Binarly Releases Free Detection Tool for XZ Backdoor
1.4.2024 23:39:00 EEST | Business Wire | Press release
Binarly, provider of an industry leading AI-powered firmware and software supply chain security platform, has created and released a free scanning tool to help defenders spot signs of the dangerous XZ backdoor (CVE-2024-3094).
The XZ.fail detection tool was released less than 24 hours after the discovery of a backdoor in the open-source XZ Utils, which provides lossless data compression on virtually all Unix-like operating systems, including Linux. (See CISA advisory).
According to Binarly chief executive Alex Matrosov, the tool includes generic IFUNC implantation detection with close to zero false-positives, showcasing the company’s binary code intelligence engine in action.
“This detection is based on behavioral analysis and can detect any invariants automatically if a similar backdoor is implanted somewhere else,” Matrosov added.
“Such a complex and professionally designed implantation framework is not developed for a one-shot operation. It could already be deployed elsewhere or partially reused in other operations. That’s exactly why we started focusing on more generic detection for this complex backdoor,” Matrosov added.
For those seeking more comprehensive detection and remediation strategies, the Binarly Transparency Platform offers an in-depth solution. With XZ detection capabilities deployed, the platform facilitates easy identification of malicious activities at scale, enabling users to take prompt and effective action to safeguard their software supply chains.
The XZ backdoor came to light on March 29, 2024, when a thread was published on Openwall's oss-security mailing list by Andres Freund, revealing a potential compromise in the open-source code.
For more information read our research article and access the free XZ backdoor scanner at XZ.fail.
About Binarly:
Binarly is a global firmware and software supply chain security company founded in 2021. The company’s flagship Binarly Transparency Platform is an enterprise-class, AI-powered solution used by device manufacturers, OEMs, IBVs and product security teams to identify known and unknown vulnerabilities, misconfigurations and signs of malicious code implantation. Binarly’s validated remediation playbooks have significantly reduced the cost and time to respond to security exposures. Based in Los Angeles, California, Binarly brings decades of research and program analysis expertise to build solutions to protect businesses, critical infrastructure, and consumers around the world.
To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.
View source version on businesswire.com: https://www.businesswire.com/news/home/20240401230046/en/
Contact information
media@binarly.io
818.351.9637
About Business Wire
For more than 50 years, Business Wire has been the global leader in press release distribution and regulatory disclosure.
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
The Global Photonics Community Converges in San Francisco as More Than 23,000 Register for Photonics West 20263.2.2026 23:14:00 EET | Press release
SPIE, the international society for optics and photonics, brought the global optics and photonics community to San Francisco, California, for another successful and enlivening Photonics West. With more than 23,000 registrants, the annual conference and exhibition connected attendees from 40 countries, showcasing the transnational and collaborative spirit of the interdisciplinary industry. The dynamic event ran from 17 to 22 January, with 4,200 technical presentations across 100 conferences, 4 stages of industry-focused panels and presentations, 49 courses, and approximately 1,600 exhibitors in the five expos: Photonics West, BiOS, Quantum West, AR | VR | MR, plus, in its inaugural year, Vision Tech. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260203925940/en/ Attendees of the 2026 SPIE Photonics West fill the Moscone Center, where nearly 1,600 exhibitors showcased their products. With an emphasis on the application of adv
Vena To Acquire Acterys, Creating a New Category of Enterprise Performance Management: Orchestrated Planning3.2.2026 18:00:00 EET | Press release
Vena, the only complete FP&A platform powered by agentic AI and purpose-built to amplify the Microsoft technology ecosystem, today announced it has entered into a definitive agreement to acquire Managility Pty Ltd, operating as Acterys (“Acterys”), the industry’s leading Power BI–based operational planning and app development platform, subject to customary closing conditions and regulatory approval. This acquisition unlocks a category-defining way for enterprises to combine planning, analytics, and application development within the Microsoft tools they already trust to run their business. By combining Vena’s Excel-native financial planning and analysis (FP&A) capabilities with Acterys’ proprietary Power BI write-back engine and unified analytics within Microsoft Fabric, Vena is creating the first Microsoft-native environment for Orchestrated Planning, an operating model that moves organizations beyond integrated planning into fully orchestrated and agentic AI-powered execution. Orches
Volante Technologies named a Leader in Gartner® Magic Quadrant™ for Banking Payment Hub Platforms3.2.2026 17:15:00 EET | Press release
Volante Technologies, the global leader in Payments as a Service (PaaS), today announced its recognition as a Leader in the 2026 Gartner® Magic Quadrant™ for Banking Payment Hub Platforms, which evaluates vendors based on Ability to Execute and Completeness of Vision. In Volante’s view, Gartner positioned them as a Leader based on their capacity to support enterprise-scale payment processing in banks and financial institutions across multiple regions, deployment models, and operational environments. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260203149834/en/ This graphic was published by Gartner, Inc. as part of a larger research document and should be evaluated in the context of the entire document. As the highest positioned provider in Ability to Execute, Volante believes its AI-poweredPayments Platform is ISO 20022 native and provides complete, always-on, and composable payment processing support and can be deployed p
Toptal Ranked #1 Most Reliable Professional Services Company in America by Newsweek3.2.2026 17:00:00 EET | Press release
Toptal, the world’s largest fully remote workforce, has been ranked the #1 most reliable professional services company in America on the America’s Most Reliable Companies 2026 list by Newsweek and Statista. The list ranks top US companies based on trust, dependability, and consistent performance in their industry. In Newsweek’s ranking of 300 companies across all industries, Toptal took 10th place, right behind Bank of America and Oracle, which tied for 9th. As the most reliable professional services organization in America, Toptal, which ranked 11th in absolute rankings across all companies, placed well ahead of companies like Accenture (33), Deloitte (39), and Cognizant (66). The America’s Most Reliable Companies 2026 ranking is based on an independent survey of more than 80,000 evaluations submitted by 2,400 business decision-makers at America’s largest companies, including Apple, Dropbox, Johnson & Johnson, and UPS, making this recognition an especially meaningful indicator of prod
HTEC Research Reveals the Real AI Scaling Challenge: It’s Not the Technology3.2.2026 16:46:00 EET | Press release
AI has moved from ambition to action. Every organization is deploying it. Yet for most enterprises, the real challenge is only just beginning. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260203951136/en/ HTEC, a global AI‑first provider of software and hardware design and engineering services, released Executive Summary: A Cross‑Industry View of the State of AI in 2025, a global research report capturing how senior executives are navigating the next phase of AI transformation—and why scaling value remains elusive. Today, HTEC, a global AI‑first provider of software and hardware design and engineering services, released Executive Summary: A Cross‑Industry View of the State of AI in 2025, a global research report that captures how senior executives are navigating the next phase of AI transformation—and why scaling value remains elusive. Based on insights from 1,529 C‑suite executives worldwide, the research offers one of th
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom