CA-BINARLY
1.4.2024 22:40:34 CEST | Business Wire | Press release
Binarly, provider of an industry leading AI-powered firmware and software supply chain security platform, has created and released a free scanning tool to help defenders spot signs of the dangerous XZ backdoor (CVE-2024-3094).
The XZ.fail detection tool was released less than 24 hours after the discovery of a backdoor in the open-source XZ Utils, which provides lossless data compression on virtually all Unix-like operating systems, including Linux. (See CISA advisory).
According to Binarly chief executive Alex Matrosov, the tool includes generic IFUNC implantation detection with close to zero false-positives, showcasing the company’s binary code intelligence engine in action.
“This detection is based on behavioral analysis and can detect any invariants automatically if a similar backdoor is implanted somewhere else,” Matrosov added.
“Such a complex and professionally designed implantation framework is not developed for a one-shot operation. It could already be deployed elsewhere or partially reused in other operations. That’s exactly why we started focusing on more generic detection for this complex backdoor,” Matrosov added.
For those seeking more comprehensive detection and remediation strategies, the Binarly Transparency Platform offers an in-depth solution. With XZ detection capabilities deployed, the platform facilitates easy identification of malicious activities at scale, enabling users to take prompt and effective action to safeguard their software supply chains.
The XZ backdoor came to light on March 29, 2024, when a thread was published on Openwall's oss-security mailing list by Andres Freund, revealing a potential compromise in the open-source code.
For more information read our research article and access the free XZ backdoor scanner at XZ.fail.
About Binarly:
Binarly is a global firmware and software supply chain security company founded in 2021. The company’s flagship Binarly Transparency Platform is an enterprise-class, AI-powered solution used by device manufacturers, OEMs, IBVs and product security teams to identify known and unknown vulnerabilities, misconfigurations and signs of malicious code implantation. Binarly’s validated remediation playbooks have significantly reduced the cost and time to respond to security exposures. Based in Los Angeles, California, Binarly brings decades of research and program analysis expertise to build solutions to protect businesses, critical infrastructure, and consumers around the world.
To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.
View source version on businesswire.com: https://www.businesswire.com/news/home/20240401230046/en/
About Business Wire
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
Wolters Kluwer Named Top Vendor Law Firm SaaS Solution Provider in the DACH Region for 202720.7.2026 09:00:00 CEST | Press release
Recognition highlights leadership position of Kleos in cloud-native legal practice management, earning the highest scores for customer satisfaction, value for money and customer recommendation among law firms in Germany, Austria and Switzerland. Wolters Kluwer’s Legal & Regulatory has been recognized as a top vendor for Law Firm SaaS Solutions in the DACH region for 2027, according to the latest Vendor Selection Matrix™ by Research in Action. Kleos, the company's cloud-native legal practice management platform, achieved a shared first-place position in the ranking and received the highest scores for customer satisfaction, value for money and customer recommendation among surveyed law firms in Germany, Austria and Switzerland. The recognition builds on the platform's earlier pan-European leadership position and reinforces Kleos' standing as one of Europe's leading legal practice management solutions. "We are proud to be recognized as a leading provider of Law Firm SaaS Solutions in the
IQM and Deutsche Bahn Demonstrate Quantum Algorithm for Railway Scheduling on Real Operational Data20.7.2026 08:00:00 CEST | Press release
A hybrid quantum-classical algorithm, executed end to end on IQM hardware, produced feasible schedules with Deutsche Bahn, the German rail operator, using a real operational dataset of 190 trips across five German cities. The approach runs on today’s hardware and is designed to improve automatically as quantum processors scale, offering enterprises a model for extracting value now, ahead of fault-tolerant computing. The collaboration reflects IQM’s push into enterprise adoption. The company has sold 24 quantum computers worldwide and listed on the Nasdaq Global Select Market and Nasdaq Helsinki in July 2026 under the ticker IQMX. IQM Quantum Computers (Nasdaq: IQMX), a global leader in full-stack superconducting quantum computers, today published the results of a research collaboration with Deutsche Bahn, Europe’s largest rail operator, exploring how quantum computing can improve railway scheduling. This press release features multimedia. View the full release here: https://www.busines
Galderma Launches Alastin® in Japan and Key Markets Across Asia Pacific, Expanding Its Footprint in the Region20.7.2026 07:00:00 CEST | Press release
Galderma launches Alastin, its premium regenerative skincare brand into Japan, Singapore, South Korea and Taiwan The Japan and Asia Pacific (JPAC) region is among the fastest‑growing markets globally for medical aesthetics and dermatological skincare, driven by rising adoption of minimally invasive procedures and an increased focus on skin quality, which are accelerating demand for innovative, science‑based skincare solutions such as Alastin1,2 These launches reflect Galderma’s ongoing growth across the JPAC region and long‑term commitment to advancing regenerative skincare Galderma (SIX: GALD), the pure-play dermatology category leader, today announced the launch of Alastin – its premium regenerative skincare brand – across the JPAC region. The brand recently launched in Taiwan, will soon launch in Japan, and has received approval to launch in Singapore and South Korea, with planned market introduction in September and November, respectively. This expansion follows Alastin’s recent la
Incyte Data to Be Highlighted in Four Rapid Oral Presentations at the European Society for Medical Oncology (ESMO) Congress 2026 Support Efforts to Improve Outcomes in Difficult-to-Treat Cancers17.7.2026 19:10:00 CEST | Press release
Rapid oral presentations will highlight new Phase 1 data across Incyte’s solid tumor portfolioBoth INCB161734, an investigational, potent, selective and orally bioavailable KRAS G12D inhibitor, and INCA338901, a TGFβR2×PD-1 bispecific antibody, are being evaluated in ongoing Phase 3 programs as first-line treatments for patients with advanced pancreatic ductal adenocarcinoma (PDAC) and microsatellite stable (MSS) colorectal cancer, respectively Incyte (Nasdaq:INCY) today announced that it will highlight data from several programs in its oncology portfolio in six presentations at the European Society of Medical Oncology (ESMO) Congress 2026, being held October 23 - 27, 2026, in Madrid. “The data at ESMO will further illustrate Incyte’s commitment to advancing innovation for patients with cancer,” said Pablo J. Cagnoni, M.D., President, Incyte and Global Head of Research and Development. "Among the presentations are important updates from our KRAS G12D inhibitor in advanced pancreatic ca
STL Expands Its Optical Connectivity Portfolio in the US with the CONCAT Solution17.7.2026 14:24:00 CEST | Press release
STL Optical Connectivity NA, LLC, (STLOC), a U.S. subsidiary of STL (Sterlite Technologies Ltd.) [NSE: STLTECH], a leading connectivity solutions provider for AI-ready digital infrastructure, today announced that it launched its new advanced FTTH solution, CONCAT, after successfully completing field trials on the networks of one of the largest telecom service providers in the United States. Following successful field validation, CONCAT is now available to digital infrastructure providers seeking faster fiber rollouts with reduced deployment complexity and labor. It enables up to 71% in labor cost savings by eliminating most field splicing through factory-assembled, pre-connectorized fiber segments that deliver plug-and-play installation. CONCAT simplifies fiber deployment by shifting critical fiber preparation and termination into a controlled manufacturing environment ensuring consistent quality, faster installation, and lower operational risk in the field. CONCAT solution is ideal fo
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom