Binarly Releases Free Detection Tool for XZ Backdoor
1.4.2024 23:39:00 EEST | Business Wire | Press release
Binarly, provider of an industry leading AI-powered firmware and software supply chain security platform, has created and released a free scanning tool to help defenders spot signs of the dangerous XZ backdoor (CVE-2024-3094).
The XZ.fail detection tool was released less than 24 hours after the discovery of a backdoor in the open-source XZ Utils, which provides lossless data compression on virtually all Unix-like operating systems, including Linux. (See CISA advisory).
According to Binarly chief executive Alex Matrosov, the tool includes generic IFUNC implantation detection with close to zero false-positives, showcasing the company’s binary code intelligence engine in action.
“This detection is based on behavioral analysis and can detect any invariants automatically if a similar backdoor is implanted somewhere else,” Matrosov added.
“Such a complex and professionally designed implantation framework is not developed for a one-shot operation. It could already be deployed elsewhere or partially reused in other operations. That’s exactly why we started focusing on more generic detection for this complex backdoor,” Matrosov added.
For those seeking more comprehensive detection and remediation strategies, the Binarly Transparency Platform offers an in-depth solution. With XZ detection capabilities deployed, the platform facilitates easy identification of malicious activities at scale, enabling users to take prompt and effective action to safeguard their software supply chains.
The XZ backdoor came to light on March 29, 2024, when a thread was published on Openwall's oss-security mailing list by Andres Freund, revealing a potential compromise in the open-source code.
For more information read our research article and access the free XZ backdoor scanner at XZ.fail.
About Binarly:
Binarly is a global firmware and software supply chain security company founded in 2021. The company’s flagship Binarly Transparency Platform is an enterprise-class, AI-powered solution used by device manufacturers, OEMs, IBVs and product security teams to identify known and unknown vulnerabilities, misconfigurations and signs of malicious code implantation. Binarly’s validated remediation playbooks have significantly reduced the cost and time to respond to security exposures. Based in Los Angeles, California, Binarly brings decades of research and program analysis expertise to build solutions to protect businesses, critical infrastructure, and consumers around the world.
To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.
View source version on businesswire.com: https://www.businesswire.com/news/home/20240401230046/en/
Contact information
media@binarly.io
818.351.9637
About Business Wire
For more than 50 years, Business Wire has been the global leader in press release distribution and regulatory disclosure.
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
Skechers Enters Super Shoe Era With Innovative Skechers AERO Elite1.10.2026 15:20:00 EEST | Press release
Skechers is redefining what it means to run fast with the Skechers AERO Elite. The latest addition to the innovative Skechers AERO Series makes its global racing debut today—marking a landmark moment as the performance brand’s first super shoe. Engineered to perform from 5Ks to marathons, the design minimizes weight and maximizes responsiveness, all while delivering Skechers’ signature comfort. The AERO Elite is built to win with the performance runners at any level need to go further, faster, and achieve that next personal record. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20261001865320/en/ Introducing the Skechers AERO Elite, the brand’s first super shoe designed for racing. “The Skechers AERO Elite is the culmination of years of elite-level running innovation—our most technically advanced running shoe to date and a direct statement of intent as we look ahead to the 2028 Summer Games in Los Angeles,” said Catherine Zou,
Visa Data Shows Stablecoins Gaining Traction in Business Payments1.10.2026 15:00:00 EEST | Press release
Today, Visa (NYSE: V) shared new data showing the growing adoption of stablecoins across business payments and commercial card programs, underscoring how stablecoins are increasingly being used as financial infrastructure. The findings come as businesses, financial institutions and payment providers increasingly explore stablecoins for settlement, treasury management, payouts and cross-border commerce. New Visa data shows: Approximately 17% of stablecoin-linked card volume in FY26 year-to-date occurred across business and commercial card programs. Visa today supports more than 160 stablecoin-linked card programs spanning consumer, business and commercial card activity. Payments volume across these programs has grown nearly 200% year over year. Businesses are increasingly exploring stablecoins for settlement, treasury management, payouts and cross-border commerce. "Businesses aren't looking for new payment technologies for the sake of innovation. They’re looking for trusted, reliable wa
New Research: Organizations with Strong Process Context 5x More Likely to Deliver Successful AI Outcomes1.10.2026 15:00:00 EEST | Press release
Organizations with strong process context are five times more likely to report very successful AI outcomes, according to new research from The Hackett Group® and ARIS, highlighting the critical role business understanding plays in enabling enterprises to deploy agentic AI at scale. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20261001144480/en/ The Process Context Study 2026 found that companies experienced with strong process context were 5x more likely to be seeing successful outcomes from AI The Process Context Study 2026 examines how prepared Global 2000 companies are to deploy agents into core business processes and how process context is key to agents operating reliably and securely at enterprise-level, driving measurable new business value. The findings expose a significant gap between enterprise AI ambition and current operational readiness: 86% of respondents believe agents cannot be deployed reliably without proces
NetApp Recognizes Winners of 2026 North America Partner Awards1.10.2026 15:00:00 EEST | Press release
NetApp® (NASDAQ: NTAP), the Intelligent Data Infrastructure company, today announced at NetApp INSIGHT 2026 the winners of its North America Partner Awards for Fiscal Year 2026 (FY’26). NetApp’s strategic partnerships aid in providing NetApp products and solutions to solve the business challenges of their joint customers. The North America Partner Award winners have been instrumental in helping customers to build an Intelligent Data Infrastructure through the NetApp Platform, that can securely evolve and scale with their needs by driving sales of NetApp’s solutions and services. Each winning partner has demonstrated a thorough understanding of the NetApp portfolio and has proven their ability to leverage NetApp’s innovative solutions and services to give customers the confidence they need to overcome today’s biggest technology challenges. “Now more than ever, we must empower customers with AI-ready data that is secure by default and built for hybrid environments so they can achieve the
Moody’s Analytics and Allvue Launch Credit Risk Model to Identify Early Signs of Borrower Stress in Private Credit1.10.2026 15:00:00 EEST | Press release
Moody’s Corporation (NYSE: MCO), a global leader in risk assessment and credit analytics, and Allvue Systems, LLC, a leading technology and data provider for private capital markets, today announced the launch of the Moody’s Analytics EDF-X Private Credit Model, a new forward-looking credit risk model purpose-built for the private credit market. Built on Moody’s deep credit expertise and Allvue’s private credit performance data, the model identifies early signals of borrower stress, such as covenant waivers and payment-in-kind arrangements, well before they show up as missed payments or defaults. Moody’s projects private credit to approach $4 trillion in assets by 2030, and investors and lenders are increasingly seeking earlier visibility on where risk is building across portfolios. Unlike public credit markets where participants have the benefit of access to published credit ratings, financial disclosures, and transparent pricing, private credit often relies on proprietary credit asse
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom