Binarly Releases Free Detection Tool for XZ Backdoor
1.4.2024 23:39:00 EEST | Business Wire | Press release
Binarly, provider of an industry leading AI-powered firmware and software supply chain security platform, has created and released a free scanning tool to help defenders spot signs of the dangerous XZ backdoor (CVE-2024-3094).
The XZ.fail detection tool was released less than 24 hours after the discovery of a backdoor in the open-source XZ Utils, which provides lossless data compression on virtually all Unix-like operating systems, including Linux. (See CISA advisory).
According to Binarly chief executive Alex Matrosov, the tool includes generic IFUNC implantation detection with close to zero false-positives, showcasing the company’s binary code intelligence engine in action.
“This detection is based on behavioral analysis and can detect any invariants automatically if a similar backdoor is implanted somewhere else,” Matrosov added.
“Such a complex and professionally designed implantation framework is not developed for a one-shot operation. It could already be deployed elsewhere or partially reused in other operations. That’s exactly why we started focusing on more generic detection for this complex backdoor,” Matrosov added.
For those seeking more comprehensive detection and remediation strategies, the Binarly Transparency Platform offers an in-depth solution. With XZ detection capabilities deployed, the platform facilitates easy identification of malicious activities at scale, enabling users to take prompt and effective action to safeguard their software supply chains.
The XZ backdoor came to light on March 29, 2024, when a thread was published on Openwall's oss-security mailing list by Andres Freund, revealing a potential compromise in the open-source code.
For more information read our research article and access the free XZ backdoor scanner at XZ.fail.
About Binarly:
Binarly is a global firmware and software supply chain security company founded in 2021. The company’s flagship Binarly Transparency Platform is an enterprise-class, AI-powered solution used by device manufacturers, OEMs, IBVs and product security teams to identify known and unknown vulnerabilities, misconfigurations and signs of malicious code implantation. Binarly’s validated remediation playbooks have significantly reduced the cost and time to respond to security exposures. Based in Los Angeles, California, Binarly brings decades of research and program analysis expertise to build solutions to protect businesses, critical infrastructure, and consumers around the world.
To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.
View source version on businesswire.com: https://www.businesswire.com/news/home/20240401230046/en/
Contact information
media@binarly.io
818.351.9637
About Business Wire
For more than 50 years, Business Wire has been the global leader in press release distribution and regulatory disclosure.
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
Focused Support Launches Cavok STRIKE to Expand Link-16 Participation Across the Joint Force14.9.2026 08:00:00 EEST | Press release
Focused Support LLC today announced the launch of Cavok STRIKE, an integrated software capability that expands the Link-16 tactical battlespace picture by enabling additional operational platforms to participate in the Link-16 network. Modern battlefields have increasing numbers of unmanned systems, sensors, and supporting platforms operating throughout the joint battlespace. The rapid proliferation of Group 1, 2, and 3 UAS, including both expendable and recoverable systems, has created a growing need to integrate these assets into the broader tactical network. Many of these platforms provide operationally relevant information but have historically remained outside the Link-16 network due to limitations in size, weight, power, platform integration complexity, or acquisition cost. Cavok STRIKE addresses this gap by enabling platforms to participate in the Link-16 network as non-command-and-control participants. This allows those platforms to interoperate with traditional Link-16 platfor
Fujirebio Expands Access to Blood-based Neurology Testing in Brazil with ANVISA Market Authorization for Lumipulse® G NfL Blood and Lumipulse G pTau 217 Plasma14.9.2026 08:00:00 EEST | Press release
H.U. Group Holdings Inc. and its wholly owned subsidiary Fujirebio today announced that the Brazilian Health Regulatory Agency (ANVISA) has granted market authorization for the Lumipulse G NfL Blood and Lumipulse G pTau 217 Plasma assays for use on the fully automated LUMIPULSE® G immunoassay platform in Brazil. “ANVISA authorization of the Lumipulse G NfL Blood and Lumipulse G pTau 217 Plasma assays marks another important step in our mission to expand access to reliable, clinically meaningful blood-based biomarkers for clinicians and patients worldwide,” said Christiaan De Wilde, CEO of Fujirebio Europe N.V. “By making both neurological biomarker assays available to laboratories on a single, fully automated platform, we are helping support more informed clinical decision-making across a broad range of neurological conditions and throughout the diagnostic pathway.” The Brazilian ANVISA authorizations are based on the already CE marked in vitro diagnostics (IVD) approvals of these two
MEX Exchange, Part of MultiBank Group, Expands Executive Team as International Growth Accelerates14.9.2026 08:00:00 EEST | Press release
MEX Exchange, the institutional electronic trading platform of MultiBank Group, has announced the appointment of Brian Liedberg as Chief Revenue Officer and Global Head of Sales, strengthening its commercial leadership as the company continues to develop its institutional trading business and expand its presence across international markets. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260913319267/en/ Brian Liedberg joins MEX Exchange, bringing more than 30 years of experience across global capital markets, electronic trading and FinTech Liedberg brings more than 30 years of experience across global capital markets, electronic trading and financial technology, with a career spanning institutional sales, business development, commercial strategy and revenue growth. Prior to joining MEX Exchange, Liedberg served as Head of Global Sales and Chief Revenue Officer at TradAir, where he led the company’s global commercial growth
Signaloid Announces Appointment of Quantitative Finance and Cloud Veterans to Advisory Board and Senior Commercialization Roles14.9.2026 06:00:00 EEST | Press release
British technology company Signaloid today announced the appointment of three distinguished industry veterans to its advisory board and senior leadership roles, to strengthen the commercialization momentum behind its technology: Dr. Han Lee, former Global Head of Quantitative Strategies and Automated Trading for the Fixed Income Division at Morgan Stanley, Dr. Nachiketh Potlapally, former Architect at Oracle Cloud Infrastructure, and Christian Roth, former Senior Director Enterprise Sales, Intel. Bringing deep expertise in quantitative finance and cloud infrastructure, the appointments build on Signaloid’s commercial traction momentum in Europe, Japan, and the United States. Dr. Lee, prior to his executive role at Morgan Stanley, served as Global Head of Quantitative Analytics at RBS and holds a Ph.D. in Theoretical Physics from the University of Cambridge. He is a co-founder of RLxPartners Ltd, and serves as an advisor to the Head of the Department of Physics at the University of Oxfo
SES’s Final Three O3b mPOWER Satellites Successfully Launched13.9.2026 23:22:00 EEST | Press release
SES today announced the successful launch of its eleventh, twelfth and thirteenth O3b mPOWER satellites, further expanding its second-generation medium Earth orbit (MEO) system designed to offer high-performance connectivity services around the world. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260913914517/en/ SES’s Final Three O3b mPOWER Satellites Successfully Launched The three satellites launched at 2:49 pm local time aboard a SpaceX Falcon 9 rocket from Space Launch Complex 40 (SLC-40) at Cape Canaveral Space Force Station. “This launch marks a defining milestone for SES as we complete the O3b mPOWER constellation and further strengthen our MEO capabilities,” said Adel Al-Saleh, CEO of SES. “More importantly, it reinforces our ability to deliver resilient, secure and scalable connectivity for customers around the world, helping governments, enterprises, cloud providers and mobility customers meet their most critical
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom