Binarly Releases Free Detection Tool for XZ Backdoor
1.4.2024 23:39:00 EEST | Business Wire | Press release
Binarly, provider of an industry leading AI-powered firmware and software supply chain security platform, has created and released a free scanning tool to help defenders spot signs of the dangerous XZ backdoor (CVE-2024-3094).
The XZ.fail detection tool was released less than 24 hours after the discovery of a backdoor in the open-source XZ Utils, which provides lossless data compression on virtually all Unix-like operating systems, including Linux. (See CISA advisory).
According to Binarly chief executive Alex Matrosov, the tool includes generic IFUNC implantation detection with close to zero false-positives, showcasing the company’s binary code intelligence engine in action.
“This detection is based on behavioral analysis and can detect any invariants automatically if a similar backdoor is implanted somewhere else,” Matrosov added.
“Such a complex and professionally designed implantation framework is not developed for a one-shot operation. It could already be deployed elsewhere or partially reused in other operations. That’s exactly why we started focusing on more generic detection for this complex backdoor,” Matrosov added.
For those seeking more comprehensive detection and remediation strategies, the Binarly Transparency Platform offers an in-depth solution. With XZ detection capabilities deployed, the platform facilitates easy identification of malicious activities at scale, enabling users to take prompt and effective action to safeguard their software supply chains.
The XZ backdoor came to light on March 29, 2024, when a thread was published on Openwall's oss-security mailing list by Andres Freund, revealing a potential compromise in the open-source code.
For more information read our research article and access the free XZ backdoor scanner at XZ.fail.
About Binarly:
Binarly is a global firmware and software supply chain security company founded in 2021. The company’s flagship Binarly Transparency Platform is an enterprise-class, AI-powered solution used by device manufacturers, OEMs, IBVs and product security teams to identify known and unknown vulnerabilities, misconfigurations and signs of malicious code implantation. Binarly’s validated remediation playbooks have significantly reduced the cost and time to respond to security exposures. Based in Los Angeles, California, Binarly brings decades of research and program analysis expertise to build solutions to protect businesses, critical infrastructure, and consumers around the world.
To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.
View source version on businesswire.com: https://www.businesswire.com/news/home/20240401230046/en/
Contact information
media@binarly.io
818.351.9637
About Business Wire
For more than 50 years, Business Wire has been the global leader in press release distribution and regulatory disclosure.
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
FlexGen’s HybridOS Energy Management System Receives ISO 9001:2015 Certification, Strengthening Its Platform to Serve International Markets29.7.2026 15:00:00 EEST | Press release
FlexGen Power Systems, LLC. (“FlexGen”), a leading battery energy storage system and energy management software provider, today announced that its HybridOS energy management platform is ISO 9001:2015 certified. ISO 9001:2015 is an internationally recognized standard for quality management, meaning the systems and processes behind HybridOS, from design, development, deployment, and remote software support, have been accredited by the certification body. “Battery storage is critical infrastructure for keeping the lights on, but it can only do its job if grid operators can trust it to perform when it’s needed,” said Mike Wallace, Managing Director of Europe for FlexGen. “Security, safety, and quality must be built into every layer of battery storage technology to ensure it can be relied on to power industry, mission-critical systems, and residences. High availability, high performance, and high security standards are all a must for battery storage assets needed across the globe.” This cer
Copeland Enters into Exclusive Negotiations to Acquire Dickson, Advancing Cold Chain Leadership29.7.2026 15:00:00 EEST | Press release
Copeland, a global leader in compression technologies and controls solutions, today announced its entry into exclusive negotiations towards the purchase of Dickson, a portfolio company of May River Capital and provider of environmental monitoring and cloud-native software solutions for regulated life sciences and healthcare applications. The proposed acquisition will strengthen Copeland’s strategy of enabling an efficient and effective cold chain, building on its existing stationary and in-transit monitoring capabilities to deliver an end-to-end solution that helps healthcare, pharmaceutical and life sciences customers safeguard product integrity, maintain compliance and reduce operational risk. Quality assurance and environmental monitoring represents a large and secularly growing market opportunity, driven by increasing regulatory requirements, the expansion of biologics and cell and gene therapies, and rising demand for supply chain transparency. Dickson's cloud-native monitoring pl
Wind Point Partners Announces Final Close of Oversubscribed Fund XI at $3.2 Billion29.7.2026 15:00:00 EEST | Press release
Wind Point Partners (“Wind Point”), a leading Chicago-based private equity firm, today announced the successful closing of its latest fund, Wind Point Partners XI (“Fund XI” or the “Fund”). Fund XI was oversubscribed and exceeded the hard cap, with total commitments of $3.2 billion. This amount includes significant commitments by the General Partner and members of the firm’s Executive Advisor Partner (“EAP”) program, providing strong alignment across all investors in the Fund. Fund XI represents Wind Point’s largest fund to date and its most global and diverse investor base in the firm’s 42-year history. Fund XI received commitments from more than 65 global institutions spanning 17 countries, including pension funds, insurance companies, asset managers, family offices and foundations. Propelled by significant repeat support from existing investors, the efficient fundraise process was completed in under nine months. Founded in 1984, Wind Point has a long history of partnering with top-c
Workiva Launches Specialized AI Agents and Intelligence Layer to Advance High-Stakes Reporting29.7.2026 15:00:00 EEST | Press release
Workiva Inc. (NYSE: WK), a leading, audit-ready platform for trust, transparency, and accountability, today announced three purpose-built AI agents and Workiva Knowledge, a persistent intelligence layer grounded in an organization's data, instructions, and content. The agents will help customers in advanced solution tiers accelerate reporting and compliance outcomes with the control and traceability of the Workiva platform. Together, these capabilities offer enterprise teams governed AI at the speed and scale their organizations require. "Finance, sustainability, risk, and compliance teams are moving from execution to orchestration as AI agents take on more of the work, and we're building the platform that makes that transformation possible," said Deepak Bharadwaj, Chief Product Officer of Workiva. "As we evolve the Workiva platform, we're staying true to what our customers have always counted on us to deliver: accuracy, transparency, and solutions shaped by the reality and complexity
Xpress Genomics Joins Parse Biosciences’ Certified Service Provider Network29.7.2026 15:00:00 EEST | Press release
Parse Biosciences, the leading provider of scalable and accessible single cell sequencing, and a QIAGEN company, today announced that Xpress Genomics has joined its Certified Service Provider (CSP) program, becoming the first in the Nordic region. The Stockholm-based company will offer Parse's Evercode single cell sequencing portfolio to researchers through its existing sequencing service pipeline. Originating out of the Karolinska Institutet in 2022, Xpress Genomics has built automated, in-house workflows for NGS projects. Joining the CSP program adds Evercode to the company's service offerings, giving its customers direct access to Parse's split-pool single cell technology. "Our customers expect fast, high-quality results," said Christoph Ziegenhain, CEO at Xpress Genomics. "Offering Evercode through our CSP membership gives them a strong option for single cell projects, backed by the same turnaround and quality standards our lab runs on." "Adding Xpress Genomics to our CSP program m
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom