Full-text search across article titles and summaries. Refine with sector, year, content type, and reading-time filters.
This is a two-part deep-dive into supply chain security and the various aspects involved. Part 1 provides an overview of three phases of the software supply chain: source, build and deployment, and package, and discusses the risks and processes for securing each stage. Part 2 is a comprehensive analysis of 12+ SSC vendors and their core differentiators within the software development lifecycle.
Gutsy comes out of stealth with an eye-watering $51M seed round, bringing a process-centric view to cybersecurity. They are following the steps of Celonis by working with organizations to understand how their different systems are interconnected, the events that are expected, and their outcomes through process mining applied to cybersecurity.
Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management.
A website inspired by haveibeenpwned.com to check if a domain has been typosquatted. The tool scans registrars for permutations of given domains.
Cloudflare mitigated a 201 million RPS DDoS, nearly 3X of the previous record, and generated by only 20K bots. This shows the power of new attack methods as the entire web is about 1-3 billion RPS. This blog aims to highlight the growing DDoS threat for all kinds of networks and dive into the record-breaking attack.
A Secureworks study shows that ransomware dwell time - from initial access to deployment - in two-thirds of the cases analyzed had fallen to 24 hours, down from 4.5 days in 2022, and in 10%+ of cases, under 5 hours. This is consistent across variants and groups, highlighting the speed of modern attacks and how hard it is to react, as shorter dwell time doubles the overall extortion with data theft.
The UK’s Information Commissioner’s Office (ICO) has issued a preliminary enforcement notice to Snap over concerns over its My AI chatbot feature. The ICO reports that Snap did not adequately assess the privacy and data protection risks associated with its new generative AI chatbot. Snap will have the opportunity to respond to the ICO’s concerns before action is taken.
Google is launching v8CTF, a CTF focused on V8, the JavaScript engine that powers Chrome. kvmCTF is an upcoming CTF focused on Kernel-based Virtual Machine (KVM) that will be released later in the year.
Google is making passkeys the default option for personal accounts, providing a simpler and more secure way to sign into online accounts. Passkeys use fingerprints, face scans, or PINs and are 40% faster than passwords. Google is encouraging the industry to make the switch to passkeys and eventually make passwords obsolete.
Cloudflare has been working to replace traditional CAPTCHAs that involve visual or audio puzzles with its modern CAPTCHAs.
Meta has unveiled new ad options for Facebook Reels in preparation for the holiday season. They include the introduction of Collections Ads, Multi-Destination Reels Carousel Ads, and a "Swipe Left" functionality for easier product exploration in ads.
The EU issued a public warning to X for failing to address illegal content and disinformation related to the recent attacks on Israel. Disinformation is not illegal in the EU. However, the EU’s Digital Services Act puts an obligation on X to mitigate risks attached to harmful falsehoods and to act diligently on reports of illegal content.
Adobe has introduced 3 new generative AI models called Firefly Image 2, Firefly Vector, and Firefly Design. These models enhance Photoshop's text-to-image capabilities and provide powerful features for Illustrator and Adobe Express. They will enable users to easily create high-quality images, editable vector graphics, and customizable design templates.
Companies with effective loyalty programs grow their revenue 2.5X faster than their competitors. To succeed, a loyalty program must align with your business model and customer preferences. There are various types of programs, including points-based, tier-based, mission-driven, and more. This article contains examples of successful loyalty programs and tips for setting up your own.
Customer-first content is increasingly important for SEO, yet it isn’t common. Brands should make every word in their content intentional, allow users to see themselves in the story they’re telling, and design content according to the relevant thinking style of their audience. An example of a way to do this is to add a button toggle so users can choose between more or less technical content, addressing both technical and C-suite audiences.
A curation of over 60 reputable digital marketing courses and certifications by a marketing professor. It’s organized by certification or course topic and focus level. Download the PDF in order to access the hyperlinks.
This post contains 9 websites that share product psychology, the footsteps of investing gurus, collections of interesting marketing campaigns, and more. Examples include stockcircle.com, typeshare.co, and marketingexamples.com.
Mail-Tester is a free tool that analyzes your emails for spamminess based on the message, mail server, and sending IP. You send an email to its randomized email addresses and it generates a report immediately.
Brand messaging plays a big role in altering people’s perceptions regarding innovation and heritage. Based on a series of experiments, people prefer younger brands when shopping for products where innovation is important (e.g. vacuum cleaner robot) and they tend to prefer older brands when reliability is more important (e.g. car insurance).
This article explores the journey from Product Management to Product Marketing. It delves into the authors' personal experiences, the role of a PMM, skills required, transition tools used, and building a transition resume.
Growth projects are always a multi-team effort, so effective collaboration is necessary for efficient business growth. Collaborating teams need to align on 3 key pillars, including project parameters, ways of working, and communication.
Thumb-stopping ad formats to try on Meta ad creatives—zoom out transitions, eye contacts, bold statements, green screens, and reversed shots.
Sponsored
FusionAuth re-evaluates its SOC 2 vendor annually
Airbnb used to be a Ruby on Rails monolith but it migrated away due to scaling issues. In doing so, it learned four key lessons: invest in shared infrastructure early, simplify service dependencies, centralize data hydration (fetching and transformation), and separate UI logic from the backend logic. This article breaks down what Airbnb did to achieve each point and compares Airbnb’s decisions with those of other large tech companies, like Google, Uber, and DoorDash.
Tailwind CSS is a powerful CSS framework for building web applications, but it can be easy to run into code clarity issues as your application grows. To keep things organized, it’s recommended to have a design system in place and adopt a component-based architecture. Furthermore, developers should reduce the number of utility classes, group and name design tokens semantically, maintain consistent class ordering, minimize bundle size, and define predefined variants for components to prevent inconsistencies when overriding styles.
Martin Mao, the CEO of Chronosphere, details his journey from being a developer to CEO. He discusses his experiences as a software engineer at Microsoft, Amazon, and Uber. Mao also details the transition to becoming a CEO and offers insights into his experiences and strategies in the business world.
An hour of efficiency gained per day can save one month per year. This article provides tips on how to optimize your software engineering workflow. The tips include optimizing everyday tasks, making aliases and autocompletions for commands, and using tools to help remember things.
It’s important to not always be on the cutting edge of technology for the sake of it. Using proven technologies has many advantages, like reliability and support. Innovative technology should only be used when it fundamentally improves the chances of solving a specific problem.
Sponsored
Users expect CSV import to just work, but building an importer isn’t always easy. Flatfile surveyed developers
The OpenAPI Stack is a collection of open source libraries and tools for full stack software development using OpenAPI specification with an API Design First philosophy. It unlocks a great developer experience and full stack type safety for software teams using REST.
Contour is a fast virtual terminal emulator for everyday use. It’s built with C++ and available on all major platforms. Contour comes with a host of features, such as color schemes, profiles, key bindings, font styles, and more.
Developers using GitHub Copilot Chat experienced better code quality, with 85% of participants in a study reporting increased confidence in their code. Code reviews were also more efficient, taking 15% less time with GitHub Copilot Chat. The tool helped developers maintain a state of flow and enjoy coding more, with 88% of participants feeling less frustrated.
It’s a challenge to balance speed and precision in startups before they’ve reached product-market fit (PMF). Pre-PMF startups should move fast to try to gain real-world feedback as fast as possible. At the same time, they should make sure to learn from failures. Software engineers working in a pre-PMF startup can expect to wear lots of hats and do more than just write code. They will have to understand the customer and conduct minimum viable tests.
A quick overview of how Netflix services use Java.
Google Cloud stopped the largest DDoS attack ever. It used a novel technique called HTTP/2 Rapid Reset, which is based on stream multiplexing.
An overview of notification types (snack bar, toast, alerts, and modals) and the top libraries for each type. It comes with a comparison table of the performance, size, customizability, and accessibility of each library to help you find the right notification framework for your project.
Today, companies like Microsoft are selling GitHub Copilot ($10/month) at a loss. However, the costs of LLM inference will go down over time, making LLMs (and AI coding tools) cheaper, more widespread, and increasingly useful.
Sponsored
CaseMark's AI-assisted legal tools are changing the game for legal professionals. Highlights include:
GitHub Copilot costs users $10 per month, but it is costing Microsoft an average of $20 per user per month. Some users are costing the company as much as $80 per month. This is likely why Microsoft decided to charge a lot more for the AI capabilities in Microsoft 365 Copilot. The costs are also likely why the company is developing its own in-house AI chip sets for its data centers and pushing the adoption of Neural Processing Units across the industry.
Apple has a long history of releasing intriguing first-generation devices followed by second- or third-generation revisions that realize the full potential of the original idea. The company is already working on a next-generation version of its Vision Pro to address early complaints about the yet-to-be-released first-generation model. It aims to reduce the device's size and weight as it is apparently causing neck strain among some testers. The company is also considering changing the way prescription lenses are built into the headset and looking into a lower-end model.
Symbotic and Softbank have created a joint venture called GreenBox Systems that promises to deliver AI-powered logistics and warehousing to small companies. It will provide its services in facilities that different companies will share. GreenBox aims to help companies that can't afford the multi-million dollar investments required to build and operate such facilities in the same way cloud companies make high-end compute tech accessible.
This study is an attempt at developing robot parkour on a small low-cost robot with imprecise actuation and a single front-facing depth camera for perception. It shows how a single neural net policy operating directly from a camera image can overcome imprecise sensing and actuation to output highly precise control behavior end-to-end. The resulting robot is able to high jump on obstacles two times its height, long jump gaps two times its length, do handstands, run across tilted ramps, and more. A video of the robot performing different movements is available.
Sponsored
Datadog analyzed telemetry data from thousands of companies’ serverless applications for its latest research. The report found that serverless is evolving beyond FaaS
GPT Pilot is an AI-powered dev tool that writes scalable apps from scratch. It enables developers to create apps using a description of the kind of app they want to build. GPT Pilot creates apps step-by-step while asking questions for clarification or help when it gets stuck. A video demo is available in the repository.
FTX staff witnessed hundreds of millions of dollars worth of crypto being stolen in real time on November 11, 2022. The company quickly assembled a team to save the assets. It decided to contact BitGo, which had been in talks with FTX for custody of its crypto holdings, to request the immediate creation of cold storage wallets. While BitGo was creating the wallets, FTX temporarily stored its assets on an employee's personal Ledger Nano hardware wallet. The siphoning of funds stopped once the money was moved to the new wallet and the rescued crypto was eventually transferred to BitGo.
This article presents several tips to improve the ergonomics of a programming setup. It makes several product recommendations that can improve the developer experience, for example, Apple's Magic Trackpad for improved comfort and navigation and the Ergodox EZ for a keyboard where users' wrists never have to move. The article also recommends stretching during breaks and managing stress levels by disconnecting from work during non-work hours.
The auction occurred at the Petersen's 29th gala event, with tickets to the festivities costing $1750 to up to $30,000 for a premier table.
This article presents three models for implementing documentation into a product life cycle and discusses which models are best for different types of organizations.
The slowing revenue growth may be an indication that ChatGPT is nearing saturation in terms of how many mobile users are willing to pay for ChatGPT+.
This article presents a C coding style that has produced significant productive and organizational benefits.