Binarly Releases Free Detection Tool for XZ Backdoor
1.4.2024 23:39:00 EEST | Business Wire | Press release
Binarly, provider of an industry leading AI-powered firmware and software supply chain security platform, has created and released a free scanning tool to help defenders spot signs of the dangerous XZ backdoor (CVE-2024-3094).
The XZ.fail detection tool was released less than 24 hours after the discovery of a backdoor in the open-source XZ Utils, which provides lossless data compression on virtually all Unix-like operating systems, including Linux. (See CISA advisory).
According to Binarly chief executive Alex Matrosov, the tool includes generic IFUNC implantation detection with close to zero false-positives, showcasing the company’s binary code intelligence engine in action.
“This detection is based on behavioral analysis and can detect any invariants automatically if a similar backdoor is implanted somewhere else,” Matrosov added.
“Such a complex and professionally designed implantation framework is not developed for a one-shot operation. It could already be deployed elsewhere or partially reused in other operations. That’s exactly why we started focusing on more generic detection for this complex backdoor,” Matrosov added.
For those seeking more comprehensive detection and remediation strategies, the Binarly Transparency Platform offers an in-depth solution. With XZ detection capabilities deployed, the platform facilitates easy identification of malicious activities at scale, enabling users to take prompt and effective action to safeguard their software supply chains.
The XZ backdoor came to light on March 29, 2024, when a thread was published on Openwall's oss-security mailing list by Andres Freund, revealing a potential compromise in the open-source code.
For more information read our research article and access the free XZ backdoor scanner at XZ.fail.
About Binarly:
Binarly is a global firmware and software supply chain security company founded in 2021. The company’s flagship Binarly Transparency Platform is an enterprise-class, AI-powered solution used by device manufacturers, OEMs, IBVs and product security teams to identify known and unknown vulnerabilities, misconfigurations and signs of malicious code implantation. Binarly’s validated remediation playbooks have significantly reduced the cost and time to respond to security exposures. Based in Los Angeles, California, Binarly brings decades of research and program analysis expertise to build solutions to protect businesses, critical infrastructure, and consumers around the world.
To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.
View source version on businesswire.com: https://www.businesswire.com/news/home/20240401230046/en/
Contact information
media@binarly.io
818.351.9637
About Business Wire
For more than 50 years, Business Wire has been the global leader in press release distribution and regulatory disclosure.
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
NetApp Helps Customers Accelerate Adoption of Latest VMware Cloud Foundation Innovations2.9.2026 23:30:00 EEST | Press release
NetApp® (NASDAQ: NTAP), the Intelligent Data Infrastructure company, announced new capabilities in NetApp ONTAP® have been tested and validated to support VMware Cloud Foundation (VCF) 9.1, giving customers an optimized and secure data infrastructure foundation for their private and hybrid clouds. By combining the advanced capabilities of VCF 9.1 with cost-effective and enterprise data management with built-in security features from NetApp, including safeguarding data against ransomware attacks with rapid recovery, mutual customers can lower costs and accelerate the deployment of their AI software into production. VMware Cloud Foundation 9.1 provides enterprises with a unified private cloud platform for running both traditional and modern workloads. NetApp's solutions are tested and validated to support VCF 9.1 environments, enabling mutual customers to immediately begin taking advantage of VCF 9.1 innovations when they upgrade, with a data infrastructure layer already proven to work w
Venture Global Announces Closing of $3,000,000,000 364-Day Senior Secured Revolving Credit Facility2.9.2026 23:30:00 EEST | Press release
Venture Global, Inc. (“Venture Global”) announced today that its subsidiary Venture Global LNG, Inc. (“VGLNG”) has entered into a new, $3,000,000,000 364-day revolving credit facility (the “Facility”). Venture Global expects to use the proceeds from borrowings under the Facility for general corporate purposes of VGLNG and its subsidiaries, including to fund certain project costs for the CP2 and Plaquemines bolt-on expansions prior to their respective FIDs. Bank of America, N.A. served as Coordinating Lead Arranger and Sole Bookrunner and will also serve as Administrative Agent. BBVA, Goldman Sachs, ING, J.P. Morgan, Mizuho, MUFG, NBC, RBC, Scotia, SMBC, U.S. Bank, and Wells Fargo served as Coordinating Lead Arrangers and Barclays, Santander, and Deutsche Bank served as Joint Lead Arrangers. About Venture Global Venture Global is an American producer and exporter of low-cost U.S. liquefied natural gas (LNG) with over 100 MTPA of capacity in production, construction, or development. Vent
Invivoscribe Begins Commercial Shipments of PrepQuant ™ Systems, Enabling High-Sensitivity Sample Preparation for MRD Testing2.9.2026 22:31:00 EEST | Press release
Invivoscribe®, a global leader in precision diagnostics and measurable residual disease (MRD) testing, today announced that commercial shipments of the PrepQuant™ System have begun in North America. First unveiled at the American Association for Cancer Research Annual Meeting in April 2026, PrepQuant is now being delivered to customers, marking the platform's progression from development and validation into commercial deployment. The commercial milestone extends Invivoscribe's capabilities into laboratory instrumentation and addresses a critical bottleneck in highly sensitive molecular testing: efficiently recovering, concentrating, and quantifying DNA from larger blood and plasma inputs. PrepQuant is assay agnostic, designed to produce concentrated genomic DNA and cell-free DNA (cfDNA) suitable for a full range of downstream molecular workflows, including MRD assays intended to detect very low levels of residual disease. MRD Sensitivity Starts Before the Assay As MRD testing moves tow
C.H. Guenther Opens Centre of Excellence in Coventry, UK to Accelerate Bakery Innovation and Support Future Manufacturing Growth Across UK and Europe2.9.2026 19:00:00 EEST | Press release
C.H. Guenther & Son LLC (“C.H. Guenther” or “CHG”), a leading food manufacturer, has opened a new Centre of Excellence (the “Centre”) at its flagship Coventry bakery, creating a dedicated innovation and customer collaboration hub designed to accelerate the development of premium bakery products across the UK and Europe. The new facility has been designed to support CHG’s customers including leading global quick service restaurants, foodservice operators and retailers as they develop, test and refine new bakery products. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260902696890/en/ The purpose-built, 172-square-metre Centre of Excellence brings together a commercial-scale bakery, customer demonstration kitchen, sensory evaluation facilities, innovation suite and dedicated collaboration spaces in one specialized location. Designed to support and accelerate product development from concept through to commercial manufacturing,
Record Asset Management Enters New Phase of Growth2.9.2026 18:35:00 EEST | Press release
Record Asset Management GmbH (“RAM”), a subsidiary of London-listed Record plc (“Record” or the “Group”), is pleased to announce that it is now operating cashflow positive, thereby marking a transition from its investment phase into a growth business within the Group, and a significant milestone towards sustainable profitability. RAM is the European asset management arm of Record, the London-listed specialist investment group managing USD 122 billion of assets on behalf of institutional clients worldwide. Record's client base comprises pension funds, foundations, sovereign institutions and other asset managers, with whom the Group has built long-standing relationships through its focus on bespoke investment and risk management solutions. RAM was established as a sister company to Record’s core currency business and obtained its BaFin license in 2022. RAM has grown rapidly in the last two years and has developed into a diversified private markets platform with dedicated infrastructure e
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom