Binarly Releases Free Detection Tool for XZ Backdoor
1.4.2024 23:39:00 EEST | Business Wire | Press release
Binarly, provider of an industry leading AI-powered firmware and software supply chain security platform, has created and released a free scanning tool to help defenders spot signs of the dangerous XZ backdoor (CVE-2024-3094).
The XZ.fail detection tool was released less than 24 hours after the discovery of a backdoor in the open-source XZ Utils, which provides lossless data compression on virtually all Unix-like operating systems, including Linux. (See CISA advisory).
According to Binarly chief executive Alex Matrosov, the tool includes generic IFUNC implantation detection with close to zero false-positives, showcasing the company’s binary code intelligence engine in action.
“This detection is based on behavioral analysis and can detect any invariants automatically if a similar backdoor is implanted somewhere else,” Matrosov added.
“Such a complex and professionally designed implantation framework is not developed for a one-shot operation. It could already be deployed elsewhere or partially reused in other operations. That’s exactly why we started focusing on more generic detection for this complex backdoor,” Matrosov added.
For those seeking more comprehensive detection and remediation strategies, the Binarly Transparency Platform offers an in-depth solution. With XZ detection capabilities deployed, the platform facilitates easy identification of malicious activities at scale, enabling users to take prompt and effective action to safeguard their software supply chains.
The XZ backdoor came to light on March 29, 2024, when a thread was published on Openwall's oss-security mailing list by Andres Freund, revealing a potential compromise in the open-source code.
For more information read our research article and access the free XZ backdoor scanner at XZ.fail.
About Binarly:
Binarly is a global firmware and software supply chain security company founded in 2021. The company’s flagship Binarly Transparency Platform is an enterprise-class, AI-powered solution used by device manufacturers, OEMs, IBVs and product security teams to identify known and unknown vulnerabilities, misconfigurations and signs of malicious code implantation. Binarly’s validated remediation playbooks have significantly reduced the cost and time to respond to security exposures. Based in Los Angeles, California, Binarly brings decades of research and program analysis expertise to build solutions to protect businesses, critical infrastructure, and consumers around the world.
To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.
View source version on businesswire.com: https://www.businesswire.com/news/home/20240401230046/en/
Contact information
media@binarly.io
818.351.9637
About Business Wire
For more than 50 years, Business Wire has been the global leader in press release distribution and regulatory disclosure.
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
CORRECTING and REPLACING SES Launches Cash Tender Offer28.9.2026 16:42:00 EEST | Press release
Please replace the release with the following corrected version due to multiple revisions to dates. The updated release reads: CORRECTING and REPLACINGSES Launches Cash Tender Offer THIS ANNOUNCEMENT RELATES TO THE DISCLOSURE OF INFORMATION THAT QUALIFIED OR MAY HAVE QUALIFIED AS INSIDE INFORMATION WITHIN THE MEANING OF ARTICLE 7(1) OF THE MARKET ABUSE REGULATION (EU) 596/2014. NOT FOR RELEASE, PUBLICATION OR DISTRIBUTION IN OR INTO OR TO ANY PERSON LOCATED OR RESIDENT IN, OR AT ANY ADDRESS IN, THE UNITED STATES OF AMERICA, ITS TERRITORIES AND POSSESSIONS (INCLUDING PUERTO RICO, THE U.S. VIRGIN ISLANDS, GUAM, AMERICAN SAMOA, WAKE ISLAND AND THE NORTHERN MARIANA ISLANDS), ANY STATE OF THE UNITED STATES OF AMERICA OR THE DISTRICT OF COLUMBIA (THE UNITED STATES) OR TO ANY U.S. PERSON (AS DEFINED IN REGULATION S OF THE UNITED STATES SECURITIES ACT OF 1933, AS AMENDED (THE SECURITIES ACT)) OR IN OR INTO ANY JURISDICTION WHERE IT IS UNLAWFUL TO RELEASE, PUBLISH OR DISTRIBUTE THIS ANNOUNCEMEN
Incognito Software Systems Launches NEXA, an AI-Enabled Solution for Automated Broadband Operations28.9.2026 16:00:00 EEST | Press release
Incognito Software Systems, a leading global provider of service orchestration, device management, and network intelligence solutions, today introduced NEXA, an AI-driven network intelligence and automation platform that enables broadband service providers to turn operational data into action. NEXA unifies network, device, service, and subscriber data in a single intelligence layer, delivering real-time and predictive insights that help service providers identify issues sooner, better understand the subscriber experience, and take faster, more informed action across their operations. As service providers seek to differentiate beyond connectivity, subscriber experience has become a critical competitive advantage. However, networks have evolved into complex service platforms that span access, edge, customer premises, apps, and third-party systems, making it difficult to detect and resolve issues quickly. NEXA addresses this challenge by combining cross-platform observability with AI-enab
Volante Technologies and Circle advance stablecoin payment and settlement capabilities for financial institutions28.9.2026 16:00:00 EEST | Press release
Volante Technologies, the global leader in Payments as a Service (PaaS), today announced a strategic collaboration with Circle Internet Group, Inc. (NYSE: CRCL) (“Circle”), a leading internet financial platform company and the issuer of USDC1 through its regulated entities, to help financial institutions integrate stablecoin payment and settlement capabilities into their existing payment operations. Through the collaboration, Volante is bringing USDC workflows into its AI-powered Payments Platform, enabling financial institutions to evaluate how stablecoin activity can operate alongside existing payment rails, operational controls, and on- and off-ramp requirements - without requiring a separate digital asset stack. Volante clients, which include four of the top five global corporate banks and seven of the top 10 U.S. banks, will be able to evaluate key workflows, including minting, redemption, beneficiary wallet registration, funding, notifications, and wallet-to-wallet payment execut
Xsolla Releases The Xsolla Report: Mobile D2C Edition28.9.2026 16:00:00 EEST | Press release
Xsolla, a global commerce company, today released The Xsolla Report: Mobile D2C Edition, a new study examining how direct-to-consumer commerce is performing across mobile games. Drawing on data from more than 800 live Xsolla Web Shops alongside public market and regulatory data, the report shows that D2C has moved past the question of whether it works and into a new phase: studios seeing the strongest results are the ones treating their Web Shop as an operating discipline rather than a one-time build. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260928312597/en/ Graphic: Xsolla Three themes run through the report. First, the gap between a typical Web Shop and a top-performing one is wide, and closing it has little to do with studio size, as indie teams achieve top-tier results comparable to enterprise publishers. Second, more features don’t mean more revenue. A small number of continuously tuned mechanics, particularly loy
Zayed Sustainability Prize Unveils 2027 Finalists Following Record-Breaking Global Entry28.9.2026 15:47:00 EEST | Press release
From AI that can predict pregnancy complications months in advance and robots that navigate water networks, to new technologies restoring degraded soil and heat-resilient corals rebuilding reefs, the Zayed Sustainability Prize has unveiled its 2027 finalists following the most competitive cycle in its history. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260928805335/en/ Members of the Zayed Sustainability Prize Jury gathered in Abu Dhabi to determine the 2027 winners and finalists (Photo: AETOSWire) A record 10,233 submissions from 177 countries were received for the 2027 cycle, a 32% increase year-on-year, reflecting the growing global reach of the UAE’s pioneering award for innovative solutions to global challenges. Following a rigorous evaluation process by the Prize Jury, finalists have been selected across six categories: Health, Food, Energy, Water, Climate Action and Global High Schools. Together, they represent so
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom