Binarly Releases Free Detection Tool for XZ Backdoor
1.4.2024 23:39:00 EEST | Business Wire | Press release
Binarly, provider of an industry leading AI-powered firmware and software supply chain security platform, has created and released a free scanning tool to help defenders spot signs of the dangerous XZ backdoor (CVE-2024-3094).
The XZ.fail detection tool was released less than 24 hours after the discovery of a backdoor in the open-source XZ Utils, which provides lossless data compression on virtually all Unix-like operating systems, including Linux. (See CISA advisory).
According to Binarly chief executive Alex Matrosov, the tool includes generic IFUNC implantation detection with close to zero false-positives, showcasing the company’s binary code intelligence engine in action.
“This detection is based on behavioral analysis and can detect any invariants automatically if a similar backdoor is implanted somewhere else,” Matrosov added.
“Such a complex and professionally designed implantation framework is not developed for a one-shot operation. It could already be deployed elsewhere or partially reused in other operations. That’s exactly why we started focusing on more generic detection for this complex backdoor,” Matrosov added.
For those seeking more comprehensive detection and remediation strategies, the Binarly Transparency Platform offers an in-depth solution. With XZ detection capabilities deployed, the platform facilitates easy identification of malicious activities at scale, enabling users to take prompt and effective action to safeguard their software supply chains.
The XZ backdoor came to light on March 29, 2024, when a thread was published on Openwall's oss-security mailing list by Andres Freund, revealing a potential compromise in the open-source code.
For more information read our research article and access the free XZ backdoor scanner at XZ.fail.
About Binarly:
Binarly is a global firmware and software supply chain security company founded in 2021. The company’s flagship Binarly Transparency Platform is an enterprise-class, AI-powered solution used by device manufacturers, OEMs, IBVs and product security teams to identify known and unknown vulnerabilities, misconfigurations and signs of malicious code implantation. Binarly’s validated remediation playbooks have significantly reduced the cost and time to respond to security exposures. Based in Los Angeles, California, Binarly brings decades of research and program analysis expertise to build solutions to protect businesses, critical infrastructure, and consumers around the world.
To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.
View source version on businesswire.com: https://www.businesswire.com/news/home/20240401230046/en/
Contact information
media@binarly.io
818.351.9637
About Business Wire
For more than 50 years, Business Wire has been the global leader in press release distribution and regulatory disclosure.
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
Stop Hoping for Secure AI and Start Building It: RSA Agent ID Closes the Agentic Identity Gap for Highly Regulated Industries7.10.2026 07:00:00 EEST | Press release
At World Summit AI in the Netherlands, RSA, the identity standard for government agencies, finance, and high-assurance organizations, today announced RSA Agent ID, the agentic identity security platform for highly-regulated industries. RSA Agent ID discovers, secures, and governs AI agents across their lifecycle, letting regulated organizations find and register agents, prove the authority behind every consequential action, and run it where they choose. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20261006426797/en/ Three forces are reshaping how organizations operate, and they are arriving at once. AI is transforming work and pushing agents into production faster than security teams can track them, while making attacks cheaper, faster, and harder to detect. Companies and countries are reclaiming control over their data and the decisions made on their behalf. And security has moved from an IT responsibility to a board-level
The Empire State Building Observation Deck Hosts Annual Run-Up, Presented by NYU Langone Health and Powered by Merrell7.10.2026 05:25:00 EEST | Press release
The Empire State Building (ESB) hosted the 48th Annual Empire State Building Observation Deck Run-Up, presented by NYU Langone Health and powered by Merrell. In several designated heats, more than 200 runners from across the world raced up the building’s 1,576 stairs to reach the finish line on the iconic 86th Floor Observation Deck. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20261006766024/en/ The Empire State Building Observation Deck Hosts Annual Run-Up, Presented by NYU Langone Health and Powered by Merrell “Athletes gather from around the globe to participate in the Empire State Building Observation Deck Run-Up, the world’s preeminent tower race,” said Tony Malkin, chairman and CEO of Empire State Realty Trust. “We congratulate all who participated in this ultimate feat of endurance at Tripadvisor’s number one top attraction in the U.S.” Ryoji Watanabe of Japan took first place in the Men’s Elite heat with a time of 1
Phenom Adds Major Headline Speakers as IAMPHENOM Europe Approaches Sold-Out Status6.10.2026 16:30:00 EEST | Press release
Phenom, the leader in applied AI built to redesign work operations for hiring faster, developing better and retaining longer, today announced the newest wave of speakers for IAMPHENOM Europe 2026, the only applied AI event dedicated to human resources taking place on 4-5 November in Paris, France. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20261006714151/en/ Phenom announced the newest wave of speakers for IAMPHENOM Europe 2026, the only applied AI event dedicated to human resources taking place on 4-5 November in Paris, France. The two-day conference gives attendees what other HR events can’t: an inside look at AI agents already in production, automated workflows tailored to specific business contexts and the dramatic results they are already delivering. Across keynotes, customer sessions, hands-on experiences and peer networking with the continent’s top CHROs and HRIT decision-makers, guests can participate in discussion
European Firms Struggle to Keep Pace with Growing DSAR Demands, New Reveal Study Finds6.10.2026 16:00:00 EEST | Press release
New research published today byReveal, the provider of integrated AI-native platforms spanning the dispute resolution lifecycle, found that large European organisations complete fewer than half of data subject access requests (DSARs) within the one-month deadline required under the General Data Protection Regulation (GDPR), a shortfall the study ties directly to a near-universal absence of purpose-built technology. Nearly nine in 10 organisations still run DSARs on manual or general-purpose workflows, with no dedicated tooling in place. The report, based on a survey of 213 legal and privacy professionals at large European enterprises, is the first of its kind to benchmark how organisations across the region are managing DSAR compliance at scale. The findings expose structural inconsistencies between how organisations perceive their DSAR processes and how those processes perform. Ninety percent of respondents said they are confident their process would withstand scrutiny from an Informa
Rochester Electronics Launches Localized E-Commerce Experiences Across Key Global Markets6.10.2026 16:00:00 EEST | Press release
Rochester Electronics today announced the launch of fully enabled e-commerce capabilities across its regional websites, allowing customers in key global markets to search for, source, and purchase authorized semiconductors in their local language. While Rochester's regional sites previously offered localized content and product information, they now support a complete end-to-end purchasing experience. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20261006914131/en/ Rochester Electronics Launches Localized E-Commerce Experiences Across Key Global Markets The newly upgraded platforms are now live in Portuguese (Brazil), Spanish (Mexico), French, German, Italian, and Polish, complementing Rochester’s existing full e-commerce platforms in English, Chinese, Japanese, and Korean (South Korea). Customers can now complete transactions directly through their local sites, simplifying sourcing, improving efficiency, and reducing process
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom