CA-BINARLY
1.4.2024 22:40:34 CEST | Business Wire | Press release
Binarly, provider of an industry leading AI-powered firmware and software supply chain security platform, has created and released a free scanning tool to help defenders spot signs of the dangerous XZ backdoor (CVE-2024-3094).
The XZ.fail detection tool was released less than 24 hours after the discovery of a backdoor in the open-source XZ Utils, which provides lossless data compression on virtually all Unix-like operating systems, including Linux. (See CISA advisory).
According to Binarly chief executive Alex Matrosov, the tool includes generic IFUNC implantation detection with close to zero false-positives, showcasing the company’s binary code intelligence engine in action.
“This detection is based on behavioral analysis and can detect any invariants automatically if a similar backdoor is implanted somewhere else,” Matrosov added.
“Such a complex and professionally designed implantation framework is not developed for a one-shot operation. It could already be deployed elsewhere or partially reused in other operations. That’s exactly why we started focusing on more generic detection for this complex backdoor,” Matrosov added.
For those seeking more comprehensive detection and remediation strategies, the Binarly Transparency Platform offers an in-depth solution. With XZ detection capabilities deployed, the platform facilitates easy identification of malicious activities at scale, enabling users to take prompt and effective action to safeguard their software supply chains.
The XZ backdoor came to light on March 29, 2024, when a thread was published on Openwall's oss-security mailing list by Andres Freund, revealing a potential compromise in the open-source code.
For more information read our research article and access the free XZ backdoor scanner at XZ.fail.
About Binarly:
Binarly is a global firmware and software supply chain security company founded in 2021. The company’s flagship Binarly Transparency Platform is an enterprise-class, AI-powered solution used by device manufacturers, OEMs, IBVs and product security teams to identify known and unknown vulnerabilities, misconfigurations and signs of malicious code implantation. Binarly’s validated remediation playbooks have significantly reduced the cost and time to respond to security exposures. Based in Los Angeles, California, Binarly brings decades of research and program analysis expertise to build solutions to protect businesses, critical infrastructure, and consumers around the world.
To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.
View source version on businesswire.com: https://www.businesswire.com/news/home/20240401230046/en/
About Business Wire
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
TetraMem Announces 22nm Multi-Level RRAM Analog In-Memory Computing SoC Milestone16.5.2026 10:43:00 CEST | Press release
TetraMem Inc., a Silicon Valley–based semiconductor company developing analog in-memory computing (IMC) solutions, today announced the successful tape-out, manufacturing, and initial silicon validation of its MLX200 platform, a 22nm multi-level RRAM-based analog IMC system-on-chip (SoC). This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260516556464/en/ Photograph of the MLX200 chip with a five-cent coin for size reference The achievement marks a significant step toward the commercialization of analog computing architectures based on emerging non-volatile memory technologies, addressing the growing challenges of data movement, power consumption, and thermal constraints in modern AI systems. As AI workloads continue to scale, system performance is increasingly constrained by the cost of moving data between memory and compute units. Analog in-memory computing offers a fundamentally different approach by performing computation dir
STARTEEPO Invest Announces 5% Stake in Xerox Holdings Corporation15.5.2026 18:15:00 CEST | Press release
STARTEEPO Invest (“STARTEEPO”), an alternative investment fund focused on public equity opportunities, today announced that it has acquired a significant ownership position in Xerox Holdings Corporation (“Xerox” or the “Company”). This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260515594020/en/ As of the date of this release, STARTEEPO and its affiliates beneficially owns 6.6 million shares of Xerox (excluding options), representing approximately 5.05% of the Company’s outstanding common stock. STARTEEPO has filed a Schedule 13D with the U.S. Securities and Exchange Commission (the “SEC”) providing additional details regarding its investment. Investment Perspective STARTEEPO believes that Xerox represents an interesting investment opportunity supported by a combination of balance sheet initiatives, ongoing operational improvements, and its position within a changing and consolidating industry. In STARTEEPO’s view, the Company
NTT DATA Announces Intent to Acquire WinWire to Scale Enterprise AI Adoption and Accelerate Industry Transformation with Microsoft15.5.2026 16:00:00 CEST | Press release
Accelerates AI‑driven transformation through expanded agentic AI and data engineering capabilities that underpin NTT DATA’s AI strategy Adds 1,000 Azure engineers and AI specialists to scale cloud and AI delivery capabilities Advances NTT DATA’s North America leadership position, scaling industry aligned AI led innovation across its cloud services and Microsoft Business Unit Builds on NTT DATA’s position as the fastest-growing Microsoft GSI partner, accelerating co-innovation in enterprise AI NTT DATA, a global leader in AI, digital business and IT services, today announced it has signed a definitive agreement to acquire WinWire,an award-winning Microsoft partner specializing in Agentic AI, AI on Azure, data engineering and cloud-native development as foundational capabilities for enterprise AI. The acquisition strengthens NTT DATA’s position as a trusted partner to help organizations move beyond experimentation to operationalize AI at scale. The acquisition further advances NTT DATA’s
NTT DATA Announces Intent to Acquire WinWire to Scale Enterprise AI Adoption and Accelerate Industry Transformation with Microsoft15.5.2026 16:00:00 CEST | Press release
Accelerates AI‑driven transformation through expanded agentic AI and data engineering capabilities that underpin NTT DATA’s AI strategy Adds 1,000 Azure engineers and AI specialists to scale cloud and AI delivery capabilities Advances NTT DATA’s North America leadership position, scaling industry aligned AI led innovation across its cloud services and Microsoft Business Unit Builds on NTT DATA’s position as the fastest-growing Microsoft GSI partner, accelerating co-innovation in enterprise AI NTT DATA, a global leader in AI, digital business and IT services, today announced it has signed a definitive agreement to acquire WinWire,an award-winning Microsoft partner specializing in Agentic AI, AI on Azure, data engineering and cloud-native development as foundational capabilities for enterprise AI. The acquisition strengthens NTT DATA’s position as a trusted partner to help organizations move beyond experimentation to operationalize AI at scale. The acquisition further advances NTT DATA’s
Experian Expands Agent Trust Partner Ecosystem with Akamai to Advance Trusted AI Driven Commerce15.5.2026 15:00:00 CEST | Press release
Collaboration strengthens secure, scalable agentic commerce and supports emerging Know Your Agent standards Experian today announced that Akamai Technologies has joined its growing partner ecosystem, designed to further advance secure, trusted AI driven commerce through the Experian Agent Trust™ framework, alongside partner Skyfire supporting emerging payment innovation. As AI agents begin to search, decide, and transact autonomously, they introduce a fundamental challenge for businesses: how to trust an action when it is no longer directly initiated by a human. Without a verified connection between humans and AI agents, autonomous commerce introduces new risks in fraud, misrepresentation, and unauthorized transactions. Experian Agent Trust is designed to address this challenge by establishing identity, accountability, and trust in agent driven interactions. “Trust, security, and performance must scale alongside the growing role of AI agents in digital commerce,” said Kathleen Peters,
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom