Binarly Releases Free Detection Tool for XZ Backdoor
Binarly, provider of an industry leading AI-powered firmware and software supply chain security platform, has created and released a free scanning tool to help defenders spot signs of the dangerous XZ backdoor (CVE-2024-3094).
The XZ.fail detection tool was released less than 24 hours after the discovery of a backdoor in the open-source XZ Utils, which provides lossless data compression on virtually all Unix-like operating systems, including Linux. (See CISA advisory).
According to Binarly chief executive Alex Matrosov, the tool includes generic IFUNC implantation detection with close to zero false-positives, showcasing the company’s binary code intelligence engine in action.
“This detection is based on behavioral analysis and can detect any invariants automatically if a similar backdoor is implanted somewhere else,” Matrosov added.
“Such a complex and professionally designed implantation framework is not developed for a one-shot operation. It could already be deployed elsewhere or partially reused in other operations. That’s exactly why we started focusing on more generic detection for this complex backdoor,” Matrosov added.
For those seeking more comprehensive detection and remediation strategies, the Binarly Transparency Platform offers an in-depth solution. With XZ detection capabilities deployed, the platform facilitates easy identification of malicious activities at scale, enabling users to take prompt and effective action to safeguard their software supply chains.
The XZ backdoor came to light on March 29, 2024, when a thread was published on Openwall's oss-security mailing list by Andres Freund, revealing a potential compromise in the open-source code.
For more information read our research article and access the free XZ backdoor scanner at XZ.fail.
About Binarly:
Binarly is a global firmware and software supply chain security company founded in 2021. The company’s flagship Binarly Transparency Platform is an enterprise-class, AI-powered solution used by device manufacturers, OEMs, IBVs and product security teams to identify known and unknown vulnerabilities, misconfigurations and signs of malicious code implantation. Binarly’s validated remediation playbooks have significantly reduced the cost and time to respond to security exposures. Based in Los Angeles, California, Binarly brings decades of research and program analysis expertise to build solutions to protect businesses, critical infrastructure, and consumers around the world.
To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.
View source version on businesswire.com: https://www.businesswire.com/news/home/20240401230046/en/
Contact information
media@binarly.io
818.351.9637
About Business Wire
For more than 50 years, Business Wire has been the global leader in press release distribution and regulatory disclosure.
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
NTT DATA Announces Six New AI-Powered Cyber Defense Centers to Strengthen Cyber Resilience and Counter an Evolving Threat Landscape4.12.2025 05:30:00 EET | Press release
NTT DATA, a global leader in AI, digital business and technology services, today announced the launch of four next-generation autonomous Cyber Defense Centers powered by AI technologies in Bengaluru, Hyderabad, Noida and Mumbai, with two additional centers set to open in Birmingham (UK) in Dec 2025 and Dallas (USA) by Jan 2026. These purpose-built Cyber Defense Centers reinforce NTT DATA’s strategic focus on modernizing cybersecurity for the AI era. They represent a shift from traditional centralized security operations to a distributed, AI-driven, hyper-automated model that learns from past incidents and human expertise to automate, triage and prioritize alerts, accelerate investigations and incident response, contain threats faster and support regional data privacy and cybersecurity regulations. According to Omdia, autonomous Security Operations Centers (SOCs) will become the industry standard within two years, positioning NTT DATA as a leading example of how the industry is evolving
YES Announces Leadership Transition as Rezwan Lateef Appointed Chief Executive Officer3.12.2025 21:24:00 EET | Press release
YES (Yield Engineering Systems), a leading provider of high-performance process solutions for the semiconductor Advanced Packaging market, today announced that Rezwan Lateef has been appointed Chief Executive Officer. Mr. Lateef previously served as President of YES and has been a key driver of the company’s significant growth, global expansion, and product innovation over the past several years. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20251202200541/en/ Rezwan Lateef, CEO of YES. The transition marks a natural progression for the company as it surpasses a key revenue milestone and enters its next phase of scaling with top tier semiconductor and AI computing customers. Rama Alapati, who has served as CEO since 2021, will step into a consulting role to support Mr. Lateef during the transition period and ensure strong organizational continuity. “Rama has played an instrumental role in elevating YES from a promising techno
Doha Debates Examines How Entertainment Shapes Us Today3.12.2025 19:13:00 EET | Press release
Qatar Foundation’s Doha Debates continues its flagship debate series with a new episode that examines how modern entertainment shapes our attention, creativity, and everyday well-being. Moderated by Dareen Abughaida, the debate brings together three influential thinkers to ask whether today’s entertainment landscape is enriching us—or overwhelming us. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20251203737439/en/ Doha Debates examines how entertainment shapes us today in a new episode, leading thinkers and students debate whether today’s entertainment elevates us or pulls us into distraction. (Photo: AETOSWire) This week’s debate features Marya Bangee, Senior Advisor at the Pop Culture Collaborative; Dr. Anna Lembke, Professor of Psychiatry at Stanford University and author of Dopamine Nation; and Nicholas Carr, Pulitzer Prize finalist and author of The Shallows. For Bangee, the power of entertainment lies in storytelling t
Vycellix Prepares for First-in-Human Study of Novel Allogeneic Cell Therapy Powered by Its Universal Cell Engineering Platform3.12.2025 19:00:00 EET | Press release
Vycellix, Inc., a biotechnology company developing next-generation allogeneic cell therapies designed to overcome the risk of immune rejection, today announced the successful completion of pre-clinical development for its universal cell engineering platform (VY-UC) with rigorous studies across many donor cell types proving robust immune evasion with functional persistence. The Company is now preparing for first-in-human clinical validation by seeking regulatory approval in Sweden to initiate a Phase 1 study for its lead VY-UC product candidate, a novel, off-the-shelf natural killer (NK) cell therapy (VNK-101) for patients with relapsed or refractory multiple myeloma. VY-UC is a single-step CD45 engager strategy intended to address a central barrier to donor-derived cell therapies, the host immune system’s rapid elimination of allogeneic cells. In pre-clinical studies, VY-UC expression enabled engineered donor cells to evade host cellular immune attack while retaining function, supporti
Pattern Announces Acquisition of ROI Hunter, Connecting Product-Level Advertising and Marketplace Performance for Global Brands3.12.2025 18:01:00 EET | Press release
Pattern Group Inc. (Nasdaq: PTRN), a leader in accelerating brands on global ecommerce marketplaces by leveraging proprietary technology and AI, today announced that it has acquired ROI Hunter a.s., a performance-driven retail media platform for brands and retailers. ROI Hunter integrates product, marketing, and merchandising data into a single source of truth, enabling margin-informed, SKU-level advertising decisions across major walled-garden platforms including Google, Meta, and Snap. The acquisition strengthens Pattern’s position as the world’s leading ecommerce accelerator and expands the company’s AI-driven advertising capabilities across Meta, Google and Snapchat. ROI Hunter brings a defensible, SKU-level data moat anchored in API integrations and more than $1.8B in media managed annually, enabling a uniquely granular view of product-level performance. “We are thrilled to welcome the ROI Hunter team to Pattern,” said Dave Wright, Co-founder and CEO of Pattern. “Their deep techni
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom