Binarly Releases Free Detection Tool for XZ Backdoor
1.4.2024 23:39:00 EEST | Business Wire | Press release
Binarly, provider of an industry leading AI-powered firmware and software supply chain security platform, has created and released a free scanning tool to help defenders spot signs of the dangerous XZ backdoor (CVE-2024-3094).
The XZ.fail detection tool was released less than 24 hours after the discovery of a backdoor in the open-source XZ Utils, which provides lossless data compression on virtually all Unix-like operating systems, including Linux. (See CISA advisory).
According to Binarly chief executive Alex Matrosov, the tool includes generic IFUNC implantation detection with close to zero false-positives, showcasing the company’s binary code intelligence engine in action.
“This detection is based on behavioral analysis and can detect any invariants automatically if a similar backdoor is implanted somewhere else,” Matrosov added.
“Such a complex and professionally designed implantation framework is not developed for a one-shot operation. It could already be deployed elsewhere or partially reused in other operations. That’s exactly why we started focusing on more generic detection for this complex backdoor,” Matrosov added.
For those seeking more comprehensive detection and remediation strategies, the Binarly Transparency Platform offers an in-depth solution. With XZ detection capabilities deployed, the platform facilitates easy identification of malicious activities at scale, enabling users to take prompt and effective action to safeguard their software supply chains.
The XZ backdoor came to light on March 29, 2024, when a thread was published on Openwall's oss-security mailing list by Andres Freund, revealing a potential compromise in the open-source code.
For more information read our research article and access the free XZ backdoor scanner at XZ.fail.
About Binarly:
Binarly is a global firmware and software supply chain security company founded in 2021. The company’s flagship Binarly Transparency Platform is an enterprise-class, AI-powered solution used by device manufacturers, OEMs, IBVs and product security teams to identify known and unknown vulnerabilities, misconfigurations and signs of malicious code implantation. Binarly’s validated remediation playbooks have significantly reduced the cost and time to respond to security exposures. Based in Los Angeles, California, Binarly brings decades of research and program analysis expertise to build solutions to protect businesses, critical infrastructure, and consumers around the world.
To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.
View source version on businesswire.com: https://www.businesswire.com/news/home/20240401230046/en/
Contact information
media@binarly.io
818.351.9637
About Business Wire
For more than 50 years, Business Wire has been the global leader in press release distribution and regulatory disclosure.
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
Born in Riyadh. Sold Out in Paris. stc and EWC a Winning Partnership.25.8.2026 14:02:00 EEST | Press release
stc group, a leading digital enabler, concluded its third consecutive year as a Founding and Elite Partner of the Esports World Cup (EWC), supporting the tournament as it staged its first edition outside Saudi Arabia in Paris. The largest EWC to date brought together more than 2,000 professional players and 200 clubs from over 100 countries, competing across 25 tournaments and 24 game titles for a prize pool exceeding $75 million. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260825372468/en/ Fans hold up the stc/EWC banner during the Esports World Cup 2026 grand final at the Accor Arena in Paris (Photo: AETOSWire) The move to Paris marked a new chapter for a tournament launched in Riyadh in 2024, reflecting growing international reach and the increasing profile of esports. stc’s continued partnership through that expansion reflects a broader commitment to the gaming ecosystem, supporting professional competition, amateur p
Ansaldo Energia Selects Kinaxis to Power the Future of Global Energy Infrastructure25.8.2026 14:00:00 EEST | Press release
Kinaxis® Inc. (TSX:KXS), a global leader in AI-powered supply chain planning and orchestration, today announced that Ansaldo Energia, a global leader of power generation technology, has selected the Kinaxis Maestro™ platform to help orchestrate its complex supply chain in supporting one of the fastest-growing infrastructure markets in the world. For more than 170 years, Ansaldo Energia has stood at the heart of Italy's industrial heritage, helping shape the nation's energy future while becoming a global leader in power generation technology. Today, as demand for reliable energy infrastructure accelerates, driven by AI, hyperscale data centers, electrification and energy security, Ansaldo Energia is navigating increasingly complex, high-value manufacturing programs, extended production cycles and a rapidly evolving supply chain. The selection of Kinaxis follows an extensive transformation to establish a new operating model aligned with Ansaldo Energia's long-term growth strategy. After
UL Solutions Expands Capabilities in Italy to Create European Retail Center of Excellence Supporting Customers From Product Concept to Market25.8.2026 14:00:00 EEST | Press release
UL Solutions Inc. (NYSE: ULS), a global leader in applied safety science, today announced it has expanded capabilities at its site in Lombardy, Italy, to create the European Retail Center of Excellence, giving retailers, brands and manufacturers access to a broader portfolio of services designed for a technology-enabled and rapidly innovating consumer retail environment. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260818422220/en/ UL Solutions has expanded capabilities at its site in Northern Italy to create the European Retail Center of Excellence, building on 40 years of technical expertise in the Lombardy region. “Retail product innovation is moving faster and becoming more complex, especially as smart, connected and AI-enabled products reshape consumer expectations and regulatory requirements,” said Josh Warren, Vice President and General Manager, Retail and Consumer Products at UL Solutions. “By expanding our capabil
TVS Motor Company Appoints Marcel Driessen as Division Head – Europe to Drive Next Phase of Growth25.8.2026 13:49:00 EEST | Press release
TVS Motor Company (TVSM), part of TVS VENU, and a reputed global manufacturer of two and three-wheelers, today announced the appointment of Marcel Driessen as Division Head – Europe, effective September 15th, 2026 to strengthen its international business operations and accelerate growth across key global markets. Marcel will spearhead the next phase of expansion for both the brands TVSM and Norton Motorcycles in one of the company's most strategically important regions. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260825464349/en/ Marcel Driessen, Division Head – Europe, TVS Motor Company Marcel joins TVS Motor Company with more than three decades of international leadership experience across the automotive and premium motorcycle industries. Throughout his distinguished career, he has held senior commercial and management positions with some of the world's most respected brands, including Yamaha, BMW Motorrad, Ducati, Piag
NIQ and The OpenAI Deployment Company Collaborate to Bring Consumer Intelligence into Enterprise Workflows25.8.2026 13:45:00 EEST | Press release
NielsenIQ (NYSE: NIQ), a leading consumer intelligence company, today announced a collaboration with The OpenAI Deployment Company (“DeployCo”) to further extend its AI suite of products in the NIQ Optiq Suite, including NIQ Optiq Chat, Optiq Mobile, and Optiq Bridge. The collaboration builds on the AI-native growth and product momentum NIQ reported in its Q2 results and will help NIQ extend and deliver its proprietary intelligence directly into the enterprise systems and workflows clients use every day. AI is rearchitecting decision-making across commerce, reshaping how companies analyze markets, make decisions and execute work. But model capabilities alone are not enough. Business outcomes depend on the quality of the data, harmonization, semantic context and domain intelligence behind those systems. Through its work with DeployCo, NIQ is advancing how AI-ready intelligence can be accessed, applied and embedded across enterprise workflows. “We expect this work to help us build faster
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom