CA-BINARLY
Binarly, provider of an industry leading AI-powered firmware and software supply chain security platform, has created and released a free scanning tool to help defenders spot signs of the dangerous XZ backdoor (CVE-2024-3094).
The XZ.fail detection tool was released less than 24 hours after the discovery of a backdoor in the open-source XZ Utils, which provides lossless data compression on virtually all Unix-like operating systems, including Linux. (See CISA advisory).
According to Binarly chief executive Alex Matrosov, the tool includes generic IFUNC implantation detection with close to zero false-positives, showcasing the company’s binary code intelligence engine in action.
“This detection is based on behavioral analysis and can detect any invariants automatically if a similar backdoor is implanted somewhere else,” Matrosov added.
“Such a complex and professionally designed implantation framework is not developed for a one-shot operation. It could already be deployed elsewhere or partially reused in other operations. That’s exactly why we started focusing on more generic detection for this complex backdoor,” Matrosov added.
For those seeking more comprehensive detection and remediation strategies, the Binarly Transparency Platform offers an in-depth solution. With XZ detection capabilities deployed, the platform facilitates easy identification of malicious activities at scale, enabling users to take prompt and effective action to safeguard their software supply chains.
The XZ backdoor came to light on March 29, 2024, when a thread was published on Openwall's oss-security mailing list by Andres Freund, revealing a potential compromise in the open-source code.
For more information read our research article and access the free XZ backdoor scanner at XZ.fail.
About Binarly:
Binarly is a global firmware and software supply chain security company founded in 2021. The company’s flagship Binarly Transparency Platform is an enterprise-class, AI-powered solution used by device manufacturers, OEMs, IBVs and product security teams to identify known and unknown vulnerabilities, misconfigurations and signs of malicious code implantation. Binarly’s validated remediation playbooks have significantly reduced the cost and time to respond to security exposures. Based in Los Angeles, California, Binarly brings decades of research and program analysis expertise to build solutions to protect businesses, critical infrastructure, and consumers around the world.
To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.
View source version on businesswire.com: https://www.businesswire.com/news/home/20240401230046/en/
About Business Wire
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
LTIMindtree Launches GCC-as-a-Service1.7.2025 11:30:00 CEST | Press release
An integrated, AI-powered offering with deep industry expertise to drive growth and transformation LTIMindtree [NSE: LTIM, BSE: 540005], a global technology consulting and digital solutions company today introduced its GCC-as-a-Service. The services cater to organizations that may want to set up GCCs, scale their existing ones to optimize costs and create added value. The catalogue covers a spectrum of Build, Operate, Transform and Transfer services, offering clients the option to pick and choose what they require. GCC-as-a-Service commercials are designed on a per-seat or per service basis to ensure cost optimization and value realization. LTIMindtree’s Talent Solutions, part of our Build Services enables clients efficiently onboard business-ready talent from day one through its in-house AI-powered talent acquisition ecosystem. As a part of Transform Services, the Company provides industry specific offerings; technological solutions and frameworks that lead to acceleration of value re
Network Failures Cost $5M A Year for More Than a Quarter of Global Businesses, According to Expereo1.7.2025 10:00:00 CEST | Press release
Half of global businesses have been forced to urgently re-evaluate their tech infrastructure following a wave of high-profile IT outages Network instability is taking a serious toll on global businesses, with over a quarter (28%) reporting revenue losses of up to $5 million due to network outages or poor performance. Alarmingly, an additional 23% have experienced losses exceeding $5 million. These findings come from an IDC InfoBrief commissioned by Expereo, titled “Enterprise Horizons 2025: Technology Leaders Priorities: Achieving Digital Agility.” Following a series of high-profile IT disruptions over the past year, ranging from cybersecurity breaches to connectivity failures, nearly half (49%) of global businesses have been compelled to re-evaluate their technology infrastructure, and 40% of global tech leaders say it’s caused networking and connectivity to rise higher up the C-suite agenda. Perhaps as a result, networking/connectivity now comes out on top in terms of the technologie
Record Financing for NeXtWind: €1.4 Billion for the Expansion of Wind Energy in Germany1.7.2025 09:52:00 CEST | Press release
Innovative platform financing enables debt investments in renewable energy on an unprecedented scale NeXtWind plans to quadruple the capacity of more than half of its 37 wind farms by 2028 as part of an increase of its total generation capacity to 3 GW Lars B. Meyer, Co-CEO of NeXtWind, said: “Thanks to this novel platform approach, we can optimize our wind farms more quickly and accelerate our growth. In the long term, we aim to transform them into state-of-the-art, integrated clean energy hubs.” NeXtWind, a leading renewable energy company, has secured €1.4 billion in debt financing. The agreement also includes an additional €1.3 billion in so-called accordion facilities, which can be activated in tranches over the coming years. This syndicated loan is the largest of its kind for an independent wind energy provider in Germany, and it opens the onshore wind market to debt investments from major financial institutions both domestically and internationally. NeXtWind will use the new fin
Celero Ventures Opens $25 Million Early-Stage Fund to Investors Backing the Next Generation of European Software Companies1.7.2025 09:30:00 CEST | Press release
Celero Ventures, a new venture capital firm founded by experienced software operators Dave Wyatt and Nick Cochran, is now raising its debut $25 million fund to invest in early-stage startups across the UK and Europe. The fund, which is already 25% subscribed, targets pre-seed and seed-stage companies building next-generation AI and data infrastructure. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20250701820933/en/ Nick Cochran and David Wyatt (right) Founders of Celero Ventures Based in London, Celero Ventures is inviting limited partners (LPs) to join its mission of backing exceptional technical founders and accelerating their path to product-market fit and scalable growth. Wyatt and Cochran bring a rare combination of deep go-to-market (GTM) experience and startup leadership. Together, they helped scale both MuleSoft and Databricks—two of the most successful enterprise software companies of the past decade. Their experien
3GPP MCX Standards-Based Hytera HyTalk MC 6.0 Released Globally1.7.2025 09:00:00 CEST | Press release
Hytera, a leading global provider of professional communications technologies and solutions, announced the worldwide release of Hytera HyTalk MC 6.0, its new-generation broadband mission-critical communication platform fully compliant with the 3GPP MCX standard Release 18. As a key part of Hytera’s convergence-native communications strategy, it delivers inclusive, efficient and secure communication over LTE cellular network. Hytera HyTalk MC 6.0 leverages 3GPP standard interfaces and Hytera’s proprietary protocols to enable deep interworking across different technologies and vendors. It enables real-time mapping between the signaling of 3GPP MCX and Hytera DMR, and interconnects with HyteraTETRA systems, allowing a smooth migration path to data-rich communications for mission- and business-critical institutions and users. Hytera DMR or TETRA two-way radios can communicate with LTE/5G terminals through the Hytera HyTalk MC platform in a hybrid network. The Ad-Hoc Temporary Group Call fe
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom