Binarly Releases Free Detection Tool for XZ Backdoor
Binarly, provider of an industry leading AI-powered firmware and software supply chain security platform, has created and released a free scanning tool to help defenders spot signs of the dangerous XZ backdoor (CVE-2024-3094).
The XZ.fail detection tool was released less than 24 hours after the discovery of a backdoor in the open-source XZ Utils, which provides lossless data compression on virtually all Unix-like operating systems, including Linux. (See CISA advisory).
According to Binarly chief executive Alex Matrosov, the tool includes generic IFUNC implantation detection with close to zero false-positives, showcasing the company’s binary code intelligence engine in action.
“This detection is based on behavioral analysis and can detect any invariants automatically if a similar backdoor is implanted somewhere else,” Matrosov added.
“Such a complex and professionally designed implantation framework is not developed for a one-shot operation. It could already be deployed elsewhere or partially reused in other operations. That’s exactly why we started focusing on more generic detection for this complex backdoor,” Matrosov added.
For those seeking more comprehensive detection and remediation strategies, the Binarly Transparency Platform offers an in-depth solution. With XZ detection capabilities deployed, the platform facilitates easy identification of malicious activities at scale, enabling users to take prompt and effective action to safeguard their software supply chains.
The XZ backdoor came to light on March 29, 2024, when a thread was published on Openwall's oss-security mailing list by Andres Freund, revealing a potential compromise in the open-source code.
For more information read our research article and access the free XZ backdoor scanner at XZ.fail.
About Binarly:
Binarly is a global firmware and software supply chain security company founded in 2021. The company’s flagship Binarly Transparency Platform is an enterprise-class, AI-powered solution used by device manufacturers, OEMs, IBVs and product security teams to identify known and unknown vulnerabilities, misconfigurations and signs of malicious code implantation. Binarly’s validated remediation playbooks have significantly reduced the cost and time to respond to security exposures. Based in Los Angeles, California, Binarly brings decades of research and program analysis expertise to build solutions to protect businesses, critical infrastructure, and consumers around the world.
To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.
View source version on businesswire.com: https://www.businesswire.com/news/home/20240401230046/en/
Contact information
media@binarly.io
818.351.9637
About Business Wire
For more than 50 years, Business Wire has been the global leader in press release distribution and regulatory disclosure.
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
KAYTUS Introduces One-Stop End-to-End Liquid-Cooled Datacenter Solution Targeting AI Market13.1.2026 10:02:00 EET | Press release
KAYTUS, a leading provider of end-to-end AI and liquid cooling solutions, has introduced its One-Stop End-to-End Liquid-Cooled Data Center Solution in response to the surging demand for AI adoption and energy efficiency. The solution is designed with the concepts of modularization, prefabrication, and safety, supporting up to 15 kW per node and 130 kW per cabinet, with a PUE below 1.1. It provides an end-to-end liquid cooling solution covering design, development, deployment, and operation, addressing the complexity and high entry barriers of large-scale liquid-cooled deployment while supporting eco-friendly data center operations aligned with the government’s carbon neutrality initiatives. Rapid Growth of Domestic AI Market Highlights Urgent Need for Energy Efficiency The AI industry is rapidly expanding, driven by the launch of the Presidential National AI Strategy Committee in September 2025. The government aims to position Korea among the world’s top three AI powers through large-s
The Blind Sailor Takes the Stage at WEF: "HIRO’s CHOICE" Project to Set Sail13.1.2026 06:00:00 EET | Press release
“Blind Sailor Single-Handed Pacific Crossing Project 2027” is a world-first initiative in which Mitsuhiro Iwamoto, a completely blind Japanese yachtsman (blind sailor) based in San Diego, will attempt a solo, non-stop trans-Pacific crossing in the spring of 2027. Sailing a 28-foot yacht single-handedly, he aims to cross the Pacific Ocean from San Diego on the U.S. West Coast to Amakusa, Kumamoto Prefecture, Japan, without making port. Iwamoto will speak about this project at the World Economic Forum Annual Meeting 2026, to be held in January 2026. Project URL: https://hiros-choice.com/ This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260108087321/en/ Hiro Iwamoto / Global Keynote Speaker, First Totally Blind Sailor to Cross the Pacific The message he most wishes to convey at the WEF is the power of choice. He lost his sight at the age of sixteen—a moment when he nearly gave up on life itself. Nevertheless, he chose to live. In
MarkLines Gen-AI Beta Version Released for Automotive Industry13.1.2026 02:00:00 EET | Press release
MarkLines Co., Ltd. (Headquarters: Minato-ku, Tokyo; President & CEO: Makoto Sakai; TYO:3901) announced its launch of the "MarkLines Gen-AI Beta Version," the new feature for B2B users in the automotive industry. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260112383839/en/ "MarkLines Gen-AI Beta Version" can take questions in natural language and instantly give highly reliable, relevant data drawn from MarkLines’ extensive automotive database (Image: MarkLines Co., Ltd.) This AI-powered feature enables users to ask questions in natural language and instantly receive highly reliable, relevant data drawn from MarkLines’ extensive automotive database. Moreover, the system analyzes this information by leveraging the rich content across its platform and delivers clear, concise, text-based insights. By combining trusted data with advanced analytical capabilities through generative AI, this service represents a first-of-its-kind
Australian Defence Force Secures Satellite Communications on SES IS-2212.1.2026 23:30:00 EET | Press release
Satellite communications solutions provider SES will provide secure uninterrupted satellite communications to the Australian Defence Force (ADF) for a minimum of 16 years thanks to a new extended agreement. The service will be provided via the SES Intelsat 22 satellite and an ultra-high frequency (UHF) military communications payload. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260112137182/en/ Assistant Secretary Space Systems Branch, Michael Hunt, formalizes contract negotiations for the through-life support of the IS-22 satellite with Rory Welch, senior vice-president of service delivery at SES Space and Defense. Photos: Corporal Annika Smit Under the renewed arrangement, SES will reposition the IS-22 satellite to a new orbital slot specified by the ADF, continuing a mission that has been the cornerstone of Australia’s secure military communications since IS-22’s launch in 2012. SES will build a dedicated ground segmen
NetApp Appoints Paul Fipps to the Board of Directors12.1.2026 23:05:00 EET | Press release
NetApp® (NASDAQ: NTAP), the intelligent data infrastructure company, today announced that Paul Fipps, President of Global Customer Operations at ServiceNow, has joined its Board of Directors. The board now has ten directors, nine of whom are independent, and 50% of whom have been appointed within the last five years. Fipps brings more than 20 years of experience driving technology-enabled growth and customer transformation. At ServiceNow, he currently leads global sales, customer success, partner ecosystems, and field operations. He previously served as EVP of Worldwide Sales at ServiceNow and as President of Under Armour Connected Fitness and Chief Experience Officer at Under Armour, overseeing global direct-to-consumer, connected fitness, and digital experiences. He also previously served on the advisory board of Quantum Metric. Fipps holds a B.S. in Information Systems, an MBA from the University of Baltimore, and is a graduate of The Wharton School’s Advanced Management Program. “P
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom