Monday, April 1, 2024

XZ Utils backdoor insertion Vulnerability CVE-2024-3094

 

 


Red Hat Linux released advisory on CVE-2024-3094, rated as critical with a CVSS score of 10. This vulnerability is a result of a supply chain compromise impacting the latest versions of XZ tools and libraries.

XZ is a form of lossless data compression found on Unix-like operating systems, frequently compared to other popular compression formats like gzip and bzip2. XZ Utils, a command line utility, encompasses features for both compressing and decompressing XZ files.

A backdoor has been identified in XZ Utils versions 5.6.0 and 5.6.1 which under some condition may allow malicious attacker to perform SSH authentication bypass in specific versions of certain Linux distributions. It was identified by security researcher when investigating failing ssh logins resulting high CPU loads. Currently Microsoft has disabled the malicious XZ Utils repository maintained by the Tukaani Project "due to a violation of GitHub's terms of service." and there are currently no reports of active exploitation in the wild.

It is highly recommended to review and currently downgrade to XZ Utils version earlier than 5.6.0


Thursday, February 8, 2024

IT Disaster Recovery as a Service

 


Doxis News: AI is at the heart of everything!

 


We’re back with the latest Doxis news, packed with exciting AI innovations and loads of other cool enhancements to the Doxis platform, clients and solutions. In this article, we’ll dive into some of the latest release highlights you don’t want to miss:

Meet Doxi, our adorable and super smart AI assistant who helps users and administrators to work faster and more efficiently.
Calling all citizen developers! Our new Fast Starters are guaranteed to excite you. Find out more below.
HR and Finance folks, we have something for you, too: Learn about cool new features in Doxis Human Resources and Doxis Intelligent Invoice Automation for SAP.
Have you met our AI assistant, Doxi?
Doxi is your practical AI assistant who helps you with a wide range of tasks. With their help, you can make daily worker faster and easier, e.g., quickly gain an overview of the content of extensive contracts, even those in foreign languages! Or, you can automate time-consuming routine tasks such as indexing and filing documents.

Doxi delivers huge benefits for everyone across your organization:

Users can ask Doxi to summarize documents, saving them time so that they don’t have to read them all themselves.
Doxi helps clerks to process transactions. It provides helpful information and triggers workflows for further work steps.
In Doxis Business Studio, Doxi relieves business admins of time-consuming configuration tasks, such as creating dialogs and folder structures.
“Hello, I’m Doxi, ask me anything!”
Doxi – your Intelligent Content Assistant – is always up for a chat. If you work with Microsoft Word documents, PowerPoint presentations, Outlook emails and PDF documents, Doxi is always on hand to offer its services. Simply ask what you want to know about your document, e.g. “What is it about?” and you’ll get a summary. You might speak English, but have a document in Spanish and would like a summary in French for your team in Paris? No problem! Doxi understands you and your documents in over 50 languages and can switch back and forth between them at will.


This is how Doxi helps you when working with documents:

  • Doxi chats with you about documents, presentations and emails, identifying important information and extracting it for further processing, e.g. contract data.
  • Doxi summarizes the content of documents, covering 50 languages.
  • Doxi is interconnected with the Doxis system, recognizes the context in which you are working and can suggest, create and search for suitable processes, files or documents.
  • Doxi determines where local documents should be stored in Doxis and suggests meaningful metadata for storage.

Attention citizen developers: Your new AI assistant is ready

AI not only gives Doxi its analytical capabilities, but Doxi can also be utilized in the Doxis Business Studio, the no-code development environment for citizen developers. It’s never been easier to create new dialog and file structures or global value lists than it is now with the AI-based configuration assistant. The AI assistant integrated in Doxis Business Studio takes a lot of work off specialist administrators and citizen developers. Simply formulate your requirements in natural language and Doxi will understand you. It automatically generates lists, fields, dialogs, etc. Plus, you can always check them yourself afterwards and edit them if necessary.


Good news for Fast Starter fans

Doxis Business Studio is constantly growing. In the integrated Fast Starter library, you’ll find four new workspaces that you can install and use immediately. The ready-to-use ECM apps have already gained a large fan base since their introduction at the beginning of 2023. More than 20 Fast Starters are currently available in the Fast Starter library and the number is constantly growing. The newly added workspaces are:

  • Balancing Workspace: An accounting app to speed up the annual financial statement process
  • Equipment Workspace: Supports manufacturing companies in meeting the high requirements for documentation and quality assurance
  • Product Workspace: Ideal contact point for all employees who need product information – from maintenance technicians to marketing staff
  • Quotation Workspace: An important tool for sales staff when compiling quotation documents

Invoice management in SAP & SAP Fiori becomes more international

Doxis Intelligent Invoice Automation for SAP automates invoice processing in SAP and S/4HANA. The solution, which is fully embedded in SAP, offers direct access to all invoice, order and goods receipt data. With version 12.1, invoice validation is now also available for SAP Fiori. Furthermore, the user interfaces for SAP GUI and SAP Fiori are now available in five additional languages. In addition to German and English, there are now also localizations in Arabic, French, Polish, Portuguese and Spanish.

Good news for HR employees

HR employees who are responsible for personnel management in several countries know how time-consuming it is to maintain and apply the respective national retention periods for personnel documents. The latest release of the Doxis Human Resources (HR) business solution makes it much easier to maintain retention rules for international use.

Retention rules are simply assigned to the document types for each country and automatically applied on the day the contract ends. In addition, the solution now also includes a file for job advertisements, integrated with applicant management, as a central point of contact for recruiting.

What’s next!

In 2023, we took you on a journey through many innovations, enhancements and new solutions for all areas of Doxis Content Intelligent Automation: At the beginning of the year, it was all about accelerating your digital journey, followed by a focus on secure and efficient collaboration and exciting insights into our AI initiatives.

“AI is at the heart of everything!” is a fitting start to an exciting year for our customers.  And we will continue to introduce even more innovations, enhancements and updates in 2024! Our roadmap promises a wide range of topics and smart innovations – stay tuned to this space!