Binarly, provider of an industry-leading, AI-powered firmware and software supply chain security platform, has developed and released a free scanning tool to help defenders detect signs of the dangerous XZ Backdoor (CVE-2024-3094).
The detection tool XZ.fail was released less than 24 hours after the discovery of a backdoor in the open source software XZ Utils that enables lossless data compression on virtually all Unix-like operating systems, including Linux. (See CISA Advisory).