Binarly Releases Free Detection Tool for XZ Backdoor
1.4.2024 23:39:00 EEST | Business Wire | Press release
Binarly, provider of an industry leading AI-powered firmware and software supply chain security platform, has created and released a free scanning tool to help defenders spot signs of the dangerous XZ backdoor (CVE-2024-3094).
The XZ.fail detection tool was released less than 24 hours after the discovery of a backdoor in the open-source XZ Utils, which provides lossless data compression on virtually all Unix-like operating systems, including Linux. (See CISA advisory).
According to Binarly chief executive Alex Matrosov, the tool includes generic IFUNC implantation detection with close to zero false-positives, showcasing the company’s binary code intelligence engine in action.
“This detection is based on behavioral analysis and can detect any invariants automatically if a similar backdoor is implanted somewhere else,” Matrosov added.
“Such a complex and professionally designed implantation framework is not developed for a one-shot operation. It could already be deployed elsewhere or partially reused in other operations. That’s exactly why we started focusing on more generic detection for this complex backdoor,” Matrosov added.
For those seeking more comprehensive detection and remediation strategies, the Binarly Transparency Platform offers an in-depth solution. With XZ detection capabilities deployed, the platform facilitates easy identification of malicious activities at scale, enabling users to take prompt and effective action to safeguard their software supply chains.
The XZ backdoor came to light on March 29, 2024, when a thread was published on Openwall's oss-security mailing list by Andres Freund, revealing a potential compromise in the open-source code.
For more information read our research article and access the free XZ backdoor scanner at XZ.fail.
About Binarly:
Binarly is a global firmware and software supply chain security company founded in 2021. The company’s flagship Binarly Transparency Platform is an enterprise-class, AI-powered solution used by device manufacturers, OEMs, IBVs and product security teams to identify known and unknown vulnerabilities, misconfigurations and signs of malicious code implantation. Binarly’s validated remediation playbooks have significantly reduced the cost and time to respond to security exposures. Based in Los Angeles, California, Binarly brings decades of research and program analysis expertise to build solutions to protect businesses, critical infrastructure, and consumers around the world.
To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.
View source version on businesswire.com: https://www.businesswire.com/news/home/20240401230046/en/
Contact information
media@binarly.io
818.351.9637
About Business Wire
For more than 50 years, Business Wire has been the global leader in press release distribution and regulatory disclosure.
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
Andersen Consulting Adds TalentSmartEQ to Advance Leadership and Business Transformation8.10.2026 17:38:00 EEST | Press release
Andersen Consulting expands its human capital capabilities through a Collaboration Agreement with TalentSmartEQ, a San Diego-based firm focused on creating practical, engaging and actionable learning experiences rooted in emotional intelligence (EQ) and leadership development. For more than two decades, TalentSmartEQ has worked with organizations around the world to develop leadership skills through emotional intelligence, helping strengthen employee engagement, teamwork, and overall performance. The firm combines research-based methodology with practical learning experiences, assessments, coaching, and customized programs that are designed to translate EQ development into sustained changes in workplace behavior. As an industry leader, TalentSmartEQ works with organizations spanning Fortune 500 companies to government agencies and privately held businesses. “Organizations are asking more of their leaders and employees as the workplace continues to evolve,” said Howard Farfel, CEO of Ta
Toluna Announces Planned CEO Transition After 25 Years; Founder Frédéric Charles Petit to remain as Board Member, Senior Advisor and Shareholder8.10.2026 17:20:00 EEST | Press release
Toluna, a global leader in consumer insights and market research technology, today announces a planned leadership transition. After 25 years leading the company he founded, Frédéric Charles Petit, Founder and Chief Executive Officer, intends to transition from his role as CEO following the appointment of his successor as part of a carefully planned succession process designed to ensure continuity for clients, employees and partners. Following the transition, Mr. Petit will continue to serve on Toluna's Board of Directors, will remain a significant shareholder of the company, and will take on an ongoing strategic advisory role for areas central to Toluna's next phase of growth. The Board, in close consultation with Mr. Petit, has initiated a structured succession process. A comprehensive transition plan is in place, including a defined handover with Mr. Petit, to ensure continuity for the company’s clients, employees, and partners. The Board expects to confirm the appointment of the com
CSC Wins for Threat Intelligence Innovation in 2026 CyberSecurity Breakthrough Awards8.10.2026 17:00:00 EEST | Press release
CSC, an enterprise-class domain registrar and world leader in detecting and mitigating brand, fraud, domain, and Domain Name System (DNS) threat vectors, today announced that its 3D Domain Security and Global Enforcement solution won for Threat Intelligence Innovation in the 10th annual CyberSecurity Breakthrough Awards. The awards recognize the most innovative companies, products, and technologies driving progress in the global information security industry. CSC’s 3D Domain Security and Global Enforcement solution for the enterprise domain ecosystem combines advanced AI machine learning technology, proprietary domain threat intelligence, expert analysis, and integrated global enforcement. With this technology, organizations can detect, understand, and act on external cyber threats targeting their brand online across social media, search engines, email, and e-commerce websites. By uncovering high-risk domains and providing a multidimensional view of threat vectors outside the firewall
Stonebranch Launches Hybrid Orchestration Control Plane to Provide Governed Reliability in the Agentic Era8.10.2026 16:00:00 EEST | Press release
Stonebranch, a leading provider of service orchestration and automation solutions, today announced the Hybrid Orchestration Control Plane, a new solution powered by Stonebranch Universal Automation Center™ (UAC) version 8.1. It lets enterprises run traditional automation, AI tasks, autonomous agents, and human decisions as one end-to-end workflow, with consistent permissions, approvals, service levels, audit trails, and recovery controls. Agents are spreading across the enterprise, but they act without the operational context around each decision: prior approvals, downstream dependencies, and recovery. Alone, they become another disconnected execution environment, with separate controls, fragmented visibility, and custom plumbing. The Hybrid Orchestration Control Plane connects them to existing automation in one governed process: agents reason and request, while governed workflows control execution. "Every enterprise will use AI agents. The question is whether those agents can be trust
INNIO and Aggreko Extend Strategic Partnership Through 2031, Securing Long-Term Engine Capacity to Meet Growing Global Power Demand8.10.2026 15:37:00 EEST | Press release
INNIO N.V. (Nasdaq: INIO) today announced a substantial extension of its long-standing strategic partnership with Aggreko, a global leader in engineered energy and temperature solutions. The extended agreement, now running through 2031, secures substantial long-term engine capacity for Aggreko while providing INNIO with additional order visibility for medium-power range engines. “Global power demand is rising rapidly, while grid constraints are growing. Together with Aggreko, we are delivering reliable, efficient, and sustainable power solutions that help bridge these gaps and keep customers moving,” said Dr. Olaf Berlien, President and CEO of INNIO. “This agreement secures proven technology and capacity to deliver reliable power wherever and whenever our customers need it,” said Sunny Thakrar, Commercial Director of Aggreko. Under the agreement, INNIO has agreed to provide a minimum of 450 MW of engine capacity in the medium-power range (Jenbacher Type 4) in 2027 and access to agreed
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom