Binarly Releases Free Detection Tool for XZ Backdoor
1.4.2024 23:39:00 EEST | Business Wire | Press release
Binarly, provider of an industry leading AI-powered firmware and software supply chain security platform, has created and released a free scanning tool to help defenders spot signs of the dangerous XZ backdoor (CVE-2024-3094).
The XZ.fail detection tool was released less than 24 hours after the discovery of a backdoor in the open-source XZ Utils, which provides lossless data compression on virtually all Unix-like operating systems, including Linux. (See CISA advisory).
According to Binarly chief executive Alex Matrosov, the tool includes generic IFUNC implantation detection with close to zero false-positives, showcasing the company’s binary code intelligence engine in action.
“This detection is based on behavioral analysis and can detect any invariants automatically if a similar backdoor is implanted somewhere else,” Matrosov added.
“Such a complex and professionally designed implantation framework is not developed for a one-shot operation. It could already be deployed elsewhere or partially reused in other operations. That’s exactly why we started focusing on more generic detection for this complex backdoor,” Matrosov added.
For those seeking more comprehensive detection and remediation strategies, the Binarly Transparency Platform offers an in-depth solution. With XZ detection capabilities deployed, the platform facilitates easy identification of malicious activities at scale, enabling users to take prompt and effective action to safeguard their software supply chains.
The XZ backdoor came to light on March 29, 2024, when a thread was published on Openwall's oss-security mailing list by Andres Freund, revealing a potential compromise in the open-source code.
For more information read our research article and access the free XZ backdoor scanner at XZ.fail.
About Binarly:
Binarly is a global firmware and software supply chain security company founded in 2021. The company’s flagship Binarly Transparency Platform is an enterprise-class, AI-powered solution used by device manufacturers, OEMs, IBVs and product security teams to identify known and unknown vulnerabilities, misconfigurations and signs of malicious code implantation. Binarly’s validated remediation playbooks have significantly reduced the cost and time to respond to security exposures. Based in Los Angeles, California, Binarly brings decades of research and program analysis expertise to build solutions to protect businesses, critical infrastructure, and consumers around the world.
To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.
View source version on businesswire.com: https://www.businesswire.com/news/home/20240401230046/en/
Contact information
media@binarly.io
818.351.9637
About Business Wire
For more than 50 years, Business Wire has been the global leader in press release distribution and regulatory disclosure.
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
MediaCo Appoints Brian Fisher as President21.7.2026 23:15:00 EEST | Press release
MediaCo Holding Inc. (Nasdaq: MDIA) today announced executive leadership appointments that align the Company's leadership structure to support its long-term growth strategy. Effective immediately, Brian Fisher has been appointed President of MediaCo. Albert Rodriguez will continue to serve as Chief Executive Officer, focusing on the Company's long-term strategy, growth initiatives and shareholder value, while Fisher assumes responsibility for leading the Company's day-to-day operations and execution. The Company also announced that Roberto Castro has been appointed Interim Chief Financial Officer and Interim Treasurer, overseeing the Finance organization while a search is conducted for a permanent Chief Financial Officer. "MediaCo has built tremendous momentum, and these leadership appointments position us well for our next phase of growth," said Albert Rodriguez, Chief Executive Officer of MediaCo. "Brian is the right leader to serve as President, and Roberto's financial expertise wil
Footprint Expands Into PE-Free Cups, Bringing a Proven, Recyclable and Home-Compostable Alternative to Plastic-Lined Paper Cups Into Production21.7.2026 19:00:00 EEST | Press release
Footprint, a materials science and technology company focused on eliminating single-use plastics, today announced it has acquired a recyclable, home-compostable, polyethylene (PE)-free hot and cold cup platform from Transcend Packaging, along with next-generation paper lid and straw solutions. Transcend Packaging is a European company focused on innovation in sustainable packaging solutions. Together, the cup, lid, and straw expand Footprint’s portfolio with a proven solution for the global cup market. Footprint will begin scaling its new PE-free solution through its Poland facility as the company expands across Europe, with North America to follow. As operations ramp in Poland, Footprint will work with Transcend through a manufacturing partnership to support customer continuity across Europe and meet growing demand for practical alternatives to plastic-lined cups. Transcend will manufacture product from its Wales facility for Footprint customers, while continuing to serve customers in
Spectro Cloud Launches PaletteAI Inference Launchpad to Reduce Enterprise Token Costs by up to 70%21.7.2026 17:00:00 EEST | Press release
Spectro Cloud, a leading provider of AI infrastructure management software, today launched PaletteAI Inference Launchpad, a turnkey, locally managed solution designed to help enterprises reduce token costs by as much as 70% and run AI inference closer to their data, applications and users. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260721597271/en/ The company also announced expanded PaletteAI support for AMD-powered AI infrastructure, including AMD GPUs, AMD GPU Operator, ROCm™ runtime, and the AMD enterprise AI reference stack — including AMD-optimized models from the AMD Inference Microservices (AIMs) catalog. Together, the announcements expand PaletteAI as one platform for production AI infrastructure across heterogeneous environments — giving enterprises, neoclouds and sovereign cloud providers a more flexible path to run governed AI infrastructure across NVIDIA and AMD silicon. AI infrastructure is entering the tok
RecVue Launches First AI Native Agentic Revenue Operating System21.7.2026 16:03:00 EEST | Press release
RecVue, the leader in billing and revenue management solutions, today announced the evolution of RecVue RevOS into the industry's first Agentic Revenue Operating System. In an architectural shift, the now-native agentic revenue management platform moves revenue operations beyond AI-assisted workflows to fully governed, autonomous execution with more than 50 purpose-built agents that work across contracts, invoices and payment data to predict risk, surface anomalies and escalate exceptions throughout the quote-to-cash lifecycle. Enterprise revenue operations have long suffered from a structural gap between billing systems that generate invoices and ERP systems that record transactions. Finance teams face tedious, manual reconciliation month after month, often resulting in delayed cash, billing errors that generate disputes, revenue leakage from ungoverned contract changes and close cycles that consume weeks. “Enterprise RevOps has always demanded both speed and precision, but traditiona
Yubico Extends Passkeys Beyond Trusted Authentication to Verified Authorization with Launch of YubiKey 5.821.7.2026 16:00:00 EEST | Press release
Yubico (NASDAQ STOCKHOLM: YUBICO), the pioneer of phishing-resistant authentication and creator of the original passkey, the YubiKey, today announced the general availability of its YubiKey 5.8 – marking an expansion of the role of the passkey from secure authentication to include verifiable, hardware-backed authorization. The new firmware delivers a foundation for secure enterprise workflows across identity wallets, document signing, and AI-driven approvals, while also providing developers with the critical capabilities needed to test, design and deploy these next-generation security features early. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260721286409/en/ As generative and agentic AI mature to drive rapid, automated cyberattacks, traditional multi-factor authentication (MFA) is failing to keep pace. Security leaders now face a challenge globally: securing not just who logs into a system, but exactly what actions a us
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom