Binarly Releases Free Detection Tool for XZ Backdoor
1.4.2024 23:39:00 EEST | Business Wire | Press release
Binarly, provider of an industry leading AI-powered firmware and software supply chain security platform, has created and released a free scanning tool to help defenders spot signs of the dangerous XZ backdoor (CVE-2024-3094).
The XZ.fail detection tool was released less than 24 hours after the discovery of a backdoor in the open-source XZ Utils, which provides lossless data compression on virtually all Unix-like operating systems, including Linux. (See CISA advisory).
According to Binarly chief executive Alex Matrosov, the tool includes generic IFUNC implantation detection with close to zero false-positives, showcasing the company’s binary code intelligence engine in action.
“This detection is based on behavioral analysis and can detect any invariants automatically if a similar backdoor is implanted somewhere else,” Matrosov added.
“Such a complex and professionally designed implantation framework is not developed for a one-shot operation. It could already be deployed elsewhere or partially reused in other operations. That’s exactly why we started focusing on more generic detection for this complex backdoor,” Matrosov added.
For those seeking more comprehensive detection and remediation strategies, the Binarly Transparency Platform offers an in-depth solution. With XZ detection capabilities deployed, the platform facilitates easy identification of malicious activities at scale, enabling users to take prompt and effective action to safeguard their software supply chains.
The XZ backdoor came to light on March 29, 2024, when a thread was published on Openwall's oss-security mailing list by Andres Freund, revealing a potential compromise in the open-source code.
For more information read our research article and access the free XZ backdoor scanner at XZ.fail.
About Binarly:
Binarly is a global firmware and software supply chain security company founded in 2021. The company’s flagship Binarly Transparency Platform is an enterprise-class, AI-powered solution used by device manufacturers, OEMs, IBVs and product security teams to identify known and unknown vulnerabilities, misconfigurations and signs of malicious code implantation. Binarly’s validated remediation playbooks have significantly reduced the cost and time to respond to security exposures. Based in Los Angeles, California, Binarly brings decades of research and program analysis expertise to build solutions to protect businesses, critical infrastructure, and consumers around the world.
To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.
View source version on businesswire.com: https://www.businesswire.com/news/home/20240401230046/en/
Contact information
media@binarly.io
818.351.9637
About Business Wire
For more than 50 years, Business Wire has been the global leader in press release distribution and regulatory disclosure.
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
Alushibe Holding Group to Bring 12 Global F&B Brands to Libya by 202829.10.2026 10:00:00 EET | Press release
Alushibe Holding Group today announced plans to bring 12 international food-and-beverage brands to Libya by 2028 through its Retail & Destinations division, beginning with an exclusive master franchise agreement with MADO, the Turkish ice-cream and patisserie house founded in 1850. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20261029822317/en/ Ahmed Gadalla signs exclusive master franchise agreement with Türkiye's MADO: US$7 million, 7 cafés and 350 jobs in the first phase; 1,000 sq m Benghazi flagship opens Q1 2027 – (Photo: AETOSWire) Signed in Kahramanmaraş on 13 October 2026 by Ahmed Gadalla, Founder and Chairman of Alushibe Holding Group, and Mehmet Sait Kanbur, Chairman of MADO, the agreement grants Alushibe exclusive rights to develop and operate MADO in Libya, the brand's 36th country. Alushibe will invest US$7 million in the first phase: 7 cafés and 350 jobs, beginning in Benghazi before Tripoli and other major cit
U.S. Bancorp Announces New U.S. Bancorp Global Funds Brand29.10.2026 10:00:00 EET | Press release
U.S. Bancorp today announced its new fund platform, U.S. Bancorp Global Funds, and its first offering, an offshore liquidity fund domiciled in Ireland, the U.S. Bancorp Liquidity – USD Treasury CNAV Fund. U.S. Bancorp Global Funds was created to support U.S. Bancorp’s growing international presence. It establishes a framework for future investment offerings and reflects U.S. Bancorp’s expanding presence in global markets. Investment products offered under the brand are established through U.S. Bancorp Global Funds ICAV, an Ireland-domiciled UCITS umbrella fund structure. The U.S. Bancorp Liquidity – USD Treasury CNAV Fund is the first offering introduced under the new brand. The U.S. Bancorp Liquidity – USD Treasury CNAV Fund is designed for investors outside the United States seeking to preserve capital while accessing a U.S. Treasury-focused liquidity solution within a regulated offshore structure. Domiciled in Ireland as a UCITS fund, it invests primarily in short-term U.S. Treasury
Element Biosciences Launches AVITI Dx™, Bringing CE-Marked IVD Sequencing to Ten EU Countries29.10.2026 10:00:00 EET | Press release
Element Biosciences, Inc. today announced the commercial launch of AVITI Dx, the company's first CE-marked in vitro diagnostic (IVD) sequencing platform under the European Union's In Vitro Diagnostic Regulation (EU IVDR). AVITI Dx integrates Element’s AVITI™ sequencing system, dedicated reagents, and software designed to meet applicable IVDR requirements and support regulated clinical laboratory workflows. The system is launching commercially in ten EU countries: the Netherlands, Germany, France, Italy, Spain, Austria, the Czech Republic, Latvia, Romania, and Poland, with additional markets planned through a phased approach. Developed and manufactured under Element's ISO 13485-certified quality management system, AVITI Dx is a Class A IVD sequencing system supported by IVDR-compliant reagents and software. Built on the same industry-leading ABC™ chemistry that powers Element's other solutions, AVITI Dx delivers the high-quality performance AVITI is known for, with the flexibility and s
Positively Languages Launches, Expands With Malta School and Opens New London Premises29.10.2026 10:00:00 EET | Press release
Positively Languages, a leading language learning business, is unveiling its new brand today. Formerly known as Kaplan Languages Group, (which Inspirit Capital acquired in May 2026), the business is also expanding its portfolio with the opening of a new school in Malta and a new premises in London. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20261028449595/en/ Positively Languages, formerly known as Kaplan Languages Group, has taught English, French and German to more than one million students from 140 countries over the past 20 years. The new brand name ‘Positively Languages’ is built around the principle that ‘experience moves you forward’ which forms the backbone of the future growth of the business; new products based on experiences, new schools in the heart of key cultural cities. Positively Languages is also excited to announce the opening of a new school on the Mediterranean island of Malta, known as Positively Langu
IQM Demonstrates Entanglement Across a Complete 54-Qubit Processor, Bringing Full-Chip Performance to Cloud Users29.10.2026 09:00:00 EET | Press release
IQM Quantum Computers (Nasdaq: IQMX), a global leader in superconducting quantum computers, today announced that its cloud-accessible IQM Emerald system has fully entangled all 54 qubits on the chip simultaneously, a result that shows the system’s computational quality holds up when every qubit is put to work at once. IQM’s cloud customers now have access to that same full-chip performance, so their computations can draw on the entire processor rather than a fraction of it. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20261029191153/en/ IQM measured a fidelity of 0.515 at 40 qubits without readout error mitigation (REM) and 0.516 at the full 54 qubits with REM applied, both above the classical threshold of 0.500 that separates genuine entanglement from noise. These results rank among the strongest reported for any commercially available quantum computer, giving customers access to state-of-the-art, high-quality processors. U
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom