CA-BINARLY
Binarly, provider of an industry leading AI-powered firmware and software supply chain security platform, has created and released a free scanning tool to help defenders spot signs of the dangerous XZ backdoor (CVE-2024-3094).
The XZ.fail detection tool was released less than 24 hours after the discovery of a backdoor in the open-source XZ Utils, which provides lossless data compression on virtually all Unix-like operating systems, including Linux. (See CISA advisory).
According to Binarly chief executive Alex Matrosov, the tool includes generic IFUNC implantation detection with close to zero false-positives, showcasing the company’s binary code intelligence engine in action.
“This detection is based on behavioral analysis and can detect any invariants automatically if a similar backdoor is implanted somewhere else,” Matrosov added.
“Such a complex and professionally designed implantation framework is not developed for a one-shot operation. It could already be deployed elsewhere or partially reused in other operations. That’s exactly why we started focusing on more generic detection for this complex backdoor,” Matrosov added.
For those seeking more comprehensive detection and remediation strategies, the Binarly Transparency Platform offers an in-depth solution. With XZ detection capabilities deployed, the platform facilitates easy identification of malicious activities at scale, enabling users to take prompt and effective action to safeguard their software supply chains.
The XZ backdoor came to light on March 29, 2024, when a thread was published on Openwall's oss-security mailing list by Andres Freund, revealing a potential compromise in the open-source code.
For more information read our research article and access the free XZ backdoor scanner at XZ.fail.
About Binarly:
Binarly is a global firmware and software supply chain security company founded in 2021. The company’s flagship Binarly Transparency Platform is an enterprise-class, AI-powered solution used by device manufacturers, OEMs, IBVs and product security teams to identify known and unknown vulnerabilities, misconfigurations and signs of malicious code implantation. Binarly’s validated remediation playbooks have significantly reduced the cost and time to respond to security exposures. Based in Los Angeles, California, Binarly brings decades of research and program analysis expertise to build solutions to protect businesses, critical infrastructure, and consumers around the world.
To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.
View source version on businesswire.com: https://www.businesswire.com/news/home/20240401230046/en/
About Business Wire
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
Neumirna Therapeutics Appoints Ellen K. Donnelly as Chief Executive Officer18.9.2025 11:00:00 CEST | Press release
Neumirna Therapeutics, a biotechnology company developing RNA-based therapies for neurological diseases, today announced the appointment of Ellen K. Donnelly, Ph.D. as Chief Executive Officer. Ellen brings more than 20 years of leadership in neuroscience and rare diseases, spanning both global pharmaceutical companies and innovative biotech firms. She joins Neumirna from her role as CEO of Abliva AB, recently acquired by Pharming Group, and has previously led Modus Therapeutics and Souvien Therapeutics. Earlier in her career, Ellen spent nearly a decade at Pfizer Inc., where she held leadership roles in neuroscience research, clinical operations, portfolio management, and strategy. She holds a Ph.D. in Pharmacology & Neuroscience from Yale University. "Ellen combines scientific expertise with proven leadership in both biotech and pharma," said Luis Pareras, Chairman of the Board at Neumirna. "The Board is confident that under her guidance, Neumirna will continue to translate our innova
Former Wasabi EMEA VP Richard Czech Joins Leviia to Lead European Channel Expansion18.9.2025 11:00:00 CEST | Press release
Leviia, the French cloud storage provider with more than one million users and 1,000 enterprise customers, today announces a major step in its growth strategy: the expansion of its S3 storage operations across Europe. To lead this initiative, Leviia has appointed Richard Czech, former Vice President EMEA at Wasabi, as Chief Business Development Officer. Czech will drive market development and scale Leviia’s partner ecosystem across Europe, building on the company’s successful go-to-market model in France. “Richard’s arrival reflects the scale of our ambitions in Europe,” said William Méauzoone, co-founder of Leviia. “He combines first-hand experience in scaling a major storage player with an exceptional understanding of the European channel landscape. ” “I’m excited to join Leviia and lead its European expansion,” said Czech. “Organizations face growing pressure to store data in sovereign, multi-site environments. Unlike non-European providers such as Amazon or Wasabi, Leviia is unique
IQM and Scientek Corporation Sign Reseller Agreement to Boost Quantum Computing in Taiwan18.9.2025 10:11:00 CEST | Press release
Companies aim at fuelling the local quantum ecosystem growth and promote adoption IQM Quantum Computers and Scientek Corporation, a Taiwan-based reseller of scientific instruments and other high-technology products, today announced the signing of a strategic reseller agreement to accelerate the commercialisation of quantum computing. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20250918110284/en/ IQM and Scientek Corporation sign reseller agreement The agreement follows the installation of IQM Spark, the first full-stack superconducting quantum computer at the Taiwan Semiconductor Research Institute (TSRI). Under the reseller agreement, Scientek will sell and promote IQM’s on-premises quantum computers and cloud solutions that meet the evolving needs of universities, research institutions, and enterprises. Combining Scientek's strong market presence and customer-centric approach in Taiwan with IQM’s quantum leadership, the c
Acuity Knowledge Partners Acquires Ascent18.9.2025 09:30:00 CEST | Press release
Acuity Knowledge Partners (Acuity), a leading global provider of bespoke research, data management, analytics and AI solutions to the financial services sector, has announced that it has exchanged on the acquisition of Ascent. The transaction is expected to close on 30th September 2025. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20250915732380/en/ L-R: Stewart Smythe, Chief Executive Officer, Ascent; Jon O'Donnell, Chief Operating Officer, Acuity Knowledge Partners, and Robert King, Chief Executive Officer, Acuity Knowledge Partners This strategic move significantly expands Acuity's Data and Technology Services (DTS) division and its offering of technology and AI led services and solutions. Ascent, a leading European provider of AI-powered digital transformation services, supports over 170 clients globally, with 550 data, software, and cloud specialists operating across seven European jurisdictions. “Our acquisition of Asc
Shield and PwC UK Forge Strategic Collaboration to Deliver Future-Ready Communications Compliance18.9.2025 08:00:00 CEST | Press release
Collaboration brings together Shield's AI-first platform with PwC's surveillance expertise to deliver measurable compliance outcomes Shield, a leading AI platform for digital communication governance and archiving, today announced a collaboration with PwC UK, one of the world’s most trusted professional services firms. The alliance brings together Shield’s unified, cloud-native solution with PwC’s specialist expertise in communications surveillance delivery, regulatory compliance and complex programme execution. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20250917394739/en/ Shield and PwC launch a strategic collaboration to modernize eComms surveillance with AI-driven compliance solutions for financial institutions. The collaboration is designed to support institutions as they modernise their approach to communications monitoring, helping them implement an advanced and proactive risk management approach at scale and with co
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom