Binarly Releases Free Detection Tool for XZ Backdoor
1.4.2024 23:39:00 EEST | Business Wire | Press release
Binarly, provider of an industry leading AI-powered firmware and software supply chain security platform, has created and released a free scanning tool to help defenders spot signs of the dangerous XZ backdoor (CVE-2024-3094).
The XZ.fail detection tool was released less than 24 hours after the discovery of a backdoor in the open-source XZ Utils, which provides lossless data compression on virtually all Unix-like operating systems, including Linux. (See CISA advisory).
According to Binarly chief executive Alex Matrosov, the tool includes generic IFUNC implantation detection with close to zero false-positives, showcasing the company’s binary code intelligence engine in action.
“This detection is based on behavioral analysis and can detect any invariants automatically if a similar backdoor is implanted somewhere else,” Matrosov added.
“Such a complex and professionally designed implantation framework is not developed for a one-shot operation. It could already be deployed elsewhere or partially reused in other operations. That’s exactly why we started focusing on more generic detection for this complex backdoor,” Matrosov added.
For those seeking more comprehensive detection and remediation strategies, the Binarly Transparency Platform offers an in-depth solution. With XZ detection capabilities deployed, the platform facilitates easy identification of malicious activities at scale, enabling users to take prompt and effective action to safeguard their software supply chains.
The XZ backdoor came to light on March 29, 2024, when a thread was published on Openwall's oss-security mailing list by Andres Freund, revealing a potential compromise in the open-source code.
For more information read our research article and access the free XZ backdoor scanner at XZ.fail.
About Binarly:
Binarly is a global firmware and software supply chain security company founded in 2021. The company’s flagship Binarly Transparency Platform is an enterprise-class, AI-powered solution used by device manufacturers, OEMs, IBVs and product security teams to identify known and unknown vulnerabilities, misconfigurations and signs of malicious code implantation. Binarly’s validated remediation playbooks have significantly reduced the cost and time to respond to security exposures. Based in Los Angeles, California, Binarly brings decades of research and program analysis expertise to build solutions to protect businesses, critical infrastructure, and consumers around the world.
To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.
View source version on businesswire.com: https://www.businesswire.com/news/home/20240401230046/en/
Contact information
media@binarly.io
818.351.9637
About Business Wire
For more than 50 years, Business Wire has been the global leader in press release distribution and regulatory disclosure.
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
AI Can Design the Slides, But It Can’t Fix Stage Fright: 3 in 4 Workers Get Anxious Presenting, Canva Study Finds8.9.2026 16:00:00 EEST | Press release
New research from Canva, the world’s leading visual communication platform, reveals an emerging paradox at the heart of one of work’s age-old skills: even as AI makes presentations easier to create than ever, nearly three in four professionals (74%) still feel anxious about presenting. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260908549712/en/ Canva's Global 'The Presentation Paradox' Study Few things are as entrenched as presentations, and decade after decade, they’ve defined how we communicate to clients, teammates, leadership, and beyond. Now, AI is changing them by making them faster and easier to create than ever. Nine in 10 (91%) workers use AI monthly to build slides, mainly for design (57%), brainstorming (56%) and drafting content (49%). 48% say it saves them more than an hour per presentation. As AI use grows, more than 100 million people create presentations on Canva every month, and it is one of the top use
PAX Debuts The Oxblood Edit, a Limited Edition Collection Inspired by Fall’s Richest Color8.9.2026 16:00:00 EEST | Press release
Today PAX, a pioneering global cannabis brand, introduces The Oxblood Edit, an ultra-limited release bringing one of fall’s defining colors to three of the brand’s signature devices: PAX FOUR, PAX MINI and ERA GO. Deep, distinctive and designed to be coveted, Oxblood transforms the PAX lineup through a rich burgundy finish inspired by the worlds of fashion, interiors and industrial design. The limited collection is available beginning today at pax.com and select retailers, while supplies last. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260908330141/en/ The Oxblood Edit: bringing timeless style, seasonal color, and elevated design to three of the brand's signature devices. Long associated with craftsmanship and enduring style, oxblood has reemerged across fashion, footwear, accessories and interiors as consumers gravitate toward richer palettes, timeless materials and elevated essentials. For PAX, the color is less about
STARTEEPO Issues Letter and Presentation to the Board of Xerox Calling for Action to Unlock Shareholder Value8.9.2026 16:00:00 EEST | Press release
STARTEEPO SICAV a.s. (“STARTEEPO”) today issued an investor presentation and the following letter to the Board of Directors (the “Board”) of Xerox Holdings Corporation (“Xerox” or the “Company”) (NASDAQ: XRX). STARTEEPO, which has increased its investment in Xerox to a beneficial ownership of 7.34%, in stocks and options, is urging the Board to take bold actions to unlock significant shareholder value, including by increasing transparency about Xerox Financial Services’ performance, evaluating strategic alternatives for the business unit, deleveraging the Company, and exercising continued capital discipline. Shareholders can view the investor presentation here. For more information visit: www.starteepo.com/xerox. The full text of the letter follows: September 7, 2026 The Board of Directors Xerox Holdings Corp. 401 Merritt 7 Norwalk, CT 06851 Dear Members of the Board: Since we first wrote to you in May, we have increased our already significant investment in Xerox Holdings Corp. to a b
Leblon Delienne Joins LEXON at BOW to Expand Its Global Reach8.9.2026 15:36:00 EEST | Press release
BOW (Brands of Wonder), the international brand group behind French design brand LEXON, today announced the acquisition of Leblon Delienne, the French sculpture atelier known for transforming pop culture icons into collectible art and design objects. The move pairs the atelier’s distinctive French craftsmanship and licensed collections with BOW’s international reach and digital expertise. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260908641342/en/ Leblon Delienne Joins LEXON at BOW Juliette de Blegiers, who acquired the company in 2018, will remain a minority shareholder in Leblon Delienne and continue working alongside BOW founder Boris Brault and the atelier’s teams. For more than 40 years, Leblon Delienne has brought iconic characters to life through sculptures, figurines, furniture, and art and design objects, primarily in limited, numbered editions. Its licensed collections feature characters from Disney, Warner Bro
Visa Brings Onchain Lending into Everyday Payments8.9.2026 15:00:00 EEST | Press release
Today, Visa (NYSE: V) announced a new approach to onchain credit designed to help stablecoin-linked card programs and fintechs access working capital using onchain lending infrastructure and Visa data. Onchain lending has emerged as one of the fastest-growing segments of digital finance. According to the Visa Onchain Analytics Dashboard, since 2020, more than $694 billion in stablecoin-denominated loans have been sent through onchain lending protocols, creating a global credit market that operates 24/7. Yet much of that activity remains concentrated within crypto markets and hasn’t meaningfully supported the businesses and payment experiences people use every day. Visa is helping bridge that gap by combining VisaNet settlement data with onchain credit infrastructure. This information can help lenders better understand how a program is operating, making it easier to evaluate financing opportunities that fit their needs and extend capital to support their goals. "Stablecoins are not only
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom