CA-BINARLY
1.4.2024 22:40:34 CEST | Business Wire | Press release
Binarly, provider of an industry leading AI-powered firmware and software supply chain security platform, has created and released a free scanning tool to help defenders spot signs of the dangerous XZ backdoor (CVE-2024-3094).
The XZ.fail detection tool was released less than 24 hours after the discovery of a backdoor in the open-source XZ Utils, which provides lossless data compression on virtually all Unix-like operating systems, including Linux. (See CISA advisory).
According to Binarly chief executive Alex Matrosov, the tool includes generic IFUNC implantation detection with close to zero false-positives, showcasing the company’s binary code intelligence engine in action.
“This detection is based on behavioral analysis and can detect any invariants automatically if a similar backdoor is implanted somewhere else,” Matrosov added.
“Such a complex and professionally designed implantation framework is not developed for a one-shot operation. It could already be deployed elsewhere or partially reused in other operations. That’s exactly why we started focusing on more generic detection for this complex backdoor,” Matrosov added.
For those seeking more comprehensive detection and remediation strategies, the Binarly Transparency Platform offers an in-depth solution. With XZ detection capabilities deployed, the platform facilitates easy identification of malicious activities at scale, enabling users to take prompt and effective action to safeguard their software supply chains.
The XZ backdoor came to light on March 29, 2024, when a thread was published on Openwall's oss-security mailing list by Andres Freund, revealing a potential compromise in the open-source code.
For more information read our research article and access the free XZ backdoor scanner at XZ.fail.
About Binarly:
Binarly is a global firmware and software supply chain security company founded in 2021. The company’s flagship Binarly Transparency Platform is an enterprise-class, AI-powered solution used by device manufacturers, OEMs, IBVs and product security teams to identify known and unknown vulnerabilities, misconfigurations and signs of malicious code implantation. Binarly’s validated remediation playbooks have significantly reduced the cost and time to respond to security exposures. Based in Los Angeles, California, Binarly brings decades of research and program analysis expertise to build solutions to protect businesses, critical infrastructure, and consumers around the world.
To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.
View source version on businesswire.com: https://www.businesswire.com/news/home/20240401230046/en/
About Business Wire
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
Motive and Vivo Brazil Win 2026 Leading Lights Award for Network API Monetization29.10.2026 17:35:00 CET | Press release
Award recognizes live GSMA Open Gateway deployment replacing SMS OTP with SIM-based silent authentication Motive, a global leader in entitlement, connected device and service management and Vivo Brazil, Brazil’s largest operator and part of the Telefónica Group, have won the 2026 Light Reading Leading Lights Award for Outstanding Use Case: Network API Monetization for the first commercial scale deployment of SIM-based silent authentication in Latin America. SMS OTP remains relevant as an authentication method due to its broad reach, working on virtually any type of mobile device. SIM-based silent authentication takes this experience a step further by eliminating the need to receive and manually enter codes. The result is a simpler, more seamless user journey that reduces friction and can help lower abandonment rates while increasing customer conversion and retention. Using Motive’s CAMARA-compliant Entitlement Server, Vivo can now verify a subscriber’s phone number directly without req
REV Ocean Appoints Paul Baribault as CEO Ahead of 2027 Global Operations29.10.2026 15:45:00 CET | Press release
Global conservation and philanthropic leader to spearhead REV Ocean's next chapter, connecting world-class science with international collaboration and ocean protection REV Ocean has appointed Paul Baribault as Chief Executive Officer as the organization moves towards the international debut of its 195-metre research vessel in Rio de Janeiro in April 2027, alongside the UN Ocean Decade Conference. One of the world's largest privately owned research and exploration vessels, REV represents a major philanthropic investment in ocean science. With nine laboratories, advanced deep-sea exploration vehicles and dedicated collaboration facilities, it is designed to give scientists access to world-class research infrastructure and connect their discoveries with the people and institutions able to drive ocean protection. Baribault joins as REV Ocean moves from a decade of engineering and construction into international operations. His mandate will be to build the international partnerships, fundi
Holder Partners Launches Strategic Communications Practice and Appoints Ali Ponte as Director and Practice Lead29.10.2026 15:15:00 CET | Press release
The new practice connects strategic communications and stakeholder engagement with Holder Partners’ capabilities in investigations, disputes, cybersecurity, due diligence and risk advisory. Holder Partners, a multidisciplinary consulting and advisory firm, today announced the launch of its Strategic Communications practice and the appointment of Ali Ponte as Director and Practice Lead. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20261027701219/en/ Ali Ponte, Director and Practice Lead of Holder Partners’ Strategic Communications practice. The practice advises leading companies and institutions, their boards, senior executives and counsel on communications, reputation and stakeholder considerations in complex matters and periods of significant change or opportunity. Each engagement is tailored to the client’s objectives and, where relevant, draws on Holder Partners’ broader advisory capabilities. Its strategic counsel, infor
Accertify Formalizes Partner Ecosystem as Fraud, Payments, and Chargebacks Converge Into a Single Risk Surface29.10.2026 15:00:00 CET | Press release
New partner program brings payment providers, orchestrators, commerce platforms, and consultancies together around the industry's largest fraud data community Accertify, a leading fraud decisioning provider whose Predictive Yes Platform helps merchants say yes to more good customers, more revenue, and more growth, today announced the launch of the Accertify Partner Program, a formalized partnership ecosystem connecting payment providers, orchestrators, commerce platforms, and consultancies to Accertify’s network-powered fraud intelligence. Partners can join through two tracks. The Referral track lets partners make a single introduction while Accertify handles the sale, implementation, and support. The Reseller track lets partners sell Accertify on their own contract and own the client relationship and margin. Partners that integrate with Accertify follow a defined certification path, so clients get a tested, supported connection from day one. Every client a partner brings joins a conso
Draslovka to Acquire ex-Natron Energy Battery IP, Completing a Vertically Integrated Western Sodium-Ion Value Chain29.10.2026 14:30:00 CET | Press release
Acquisition gives Draslovka control of former Natron Energy IP portfolio spanning sodium-ion materials, cells and complete battery systems. Deal combines acquired IP with Draslovka’s existing chemistry and European cathode-material capabilities, bringing key parts of the sodium-ion value chain together within one Western-aligned group and its partners. The IP acquisition strengthens Draslovka’s position across the emerging Western sodium-ion battery value chain. Technology targets applications where safety, high power, long cycle life and performance across a wide temperature range are critical, including data centers, grid storage, defense, industrial fleets, telecoms, rail and aviation. The acquired IP will substantively boost Draslovka’s technology offering, a portfolio of transformative and protected innovations for specific industries. Draslovka’s US-based subsidiary, COVORO MINING SOLUTIONS LLC (Covoro), the operator of one of the largest solid sodium cyanide plants in the world,
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom