CA-BINARLY
1.4.2024 22:40:34 CEST | Business Wire | Press release
Binarly, provider of an industry leading AI-powered firmware and software supply chain security platform, has created and released a free scanning tool to help defenders spot signs of the dangerous XZ backdoor (CVE-2024-3094).
The XZ.fail detection tool was released less than 24 hours after the discovery of a backdoor in the open-source XZ Utils, which provides lossless data compression on virtually all Unix-like operating systems, including Linux. (See CISA advisory).
According to Binarly chief executive Alex Matrosov, the tool includes generic IFUNC implantation detection with close to zero false-positives, showcasing the company’s binary code intelligence engine in action.
“This detection is based on behavioral analysis and can detect any invariants automatically if a similar backdoor is implanted somewhere else,” Matrosov added.
“Such a complex and professionally designed implantation framework is not developed for a one-shot operation. It could already be deployed elsewhere or partially reused in other operations. That’s exactly why we started focusing on more generic detection for this complex backdoor,” Matrosov added.
For those seeking more comprehensive detection and remediation strategies, the Binarly Transparency Platform offers an in-depth solution. With XZ detection capabilities deployed, the platform facilitates easy identification of malicious activities at scale, enabling users to take prompt and effective action to safeguard their software supply chains.
The XZ backdoor came to light on March 29, 2024, when a thread was published on Openwall's oss-security mailing list by Andres Freund, revealing a potential compromise in the open-source code.
For more information read our research article and access the free XZ backdoor scanner at XZ.fail.
About Binarly:
Binarly is a global firmware and software supply chain security company founded in 2021. The company’s flagship Binarly Transparency Platform is an enterprise-class, AI-powered solution used by device manufacturers, OEMs, IBVs and product security teams to identify known and unknown vulnerabilities, misconfigurations and signs of malicious code implantation. Binarly’s validated remediation playbooks have significantly reduced the cost and time to respond to security exposures. Based in Los Angeles, California, Binarly brings decades of research and program analysis expertise to build solutions to protect businesses, critical infrastructure, and consumers around the world.
To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.
View source version on businesswire.com: https://www.businesswire.com/news/home/20240401230046/en/
About Business Wire
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
Stallergenes Greer Foundation Celebrates Excellence in Allergy Innovation With 2025 Awards27.5.2026 17:22:00 CEST | Press release
The Stallergenes Greer Foundation, dedicated to advancing allergy research, fostering innovation and addressing environmental factors which impact allergies, is delighted to announce the recipients of the 2025 edition of its prestigious Science Awards for Allergy. Building on the success of the previous edition, this year’s awards recognise outstanding contributions to allergy research and patient engagement and allocate a total of €100,000 to support these initiatives. Four researchers have been selected by the Board as award recipients, each receiving €25,000 across two categories: Innovation In Treatment Awards Assoc. Professor Alexander Eggel, PhD, Department for Biomedical Research, University of Bern, and Department of Rheumatology and Immunology, University Hospital Bern, Switzerland, recognised for his research: “Improving diagnostic and therapeutic options for allergic patients”; Dr Janice A. Layhadi, PhD, Research Associate, National Heart and Lung Institute, Imperial College
Capchase Secures $200M+, as Demand for Vendor Financing in Enterprise Tech Deals Accelerates27.5.2026 16:00:00 CEST | Press release
As buyers face tighter budgets, Capchase helps technology companies close more deals faster with AI-enabled instant financing Capchase, the leading vendor financing platform for enterprise tech, today announced $200M+ in incremental funding to scale its embedded financing infrastructure globally and deploy more AI-enabled features. The funding, a mix of debt warehouse facilities and equity backed by institutional investors, reflects market validation that vendor financing has become essential infrastructure for enterprise technology companies to sell hardware and software products. As global B2B buyers face tighter budgets and greater scrutiny over large, up-front purchases, financing demand is growing. The Market Shift: Financing as a Growth Lever for B2B Tech Companies The $1.3 trillion vendor financing market has been traditionally dominated by banks and other lenders that utilize multi-thread email chains to manual doc review for underwriting. Capchase replaces those bottlenecks wi
ClickHouse Tops $250M ARR and 4,000 Customers, Launches Claude-Powered Agents at Open House 202627.5.2026 15:00:00 CEST | Press release
Annual run-rate revenue more than tripled year-over-year; new CostBench benchmark shows ClickHouse Cloud at 23x better cost-performance than the nearest cloud data warehouse ClickHouse today opened Open House 2026, its second annual user conference, with a set of announcements that mark one of the company's most active quarters since founding. ClickHouse’s serverless cloud offering has crossed over $250 million in annual run-rate revenue — more than triple a year ago — and added more than 1,000 net new customers since January, bringing its total to 4,000. To meet the demands of AI-era workloads, the company also launched ClickHouse Agents, a fully managed agentic analytics service powered by Anthropic's Claude; published CostBench, an open benchmark comparing the major cloud data warehouses on cost-performance; and introduced House Mates, its first formal partner program. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260527
Wasabi and Liverpool FC Renew Multi-year Partnership to Scale Global Fan Growth27.5.2026 15:00:00 CEST | Press release
Wasabi remains official cloud storage partner of Liverpool FC during its worldwide expansion, helping fuel the Club’s global digital content strategy Wasabi Technologies, the hot cloud storage company, today announced a multi-year extension of its partnership with Liverpool Football Club (LFC), deepening its role as the club’s Official Cloud Storage Partner. The renewed deal will see Wasabi help power the next phase of LFC’s global content strategy through Wasabi AiR, the intelligent media storage service, enabling the club to move faster, scale smarter, and deliver more personalised fan experiences that bring supporters across the world closer to the club. Together, the partnership empowers LFC to create, store, find, and publish content faster, helping to deliver rapid match and social output and serve its global fanbase with richer, more dynamic storytelling. Meanwhile, LFC serves as a strategic partner in Wasabi’s worldwide expansion, with brand visibility that grows Wasabi’s partn
Kraken Launches Bitcoin Vault to Make Earning on Bitcoin Easy for Millions of Customers27.5.2026 15:00:00 CEST | Press release
New product within Kraken Earn gives customers a simple way to earn BTC-denominated rewards while holding Bitcoin Kraken is launching Bitcoin Vault, a new product within Kraken Earn designed to help customers put their Bitcoin to work in a simple and trusted way. Built for long-term Bitcoin holders, Bitcoin Vault enables customers to earn BTC-denominated rewards while holding Bitcoin. Bitcoin Vault is powered by Veda, with strategy design and risk curation by Sentora. Their platforms are designed to manage risks and allocate the vaults to well-known onchain protocols like Aave, Morpho, Tydro and more. It is designed to make earning on Bitcoin more accessible, whether someone already holds Bitcoin with conviction or is just starting to build a long-term position. For many investors, Bitcoin is an asset they plan to hold forever and Bitcoin Vault is built around that behavior. Instead of introducing more complexity, Kraken offers a more intuitive path: hold Bitcoin, earn rewards in BTC a
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom