Binarly Releases Free Detection Tool for XZ Backdoor
1.4.2024 23:39:00 EEST | Business Wire | Press release
Binarly, provider of an industry leading AI-powered firmware and software supply chain security platform, has created and released a free scanning tool to help defenders spot signs of the dangerous XZ backdoor (CVE-2024-3094).
The XZ.fail detection tool was released less than 24 hours after the discovery of a backdoor in the open-source XZ Utils, which provides lossless data compression on virtually all Unix-like operating systems, including Linux. (See CISA advisory).
According to Binarly chief executive Alex Matrosov, the tool includes generic IFUNC implantation detection with close to zero false-positives, showcasing the company’s binary code intelligence engine in action.
“This detection is based on behavioral analysis and can detect any invariants automatically if a similar backdoor is implanted somewhere else,” Matrosov added.
“Such a complex and professionally designed implantation framework is not developed for a one-shot operation. It could already be deployed elsewhere or partially reused in other operations. That’s exactly why we started focusing on more generic detection for this complex backdoor,” Matrosov added.
For those seeking more comprehensive detection and remediation strategies, the Binarly Transparency Platform offers an in-depth solution. With XZ detection capabilities deployed, the platform facilitates easy identification of malicious activities at scale, enabling users to take prompt and effective action to safeguard their software supply chains.
The XZ backdoor came to light on March 29, 2024, when a thread was published on Openwall's oss-security mailing list by Andres Freund, revealing a potential compromise in the open-source code.
For more information read our research article and access the free XZ backdoor scanner at XZ.fail.
About Binarly:
Binarly is a global firmware and software supply chain security company founded in 2021. The company’s flagship Binarly Transparency Platform is an enterprise-class, AI-powered solution used by device manufacturers, OEMs, IBVs and product security teams to identify known and unknown vulnerabilities, misconfigurations and signs of malicious code implantation. Binarly’s validated remediation playbooks have significantly reduced the cost and time to respond to security exposures. Based in Los Angeles, California, Binarly brings decades of research and program analysis expertise to build solutions to protect businesses, critical infrastructure, and consumers around the world.
To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.
View source version on businesswire.com: https://www.businesswire.com/news/home/20240401230046/en/
Contact information
media@binarly.io
818.351.9637
About Business Wire
For more than 50 years, Business Wire has been the global leader in press release distribution and regulatory disclosure.
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
NIQ and Similarweb Advance Agentic Commerce Measurement for the AI Shopping Era2.9.2026 13:45:00 EEST | Press release
NIQ (NYSE: NIQ), a leading consumer intelligence company, today announced further advancements in its Agentic Commerce Measurement strategy through a collaboration with Similarweb (NYSE: SMWB). The companies are collaborating on a new solution to help brands, retailers and technology platforms understand how products are purchased in an increasingly agentic economy. The work adds a measurement component to NIQ's Commerce Intelligence strategy, focused on deploying NIQ’s world-class, AI-ready content directly into agentic commerce workflows and equipping brands and retailers with the signals they need to react effectively. AI agents are moving beyond product discovery to become part of the purchase itself. New infrastructure, including Google's Universal Commerce Protocol and OpenAI's Agentic Commerce Protocol, is enabling consumers to complete the entire buying journey, from item discovery to evaluation and recommendation to purchase, inside of a single AI experience. This creates a ne
MEX Exchange, part of MultiBank Group, Strengthens Global Operations and Technology Leadership with Three Senior Promotions2.9.2026 13:38:00 EEST | Press release
MEX Exchange, the institutional electronic trading platform of MultiBank Group, has announced three senior promotions as it strengthens its operational and technology leadership to support the continued development and international growth of its institutional trading business. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260902298207/en/ Jeremy Pearce has been promoted to COO – Middle East, Africa & Asia, Beth White to COO – Americas & Europe, and James Longo to Chief Technology Officer (CTO). Jeremy Pearce has been promoted to COO – Middle East, Africa & Asia, Beth White to COO – Americas & Europe, and James Longo to Chief Technology Officer (CTO). The appointments establish dedicated operational leadership across MEX Exchange’s key international markets, supported by experienced technology leadership as the company continues to develop its global electronic trading infrastructure. Pearce brings 20 years of experience ru
Compass Pathways Recognized as a 2026 Fierce 50 Breakthrough Honoree2.9.2026 13:30:00 EEST | Press release
Compass Pathways, a biotechnology company dedicated to unlocking urgently needed new treatment options in mental health care, has been named a 2026 Fierce 50 Breakthrough honoree by Fierce Pharma, Fierce Biotech and Fierce Healthcare. The Fierce 50 recognizes 50 individuals and organizations driving advancements in medicine, fostering innovation and shaping the future of biopharma and healthcare. Compass is leading a profound shift in the development of new treatment options in mental health care – moving beyond daily or frequent administration toward an option that could potentially provide durable efficacy with just a few treatments a year that could be life changing for patients. Supported by robust clinical data from three late-stage trials involving more than 1,000 participants living with treatment-resistant depression (TRD), COMP360 psilocybin, if approved by the U.S. Food & Drug Administration (FDA), has the potential to establish a new standard of care for a condition affectin
Exeon Analytics expands management team for next growth phase2.9.2026 11:00:00 EEST | Press release
Exeon Analytics is expanding its management team with two new roles. Wayne Jennings takes on the newly created position of Chief Solutions Officer, and Johan Roman becomes Chief Revenue Officer. The appointments fall in the company’s anniversary year, ten years after its founding as an ETH Zurich spin-off, and create the structure for the next growth phase. Exeon Analytics delivers holistic security analytics for organizations facing growing blind spots, encrypted traffic and regulatory pressure. Wayne Jennings joined Exeon Analytics in July 2024 and initially led Support and Engineering. As Chief Solutions Officer, he is responsible for the technical customer lifecycle, from pre-sales and proof of concept through implementation to long-term technical account management, and for the technical enablement of partners. Before joining Exeon Analytics, he was a Senior Manager in Cybersecurity & Privacy at PwC Switzerland, focusing on threat intelligence and incident response. Johan Roman br
euroAtlantic Airways Expands Long-Haul Fleet With a New Airbus A330-300 Aircraft2.9.2026 10:00:00 EEST | Press release
euroAtlantic Airways (“EAA”), a Njord Partners portfolio company and a leading Portuguese aircraft wet-leasing and charter business, is pleased to announce the induction of a new Airbus A330-300 aircraft into its fleet, further strengthening its long-haul widebody capabilities and reinforcing the Company's growth trajectory in the ACMI and charter markets. The Airbus A330-300 is leased from Jackson Square Aviation (JSA). Only 15 years old, the aircraft is configured in a three-class layout of Business, Premium Economy and Economy, accommodating a total of 290 passengers, and features full lie-flat seating in Business Class along with personal in-seat entertainment monitors fitted across the entire cabin. The aircraft, which will be registered as CS-TGI after completing its normal process of approval with authorities, has already completed its delivery journey, departing Kuala Lumpur (KUL) and arriving into Beja, Portugal (BYJ) on 17 August 2026. This aircraft type is known for its effi
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom