Botnets have been silently mass-scanning the internet for unsecured ENV files

microsoft-defender-atp-now-scans-windows-5eef8de69c89f47042ec66fd-1-jun-23-2020-12-00-14-poster.jpg

Drawing little attention to themselves, multiple threat actors have spent the past two-three years mass-scanning the internet for ENV files that have been accidentally uploaded and left exposed on web servers.

ENV files, or environment files, are a type of configuration files that are usually used by development tools.

Frameworks like Docker, Node.js, Symfony, and Django use ENV files to store environment variables, such as API tokens, passwords, and database logins.

Due to the nature of the data they hold, ENV files should always be stored in protected folders.

“I’d imagine a botnet is scanning for these files to find API tokens that will allow the attacker to interact with databases like Firebase, or AWS instances, etc.,” Daniel Bunce, Principal Security Analyst for SecurityJoes, told ZDNet.

“If an attacker is able to get access to private API keys, they can abuse the software,” Bunce added.

More than

Read More

C3.ai, machine learning startup backed by software pioneer Tom Siebel, files for IPO

image.jpg

Tom Siebel, an early employee of database giant Oracle, later a billionaire after selling his eponymous software firm to Oracle, says his new venture, C3, is bigger than either of those.  

C3.ai, the artificial intelligence services company founded by software pioneer Tom Siebel, Friday evening filed for an initial public offering of $100 million worth of its shares, led by investment banks Morgan Stanley, JP Morgan, and Bank of America.

C3 plans to list under the ticker “AI” on The New York Stock Exchange. The number of shares to be offered and the price range for the proposed offering have not yet been determined, C3 said.

Siebel, who was recruited to database giant Oracle in 1983, later founded the eponymous enterprise customer relationship management software firm in 1993. He sold that company to Oracle in 2006 for $5.85 billion, and went on to found C3 in 2009. 

C3 came out

Read More

Chinese video-sharing app Kuaishou files for IPO as new leaders emerge in the industry

  • Short-video and livestreaming app Kuaishou filed for an initial public offering on the Hong Kong Stock Exchange on late Thursday.
  • Analysts say the video apps at the forefront of popularity among Chinese consumers are: ByteDance’s Douyin, the Chinese version of the popular short-video sharing app TikTok, as well as Kuaishou and Bilibili — both backed by Tencent.
  • Average daily active users for Bilibili soared 55% over the 12 months through October, the fastest among 11 major app and social media platforms, according to CNBC analysis of data from app developer services company Aurora Mobile.



a person standing in front of a computer: Sales associates at one of Alibaba-owned InTime's store display products for sale during a livestream.


© Provided by CNBC
Sales associates at one of Alibaba-owned InTime’s store display products for sale during a livestream.

BEIJING – The fickle Chinese consumer has latched onto a set of new preferences for watching videos, a trend investors and media giants are tapping into.

Loading...

Load Error

Late on Thursday, short-video and livestreaming app Kuaishou filed

Read More

ByteDance Rival Kuaishou Technology Files for Hong Kong IPO

(Bloomberg) — Chinese video-sharing startup Kuaishou Technology filed an application for a Hong Kong initial public offering, raising hopes that the city will continue to see a wave of listings from fast-growing internet companies.



Beijing Kwai Technology Co.'s app Kuaishou, or Kwai, is arranged for a photograph on a smartphone in Hong Kong, China, on Tuesday, Jan. 16, 2018. Tencent-backed Chinese startup Kuaishou is seeking to raise funds at about a $17 billion valuation, people familiar with the matter said, as it expands its video-streaming service to Southeast Asia.


© Bloomberg
Beijing Kwai Technology Co.’s app Kuaishou, or Kwai, is arranged for a photograph on a smartphone in Hong Kong, China, on Tuesday, Jan. 16, 2018. Tencent-backed Chinese startup Kuaishou is seeking to raise funds at about a $17 billion valuation, people familiar with the matter said, as it expands its video-streaming service to Southeast Asia.

Morgan Stanley, Bank of America Corp. and China Renaissance Holdings Ltd. are joint sponsors of the proposed IPO, according to pre-listing documents posted on the Hong Kong stock exchange’s website Thursday. While the filing didn’t provide a fundraising target, people familiar with the matter said in September that the potential share sale could raise as much as $5 billion.

Read More

How to sync files and folders to OneDrive on a PC or Mac computer



a person sitting at a table using a laptop computer: OneDrive lets you sync your files between your Mac or PC and the cloud. skynesher/Getty Images


© Provided by Business Insider
OneDrive lets you sync your files between your Mac or PC and the cloud. skynesher/Getty Images

  • When you set up OneDrive, it’s automatically configured to sync all your files, including documents and photos, to the cloud. 
  • If you don’t want to sync everything, you can sync specific files and folders to OneDrive on your computer under “Preferences” in OneDrive’s “Help & Settings” menu.
  • OneDrive is Microsoft’s cloud storage service that makes your files available across devices through either a public internet or a private network connection.
  • Visit Business Insider’s Tech Reference library for more stories.

Using Microsoft OneDrive, you can keep personal files stored on your computer in sync with the cloud. Those same files are then synced automatically and available on other devices. Doing this is an easy way to ensure your desktop and laptop always have access to the same set of documents,

Read More

Could-based SaaS provider Absolute Software files for a $65 million IPO

Absolute Software, which provides organizations with a SaaS cloud-based management and security platform for computing devices, applications, and data, filed on Monday with the SEC to raise up to $65 million in an initial public offering.

Enabling a permanent digital tether between the endpoint and the organization that distributed it, Absolute Software provides IT and security personnel with connectivity, visibility, and control, whether a device is on or off the corporate network, and empower them with Self-Healing Endpoint® security to ensure mission critical applications remain healthy and deliver intended value. The company’s technology is embedded in over a half-billion devices and currently serves more than 13,000 commercial customers with over 10.8 million activated licenses globally.

The Vancouver, Canada-based company was founded in 1993 and booked $105 million in sales for the 12 months ended June 30, 2020. It plans to list on the Nasdaq under the symbol ABST. Needham

Read More

SaaS provider Absolute Software files for a $65 million US IPO

Absolute Software, which provides organizations with a SaaS cloud-based management and security platform for computing devices, applications, and data, filed on Monday with the SEC to raise up to $65 million in an initial public offering.

Enabling a permanent digital tether between the endpoint and the organization that distributed it, Absolute Software provides IT and security personnel with connectivity, visibility, and control, whether a device is on or off the corporate network, and empower them with Self-Healing Endpoint® security to ensure mission critical applications remain healthy and deliver intended value. The company’s technology is embedded in over a half-billion devices and currently serves more than 13,000 commercial customers with over 10.8 million activated licenses globally.

The Vancouver, Canada-based company was founded in 1993 and booked $105 million in sales for the 12 months ended June 30, 2020. It plans to list on the Nasdaq under the symbol ABST. Needham

Read More

uAvionix Files FAA TSO Application for World’s First Certified Drone Transponder

Today, uAvionix Corporation announced it has filed a Technical Standard Order (TSO) application with the FAA Aircraft Certification Office (ACO) for its flagship Mode S ADS-B OUT transponder for Unmanned Aircraft Systems (UAS). The ping200X follows a line of groundbreaking, low Size, Weight, and Power (SWaP) avionics developed and certified by uAvionix for UAS and General Aviation aircraft. Approval is expected in Q4 2020.

This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20201020005446/en/

uAvionix has filed its TSO application for the 50 gram ping200X Mode S ADS-B transponder. The company aims to deliver the first certified Mode S transponder designed exclusively to meet the needs of unmanned aircraft.

Weighing only 50 grams, the Level 2els Class 1 transponder packs a punch, delivering 250W of transmit power while only drawing an average of 1.5W, making its profile small enough to be fitted onto Group 1 and 2 UAS.

ping200X

Read More

Trump Compares Files on Hunter Biden’s Computer to Anthony Weiner Scandal

At a campaign event in Macon, Georgia on Friday, President Donald Trump compared files allegedly found on Hunter Biden’s laptop with explicit pictures discovered on former Congressman Anthony Weiner’s computer by the FBI.



Donald Trump wearing a suit and tie talking on a cell phone: President Donald Trump said Friday that files allegedly found on Hunter Biden's personal laptop could be worse than those discovered on the laptop of former Congressman Anthony Weiner.


© Joe Raedle/Getty
President Donald Trump said Friday that files allegedly found on Hunter Biden’s personal laptop could be worse than those discovered on the laptop of former Congressman Anthony Weiner.

Files on a laptop with a Biden Foundation sticker on it, which allegedly connected Democratic presidential candidate Joe Biden to shady business dealings in Ukraine, were reported on by the New York Post on Wednesday. While Trump has brought up the allegations during public remarks in the following days, some observers have criticized the story for using uncorroborated sources. Weiner pleaded guilty in 2017 to sending obscene material to a minor and was sentenced to 21 months in prison.

Who Is Hunter Biden? Trump Continues Attacks

Read More