeles, California, Binarly brings decades of research and program analysis expertise to build solutions to protect businesses, critical infrastructure, and consumers around the world.
To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.
View source version on businesswire.com: https://www.businesswire.com/news/home/20240401230046/en/
Contact information
media@binarly.io
818.351.9637
About Business Wire
For more than 50 years, Business Wire has been the global leader in press release distribution and regulatory disclosure.
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
Opensignal Crowns the World's Best 5G Networks29.9.2026 11:18:00 EEST | Press release
Opensignal, a global independent consumer connectivity analytics and insights company, today announced its annual Opensignal 5G Global Mobile Network Experience Awards, recognizing the providers delivering the best real-world 5G experiences across their national mobile networks. The awards assess billions of real-world user experiences across Download Speed, Video, Games, Voice App, Reliability, Coverage Experience, and — new for 2026 — Time on 5G, collected between Jan. 1 and June 29, 2026. "The consumer connectivity experience is at the core of everything we do at Opensignal. As the role of 5G in modern life grows, the bar for what great 5G looks like keeps rising," said Shawn Heidel, President, Network Experience at Opensignal. "The best operators in the world are defined by how well they deliver on that challenge, and this year's Global 5G Award winners set the standard." The highest-scoring provider in each category earns the 5G Global Winner title. Global Leaders make up the next
ClickHouse Expands Collaboration With Microsoft, Bringing Fabric Integration, Deeper OneLake Interoperability, and Enterprise Deployment Flexibility29.9.2026 10:30:00 EEST | Press release
ClickHouse, the company behind the open-source, real-time analytical database that has become the data layer for the AI era, today at The European Microsoft Fabric + SQL Community Conference announced a significant expansion of its strategic collaboration with Microsoft. The announcement encompasses four major milestones: the launch of the native ClickHouse workload for Microsoft Fabric, the general availability of OneLake read, the public preview of OneLake write, and the availability of ClickHouse Bring Your Own Cloud (BYOC) in the Microsoft Marketplace. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260929947201/en/ ClickHouse expands collaboration with Microsoft This expansion builds on ClickHouse's growing presence within the Microsoft ecosystem, where data-intensive organizations rely on ClickHouse Cloud on Azure to power real-time observability, business intelligence, AI/ML pipelines, and analytical applications at sc
Opengear Expands Reach Through Pan-European Distribution Agreement with Ingram Micro29.9.2026 10:01:00 EEST | Press release
Opengear, a Digi International company (NASDAQ: DGII) and global leader in out-of-band management solutions, has signed its first pan-European distribution agreement with Ingram Micro, one of the world’s largest technology distributors. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260929668925/en/ Opengear Expands Reach Through Pan-European Distribution Agreement with Ingram Micro The agreement will give resellers in participating Ingram Micro countries access to Opengear’s portfolio, supported by Ingram Micro's regional infrastructure, logistics capabilities and partner network. This expands Opengear’s existing reach in the UK, Ireland, Spain, Germany, Italy, France, Belgium and Luxembourg, and brings its network resilience platform to resellers and end-users in additional European markets, such as Switzerland, Hungary, and Czech Republic. “This agreement with Ingram Micro marks a significant milestone in Opengear’s EMEA
Estonia and Owkin Partner to Advance Sovereign AI in Biology29.9.2026 09:00:00 EEST | Press release
Estonia, led by the National Applied Research Center Metrosert, and Owkin today announced a collaboration to advance sovereign AI in biological and health research, working with Metrosert, Estonia’s state-owned applied research organisation. The collaboration will evaluate how K Pro, Owkin’s AI scientist platform, can help approved researchers work with complex Estonian health data inside secure national infrastructure, enabling reproducible analysis, and faster generation of scientific insight while preserving data sovereignty. The first phase will focus on selected Estonian health-data cohorts, with Owkin and Metrosert also exploring high-value research areas including oncology, where linked clinical, molecular, imaging and treatment-outcome data could support future biomedical research. Estonia has built one of the world’s most advanced digital public infrastructures and holds population-scale health and biomedical data assets. The partnership will explore how these foundations can
Freemarket and Axiym launch LIQUI-DT™ – real-time business access to primary-market USD₮ from Tether29.9.2026 09:00:00 EEST | Press release
Freemarket and Axiym today launched a world-first service that gives businesses 24/7 real-time access to freshly minted, primary-market USD₮ issued by Tether. LIQUI-DTTM gives businesses compliant access to primary market stablecoins inside a fully regulated payment ecosystem via Freemarket’s global payment network. In audited trials, clients have minted or burned more than $300 million to date. Institutional users and high-volume traders will benefit from superior price certainty and direct liquidity giving them budgetary control. As the USD₮ is minted directly in the primary market, treasury and compliance teams have clear provenance for internal reporting 1. The LIQUI-DT service works because while no single party owns the whole stack, it is integrated into the Freemarket network. The combination of Freemarket’s compliant fiat rails and payment network, Axiym’s liquidity engine and on-chain settlement layer and Tether’s primary market issuance creates a regulated payments network wi
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom