Binarly Releases Free Detection Tool for XZ Backdoor
1.4.2024 23:39:00 EEST | Business Wire | Press release
Binarly, provider of an industry leading AI-powered firmware and software supply chain security platform, has created and released a free scanning tool to help defenders spot signs of the dangerous XZ backdoor (CVE-2024-3094).
The XZ.fail detection tool was released less than 24 hours after the discovery of a backdoor in the open-source XZ Utils, which provides lossless data compression on virtually all Unix-like operating systems, including Linux. (See CISA advisory).
According to Binarly chief executive Alex Matrosov, the tool includes generic IFUNC implantation detection with close to zero false-positives, showcasing the company’s binary code intelligence engine in action.
“This detection is based on behavioral analysis and can detect any invariants automatically if a similar backdoor is implanted somewhere else,” Matrosov added.
“Such a complex and professionally designed implantation framework is not developed for a one-shot operation. It could already be deployed elsewhere or partially reused in other operations. That’s exactly why we started focusing on more generic detection for this complex backdoor,” Matrosov added.
For those seeking more comprehensive detection and remediation strategies, the Binarly Transparency Platform offers an in-depth solution. With XZ detection capabilities deployed, the platform facilitates easy identification of malicious activities at scale, enabling users to take prompt and effective action to safeguard their software supply chains.
The XZ backdoor came to light on March 29, 2024, when a thread was published on Openwall's oss-security mailing list by Andres Freund, revealing a potential compromise in the open-source code.
For more information read our research article and access the free XZ backdoor scanner at XZ.fail.
About Binarly:
Binarly is a global firmware and software supply chain security company founded in 2021. The company’s flagship Binarly Transparency Platform is an enterprise-class, AI-powered solution used by device manufacturers, OEMs, IBVs and product security teams to identify known and unknown vulnerabilities, misconfigurations and signs of malicious code implantation. Binarly’s validated remediation playbooks have significantly reduced the cost and time to respond to security exposures. Based in Los Angeles, California, Binarly brings decades of research and program analysis expertise to build solutions to protect businesses, critical infrastructure, and consumers around the world.
To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.
View source version on businesswire.com: https://www.businesswire.com/news/home/20240401230046/en/
Contact information
media@binarly.io
818.351.9637
About Business Wire
For more than 50 years, Business Wire has been the global leader in press release distribution and regulatory disclosure.
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
SES Statement On FCC Upper C-band Auction Decision27.7.2026 08:30:00 EEST | Press release
SES, a leading space solutions company, issued the following statement following the U.S. Federal Communications Commission approval of the Upper C-band Report & Order that makes 160 megahertz of the Upper C-band available in the contiguous United States for flexible-use, next-generation terrestrial wireless services via a system of competitive bidding. The required auction of the Upper C-band will be completed no later than July 2027, with spectrum clearing deadlines in 2030 and 2031. Gross incentive payments of approximately $5.6 billion to SES are contingent on spectrum clearing within the transition deadlines. The Order also confirms reimbursement of reasonable and necessary Upper C-band transition costs as approved by the clearinghouse. SES CEO Adel Al-Saleh Commented: “We commend Chairman Carr and the FCC staff for their diligence, speed, and hard work. We remain fully committed to working cooperatively with the FCC and all stakeholders as the process progresses. We are pleased t
LTM and Cognition Partner to Reduce Cyber Risk in Financial Services with Devin27.7.2026 08:00:00 EEST | Press release
LTM, the Business Creativity partner to the world's largest enterprises, today announced a strategic partnership with Cognition, the AI lab behind the software engineering agent Devin. As a part of this partnership, LTM has onboarded Devin, Cognition’s Autonomous AI Engineer as part of BlueVerseTM RightLogic. LTM BlueVerse RightLogic, is a cybersecurity assessment and risk assurance framework designed to help enterprises identify, assess and remediate cyber exposure as they accelerate AI adoption. Together, the companies will prioritize financial services sector, where Devin is most proven and where LTM brings deep institutional expertise. As AI adoption accelerates, many financial institutions are facing a widening gap between innovation and cyber risk visibility. BlueVerse RightLogic closes this gap by autonomously identifying, prioritizing and remediating vulnerabilities across banking infrastructure, applications, AI systems, software supply chains and governance—including exploits
Mobix Labs Signs Definitive Agreement to Acquire Vision Aerial, Accelerating Global Drone Platform for National Security and Aerial Intelligence24.7.2026 14:00:00 EEST | Press release
Mobix Labs, Inc. (Nasdaq: MOBX) today announced that it has signed a definitive agreement to acquire Vision Aerial, Inc., a U.S.-based designer and manufacturer of American-built, National Defense Authorization Act (NDAA)-compliant unmanned aerial systems. The definitive agreement moves the transaction beyond the previously announced letter of intent and represents a major step toward closing an acquisition that would expand Mobix Labs into one of the world’s most important technology growth markets: secure drones, autonomous aerial systems and aerial intelligence for national security, critical infrastructure, energy, public safety, industrial inspection and government operations. Vision Aerial’s customers and end-users include the U.S. Air Force, U.S. Navy, government agencies, energy and utility operators, research institutions and other organizations requiring performance, reliability and trusted supply chains. Its drones support national security and public-safety operations, sear
Enhertu ® Plus Pertuzumab Recommended for Approval in the EU by CHMP as First-Line Treatment for Patients with HER2 Positive Metastatic Breast Cancer24.7.2026 14:00:00 EEST | Press release
Enhertu® (trastuzumab deruxtecan) in combination with pertuzumab has been recommended for approval in the European Union (EU) for the first-line treatment of adult patients with unresectable or metastatic HER2 positive (immunohistochemistry [IHC] 3+ or in-situ hybridization [ISH]+) breast cancer. Enhertu is a specifically engineered HER2 directed DXd antibody drug conjugate (ADC) discovered by Daiichi Sankyo (TSE: 4568) and being jointly developed and commercialized by Daiichi Sankyo and AstraZeneca (LSE/STO/NYSE: AZN). The Committee for Medicinal Products for Human Use (CHMP) of the European Medicines Agency (EMA) based its positive opinion on results from theDESTINY-Breast09 phase 3 trialpresented at the 2025 American Society of Clinical Oncology Annual Meeting and subsequently published in The New England Journal of Medicine. The recommendation will now be reviewed by the European Commission, which has the authority to grant marketing authorizations for medicines in the EU. In DESTI
SLB Announces Second-Quarter 2026 Results24.7.2026 13:50:00 EEST | Press release
SLB (NYSE: SLB) today announced results for the second-quarter 2026. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260722694386/en/ The exterior of the SLB headquarters in Houston, Texas. Second-Quarter Results(Stated in millions, except per share amounts)Three Months EndedChangeJun. 30, 2026Mar. 31, 2026Jun. 30, 2025SequentialYear-on-yearRevenue $8,972 $8,721 $8,546 3% 5% Income before taxes - GAAP basis $1,018 $956 $1,285 6% -21% Income before taxes margin - GAAP basis 11.3% 11.0% 15.0% 38 bps -369 bps Net income attributable to SLB - GAAP basis $786 $752 $1,014 5% -22% Diluted EPS - GAAP basis $0.52 $0.50 $0.74 4% -30% Adjusted EBITDA* $1,899 $1,773 $2,051 7% -7% Adjusted EBITDA margin* 21.2% 20.3% 24.0% 83 bps -284 bps Pretax segment operating income* $1,404 $1,321 $1,584 6% -11% Pretax segment operating margin* 15.6% 15.2% 18.5% 49 bps -289 bps Net income attributable to SLB, excluding charges & credits* $833 $783 $1,0
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom