Binarly Releases Free Detection Tool for XZ Backdoor
1.4.2024 23:39:00 EEST | Business Wire | Press release
Binarly, provider of an industry leading AI-powered firmware and software supply chain security platform, has created and released a free scanning tool to help defenders spot signs of the dangerous XZ backdoor (CVE-2024-3094).
The XZ.fail detection tool was released less than 24 hours after the discovery of a backdoor in the open-source XZ Utils, which provides lossless data compression on virtually all Unix-like operating systems, including Linux. (See CISA advisory).
According to Binarly chief executive Alex Matrosov, the tool includes generic IFUNC implantation detection with close to zero false-positives, showcasing the company’s binary code intelligence engine in action.
“This detection is based on behavioral analysis and can detect any invariants automatically if a similar backdoor is implanted somewhere else,” Matrosov added.
“Such a complex and professionally designed implantation framework is not developed for a one-shot operation. It could already be deployed elsewhere or partially reused in other operations. That’s exactly why we started focusing on more generic detection for this complex backdoor,” Matrosov added.
For those seeking more comprehensive detection and remediation strategies, the Binarly Transparency Platform offers an in-depth solution. With XZ detection capabilities deployed, the platform facilitates easy identification of malicious activities at scale, enabling users to take prompt and effective action to safeguard their software supply chains.
The XZ backdoor came to light on March 29, 2024, when a thread was published on Openwall's oss-security mailing list by Andres Freund, revealing a potential compromise in the open-source code.
For more information read our research article and access the free XZ backdoor scanner at XZ.fail.
About Binarly:
Binarly is a global firmware and software supply chain security company founded in 2021. The company’s flagship Binarly Transparency Platform is an enterprise-class, AI-powered solution used by device manufacturers, OEMs, IBVs and product security teams to identify known and unknown vulnerabilities, misconfigurations and signs of malicious code implantation. Binarly’s validated remediation playbooks have significantly reduced the cost and time to respond to security exposures. Based in Los Angeles, California, Binarly brings decades of research and program analysis expertise to build solutions to protect businesses, critical infrastructure, and consumers around the world.
To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.
View source version on businesswire.com: https://www.businesswire.com/news/home/20240401230046/en/
Contact information
media@binarly.io
818.351.9637
About Business Wire
For more than 50 years, Business Wire has been the global leader in press release distribution and regulatory disclosure.
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
Nippon Electric Glass’s IR Transmitting Glass “FI-02” Adopted for Heimann Sensor Lens Unit, Enabling a 120° × 68° Field of View16.9.2026 04:00:00 EEST | Press release
Nippon Electric Glass Co., Ltd. (NEG) (TOKYO: 5214), a global leader in specialty glass headquartered in Otsu, Japan, announced that its IR Transmitting Glass (chalcogenide glass) “FI-02” has been adopted for Heimann Sensor GmbH’s wide-angle lens unit for thermal cameras. The lens unit achieves a 120° × 68° field of view, surpassing the previous product’s maximum of 92° × 59°. The adoption marks a significant milestone for FI-02 and showcases how advanced specialty glass can meet the demanding optical and manufacturing requirements of the expanding infrared sensing market. Thermal cameras detect infrared radiation emitted by people or objects and convert it into thermal images. Infrared sensors can detect the locations of people and temperature distributions. They are expected to be used for people detection and monitoring, where privacy considerations are important, and for air-conditioning control, while their use is expanding in healthcare, equipment monitoring, and security. Advanc
Workiva Advances Regulatory Work with AI Innovation15.9.2026 18:00:00 EEST | Press release
Workiva Inc. (NYSE: WK), a leading, audit-ready platform for trust, transparency, and accountability, unveiled dozens of new product and platform innovations at Amplify 2026, the company’s annual conference attended by thousands of finance, accounting, sustainability, risk, and compliance leaders. Workiva Debuts Agent Studio Workiva introduced Agent Studio, a landmark platform capability that empowers users to quickly build, customize, and deploy AI agents in Workiva's trusted platform. By combining AI reasoning with Workiva's native platform capabilities, enterprise knowledge, and governed workflows, Agent Studio enables users to automate sophisticated manual business processes without writing any code. Organizations can enrich agents with company-specific knowledge and context, tailor them to their own processes, and schedule automations to execute recurring work. “With Agent Studio, we're putting the power to build in the hands of the people who know the work and their company the b
Study: Heatwaves Increase Cough Urge, Which Salt Aerosols Reduce15.9.2026 16:15:00 EEST | Press release
SC Therapeutics, with University North Carolina, Imperial College London, and Boston University, announced publication on Tuesday in Nature Scientific Reports of results from a multi-institutional study indicating that the aridity inherent in heatwaves increases cough hypersensitivity in human airways by collapsing mucus onto cilia in a manner common to chronic respiratory diseases, such as cystic fibrosis, and asthma. The researchers find that alkaline aerosols of magnesium salts reverse mucosal collapse for several hours, and reduce cough hypersensitivity as reflected in placebo-adjusted suppression of daily cough bout rate (59%, p=0.03) and persistence of suppression post treatment for 1 to 3 weeks in a randomized, double-blind, placebo-controlled study of 10 refractory chronic cough patients. “Paris recorded 5,764 excess deaths between 17 June and 2 July, a period of time during which we report atmospheric aridity in the city increased approximately 3-fold relative to the 35 year a
ADM’s Fourth Annual Regenerative Agriculture Report Highlights Growing Resilience Across the Food System15.9.2026 16:00:00 EEST | Press release
ADM (NYSE: ADM), a global leader in innovative solutions from nature, today released its fourth annual regenerative agriculture report, showing how its programs are supporting farmers, strengthening agricultural supply chains and delivering measurable environmental outcomes around the world. “Resilience starts on the farm. By improving and protecting soil health, farmers can be better equipped to adapt to changing conditions and maintain productive operations,” said Greg Morris, SVP and President, Ag Services and Oilseeds, ADM. “That resilience can extend across the value chain, helping strengthen the food system we all depend on.” In 2025, ADM’s regenerative agriculture programs engaged more than 56,000 farmers across approximately 4.6 million acres, 11 countries and 10 crops. Compared with regional benchmarks, the programs resulted in approximately 946,000 metric tons of CO₂e reductions. “ADM views agriculture as a powerful way to meet evolving customer needs, and our work in regener
Diligent Unveils New Agentic Capabilities in Diligent One to Power the Future of Governance, Risk and Compliance15.9.2026 16:00:00 EEST | Press release
Diligent, the AI leader in governance, risk and compliance (GRC) solutions, today announced a major enhancement to Diligent One, its native AI platform, at Gartner’s Enterprise Risk, Audit and Compliance Conference (ERAC). This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260915941016/en/ “For many organizations, GRC work is slowed by fragmented systems, manual coordination and time-consuming reporting processes,” said Brian Stafford, President and CEO of Diligent. “Our latest agentic capabilities help teams cut through that complexity by connecting context, surfacing what matters and driving faster execution — while keeping governance and professional judgement at the center." An orchestration agent that coordinates work and approvals The orchestration agent in Diligent One gives GRC professionals a natural-language interface to coordinate audit and risk work. Instead of simply answering questions, it enables users to describe
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom