Binarly Releases Free Detection Tool for XZ Backdoor
1.4.2024 23:39:00 EEST | Business Wire | Press release
Binarly, provider of an industry leading AI-powered firmware and software supply chain security platform, has created and released a free scanning tool to help defenders spot signs of the dangerous XZ backdoor (CVE-2024-3094).
The XZ.fail detection tool was released less than 24 hours after the discovery of a backdoor in the open-source XZ Utils, which provides lossless data compression on virtually all Unix-like operating systems, including Linux. (See CISA advisory).
According to Binarly chief executive Alex Matrosov, the tool includes generic IFUNC implantation detection with close to zero false-positives, showcasing the company’s binary code intelligence engine in action.
“This detection is based on behavioral analysis and can detect any invariants automatically if a similar backdoor is implanted somewhere else,” Matrosov added.
“Such a complex and professionally designed implantation framework is not developed for a one-shot operation. It could already be deployed elsewhere or partially reused in other operations. That’s exactly why we started focusing on more generic detection for this complex backdoor,” Matrosov added.
For those seeking more comprehensive detection and remediation strategies, the Binarly Transparency Platform offers an in-depth solution. With XZ detection capabilities deployed, the platform facilitates easy identification of malicious activities at scale, enabling users to take prompt and effective action to safeguard their software supply chains.
The XZ backdoor came to light on March 29, 2024, when a thread was published on Openwall's oss-security mailing list by Andres Freund, revealing a potential compromise in the open-source code.
For more information read our research article and access the free XZ backdoor scanner at XZ.fail.
About Binarly:
Binarly is a global firmware and software supply chain security company founded in 2021. The company’s flagship Binarly Transparency Platform is an enterprise-class, AI-powered solution used by device manufacturers, OEMs, IBVs and product security teams to identify known and unknown vulnerabilities, misconfigurations and signs of malicious code implantation. Binarly’s validated remediation playbooks have significantly reduced the cost and time to respond to security exposures. Based in Los Angeles, California, Binarly brings decades of research and program analysis expertise to build solutions to protect businesses, critical infrastructure, and consumers around the world.
To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.
View source version on businesswire.com: https://www.businesswire.com/news/home/20240401230046/en/
Contact information
media@binarly.io
818.351.9637
About Business Wire
For more than 50 years, Business Wire has been the global leader in press release distribution and regulatory disclosure.
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
Esri Expands World Imagery with Airbus High-Resolution Basemap Coverage for 2,000 Cities Worldwide20.8.2026 15:00:00 EEST | Press release
At the 2026 Esri User Conference (UC), the global leader in location intelligence announced a significant enhancement to its World Imagery basemap through a new agreement with Airbus. The collaboration will enable Esri to provide ArcGIS users with high-resolution imagery coverage for approximately 2,000 cities around the world through the addition of the new Airbus, Nearmap, and Vantor imagery. The added data is part of an enhanced imagery initiative for the World Imagery Basemap, the most widely used map service in ArcGIS, and was highlighted during this year’s Esri UC Plenary. Beginning in the second half of 2026, Airbus will deliver 30 cm imagery designed to provide more current and detailed visual context for ArcGIS users worldwide. Airbus imagery is highly accurate, color-consistent, and provides nearly cloud-free coverage with minimized haze and seasonal variation between contiguous images. As part of the broader World Imagery enhancement program announced at the 2026 UC, Esri al
Cox Capital To Expand Liquidity Solutions for Retail Investors in Private Markets20.8.2026 15:00:00 EEST | Press release
Cox Capital Partners, LP (“Cox Capital”), a provider of liquidity solutions for retail holders of illiquid alternative investments, today announced plans to expand its existing tender offer program for non‑traded business development companies (BDCs) into the rapidly growing interval fund market. The move affirms the company’s role as a provider of liquidity solutions across the private markets landscape for the wealth advisory channel. Over the past six years, Cox Capital has built a platform for sourcing and executing secondary liquidity transactions for retail investors in non‑traded BDCs and other illiquid vehicles, working with financial advisors and intermediaries across independent broker‑dealers, RIAs, and major wirehouses. Cox Capital today announced plans to expand that platform to interval funds, whose growth has given retail investors access to private credit, private equity, and other alternative assets with limited liquidity. Subject to market conditions and regulatory re
Packaging Redesigns See 4% Average Volume Lift, NIQ Finds20.8.2026 13:00:00 EEST | Press release
NielsenIQ (NYSE: NIQ), a global leader in consumer intelligence, today named the winners of its ninth annual Design Impact Awards, recognizing eight package redesigns that combined stronger shopper experiences with measurable commercial performance. Across nearly a decade of NIQ Design Impact Award winners, recognized redesigns have been associated with an average volume increase of approximately 4%. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260819712595/en/ NIQ Design Impact Awards 2026 The 2026 NIQ Design Impact Award Winners*: Aval French Cider (Parent Company: Aval Cider; Country: USA) Liquid I.V. (Parent Company: Unilever; Country: USA) Root & Splendor (Parent Company: Root & Splendor; Country: USA) Hostess Cakes (Parent Company: The J.M. Smucker Company; Country: USA) Back to Nature (Parent Company: Barilla Group; Country: USA) John West Tuna Chunks (Parent Company: Thai Union; Country: UK) Country Fresh Ice Cream
NTT DATA and Palo Alto Networks Sign Global Strategic Alliance to Accelerate Secure AI Transformation20.8.2026 13:00:00 EEST | Press release
NTT DATA, a global leader in AI, digital business and technology services, and Palo Alto Networks (NASDAQ: PANW) today announced a multi-year strategic alliance designed to help organizations securely adopt AI, modernize cybersecurity, simplify complex technology environments and build cyber resilience for the AI era. As Palo Alto Networks first strategic alliance of this kind with a global systems integrator, the agreement, which targets $1 billion in joint business by the end of three years (2029), combines Palo Alto Networks AI-powered cybersecurity platforms with NTT DATA's consulting, engineering and managed services. Leveraging joint engineering, co-innovation and coordinated global delivery, the alliance will help clients assess cyber risk, deploy AI securely and continuously optimize security. Through these joint solutions, clients will gain a unified approach that seamlessly spans cybersecurity strategy, implementation and managed services. Building on the companies’ Frontier
Organigram Global Accelerates Integration of Sanity Group Under Unified Global Operating Structure20.8.2026 13:00:00 EEST | Press release
Organigram Global Inc. (NASDAQ: OGI) (TSX: OGI) (“Organigram” or the “Company”) today announced an important milestone in its global growth strategy through the accelerated integration of Sanity Group GmbH (“Sanity”) and the alignment of leadership, operations and market development activities across the combined organization. To support the combined organization, Organigram has appointed Finn Age Hänsel as President, Rest of World & Chief Strategy Officer, and Adrian Frenzel as Global Chief Operating Officer. To enable the integration, the Company has amended the share purchase agreement governing the Sanity acquisition, which required that Sanity be operated on a standalone basis during a 12-month earnout period. The amendment replaces the original performance-based earnout with a fixed earnout while retaining the original construct that the earnout be payable after the end of the earnout period. “Since completing the acquisition, our teams have worked exceptionally well together and
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom