Binarly Releases Free Detection Tool for XZ Backdoor
1.4.2024 23:39:00 EEST | Business Wire | Press release
Binarly, provider of an industry leading AI-powered firmware and software supply chain security platform, has created and released a free scanning tool to help defenders spot signs of the dangerous XZ backdoor (CVE-2024-3094).
The XZ.fail detection tool was released less than 24 hours after the discovery of a backdoor in the open-source XZ Utils, which provides lossless data compression on virtually all Unix-like operating systems, including Linux. (See CISA advisory).
According to Binarly chief executive Alex Matrosov, the tool includes generic IFUNC implantation detection with close to zero false-positives, showcasing the company’s binary code intelligence engine in action.
“This detection is based on behavioral analysis and can detect any invariants automatically if a similar backdoor is implanted somewhere else,” Matrosov added.
“Such a complex and professionally designed implantation framework is not developed for a one-shot operation. It could already be deployed elsewhere or partially reused in other operations. That’s exactly why we started focusing on more generic detection for this complex backdoor,” Matrosov added.
For those seeking more comprehensive detection and remediation strategies, the Binarly Transparency Platform offers an in-depth solution. With XZ detection capabilities deployed, the platform facilitates easy identification of malicious activities at scale, enabling users to take prompt and effective action to safeguard their software supply chains.
The XZ backdoor came to light on March 29, 2024, when a thread was published on Openwall's oss-security mailing list by Andres Freund, revealing a potential compromise in the open-source code.
For more information read our research article and access the free XZ backdoor scanner at XZ.fail.
About Binarly:
Binarly is a global firmware and software supply chain security company founded in 2021. The company’s flagship Binarly Transparency Platform is an enterprise-class, AI-powered solution used by device manufacturers, OEMs, IBVs and product security teams to identify known and unknown vulnerabilities, misconfigurations and signs of malicious code implantation. Binarly’s validated remediation playbooks have significantly reduced the cost and time to respond to security exposures. Based in Los Angeles, California, Binarly brings decades of research and program analysis expertise to build solutions to protect businesses, critical infrastructure, and consumers around the world.
To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.
View source version on businesswire.com: https://www.businesswire.com/news/home/20240401230046/en/
Contact information
media@binarly.io
818.351.9637
About Business Wire
For more than 50 years, Business Wire has been the global leader in press release distribution and regulatory disclosure.
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
Venture Global and ConocoPhillips Announce 20-Year LNG Sales and Purchase Agreement1.10.2026 23:30:00 EEST | Press release
Today, Venture Global, Inc. (NYSE: VG) and ConocoPhillips (NYSE: COP) announced a new, long-term Sales and Purchase Agreement (SPA) for liquefied natural gas (LNG). Under the SPA, ConocoPhillips will buy 1.0 million tonnes per annum (MTPA) of LNG from Venture Global for 20 years, starting in 2030. "Venture Global is proud to welcome ConocoPhillips, one of the world's leading energy companies, as a long-term partner," said Venture Global CEO Mike Sabel. "This agreement reflects continued market confidence in our proven ability to deliver reliable, low-cost U.S. LNG quickly and at scale. We look forward to supporting ConocoPhillips' growing global LNG portfolio for decades to come." About Venture Global Venture Global is an American producer and exporter of low-cost U.S. liquefied natural gas (LNG) with over 100 MTPA of capacity in production, construction, or development. Venture Global began producing LNG from its first facility in 2022 and is now one of the largest LNG exporters in th
UL Solutions Inc. Completes Acquisition of Eurofins Scientific’s Electrical & Electronics Business1.10.2026 23:05:00 EEST | Press release
UL Solutions Inc. (NYSE: ULS), a global leader in applied safety science, today announced it has completed the acquisition of the electrical and electronics (E&E) business of Eurofins Scientific SE. “This acquisition extends our 132-year commitment to our mission of working for a safer world,” said President and CEO Jennifer Scanlon. “We are thrilled to welcome our new colleagues to UL Solutions. By bringing together complementary expertise and capabilities, we are expanding our global footprint, enhancing our TIC services for electrical safety and connected products, and adding services that support customers around the world.” Eurofins’ E&E business provides testing, compliance and certification services that support global market access for electromagnetic compatibility and wireless testing, electrical safety, medical devices and other technologies. The acquisition adds laboratories and accreditations in EMEA, Asia and the United States to UL Solutions’ global network. About UL Solu
Barnes Aerospace Acquires ATL Turbine Services, Establishing First Aeroengine Component Repair Operation in Europe1.10.2026 21:50:00 EEST | Press release
Barnes Aerospace, a global provider of component engineering, manufacturing and repair solutions for the aerospace industry, today announced the acquisition of ATL Turbine Services Ltd. ("ATL Turbine Services"), a Dundee, Scotland-based specialist in the refurbishment and repair of hot-section gas turbine components, marking Barnes Aerospace's first dedicated component repair and overhaul presence in Europe. The acquisition establishes Barnes Aerospace's initial Component Repair and Overhaul (CRO) footprint in Europe, expanding the company's aftermarket presence and strengthening its ability to serve customers in the region. ATL Turbine Services brings established in-region repair, assessment, coating, and engineering capabilities that complement Barnes Aerospace's existing global repair network and broaden the company's ability to support customers throughout the turbine engine component lifecycle. "Establishing our Component Repair and Overhaul presence in Europe is an important part
Netmore Named Smart Company of the Year at the Premios iAgua 20261.10.2026 20:00:00 EEST | Press release
Netmore Group, the leading network operator and platform provider for Massive IoT, today announced it has been named Empresa Smart del Año — Smart Company of the Year — at the Premios iAgua 2026, the awards of iAgua, the Spanish-speaking water sector's leading media platform. The award was presented at the closing gala of the Spain Smart Water Summit, held at the Meliá Avenida América in Madrid. The award recognises a company that has taken an unusual route into water. Netmore is not a technology firm that added connectivity to its portfolio: it is a network operator that decided to specialise in the water cycle. In eighteen months, it has completed four acquisitions and become the world's largest LoRaWAN® network operator, with more than eighteen million IoT devices under contract across more than fifty countries. Its commitment to Spain took concrete form with the acquisition of Arson Metering, the Bilbao-based remote reading specialist, which brings a portfolio of more than 500,000
Elliptic Sets the Engineering Bar for On-Chain Risk With “Built for Compliance” Paper as New Rules Take Hold and Banks Launch a Joint Stablecoin1.10.2026 16:40:00 EEST | Press release
Elliptic, the global leader in on-chain risk management, today published Built for compliance, a paper setting out the nine engineering decisions that determine whether an on-chain risk system can support fast, accurate and defensible compliance decisions at agentic scale. Machines are already moving money on their own, at machine speed. Compliance teams now have to make hundreds of thousands of decisions a day, at that same speed. However, many on-chain risk systems were never engineered to support that pace. A compliance system that computes exposure on a schedule delivers stale results. One that defines blockchain coverage loosely enough lets a screening miss exposure entirely. A system that skips testing disaster recovery, a spike or an outage, takes down the customer’s compliance system too. That gap between machine speed and system design is exactly what regulators are now closing. As US regulators put together market-structure regulation, the GENIUS Act's stablecoin rules take h
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom