Full-text search across article titles and summaries. Refine with sector, year, content type, and reading-time filters.
Researchers from ANY.RUN identified a new phishing campaign using SVG attachments as lures, dubbed the Typical phishing kit or Tykit. The malicious SVG distracts users while embedded JavaScript redirects the victim to a “trampoline” page, which then leads to a phishing site mimicking the Microsoft 365 login page. ANY.RUN believes this campaign is operated by a Phishing-as-a-Service (PhaaS) operator.
Trail of Bits discovered argument injection vulnerabilities across three popular AI agent platforms that allow attackers to bypass human approval safeguards and achieve remote code execution. The flaw exploits pre-approved “safe commands” such as git, find, and ripgrep through malicious flag combinations (e.g., git show --format to write files, fd -x=python3 for execution, or go test -exec to run arbitrary code). These one-shot prompt-injections can be embedded in code comments, GitHub repositories, or logs. Researchers note that maintaining allowlists of “safe commands” without sandboxing is fundamentally insecure, as flag filtering is impractical. Security teams should use container-based sandboxing, use argument separators (--), drastically reduce allowlists, and audit against GTFOBINS/LOLBINS for potential abuse.
British Airways offers free “messaging” WiFi to frequent flyer members, limited to whitelisted messaging app domains via SNI (Server Name Indication) filtering in TLS handshakes. By simulating traffic to approved domains, researchers found they could tunnel general web activity through the free tier. The method relies on customizing TLS connections and proxying traffic, demonstrating how SNI leaks destination domains even when content is encrypted and how service restrictions can be bypassed with technical knowledge.
Many organizations overlook mobile security, leaving them exposed as employees transmit attacks from personal devices. Smishing has become more effective than email phishing, with up to half of users failing simulated tests. Despite the availability of strong mobile defenses, most organizations fail to adopt them, leading to increased breach risk, downtime, and regulatory consequences.
Sponsored
Uncontrolled data equals uncontrolled risk. BENlabs deployed Onna to protect against litigation costs and infosec vulnerabilities hiding in Slack. The result: proactive discovery, predictable costs, and stronger compliance. Onna gives teams the confidence to scale without fear of legal or security fallout.
Imhex is a modern, high-performance hex editor for reverse engineers and programmers. It features a visually optimized interface, data pattern analysis, and powerful scripting capabilities.
Gravwell is an enterprise analytics and security platform that helps teams centralize logs, accelerate threat hunting, and analyze data from both IT and OT environments.
Wiz has open-sourced HoneyBee, an automation framework that rapidly deploys realistic honeypots by generating intentionally misconfigured Dockerfiles and Docker Compose manifests for popular cloud apps. Each honeypot can include AI-generated misconfigurations, Nuclei validation templates, and optional tcpdump monitoring. Using HoneyBee, Wiz researchers discovered cryptomining campaigns targeting exposed Java Debug Wire Protocol (JDWP) and PostgreSQL, capturing complete attack chains, from XMRig deployment to fileless persistence within hours. Honeybee supports three key use cases: validating detection rules safely, orchestrating honeypot networks with SIEM/CSPM integration, and creating hands-on training environments that mirror real-world misconfigurations
Chinese organized crime groups have generated over $1 billion in just three years through a large-scale SMS scam operation targeting Americans with fake toll, postage, and government refund messages. The campaign has surged 350% since January 2024, with a record 330,000 scam texts reported in a single day. The operation uses US-based SIM farms to send messages, steals credit card data, and bypasses MFA by adding stolen cards to mobile wallets (which banks often trust after first use). The groups also employ 400-500 gig workers and money mules recruited via Telegram to buy and resell high-value goods and gift cards for laundering. Security teams should educate users to avoid unsolicited payment messages, verify messages through official channels, tighten device trust policies for mobile wallets, monitor gift card purchases, and deploy anti-malware solutions with web protection and scam detection capabilities.
Datadog's 2025 State of Cloud Security report shows progress alongside persistent gaps across AWS, Azure, and Google Cloud. IMDSv2 enforcement has increased to 49% of EC2 instances, and federated authentication adoption now covers 79% of organizations. However, 59% of AWS IAM users still have access keys older than one year, and nearly one in five EC2 instances remain overprivileged. While data perimeter adoption and public access blocking have improved, insecure defaults and lingering legacy practices continue to expose organizations to risk.
Jaguar Land Rover suffered one of the most expensive cyberattacks in UK history, disrupting production for weeks and affecting over 5,000 organizations. The attack is estimated to have cost at least £1.9 billion in damages and triggered significant supply chain and operational fallout. Government agencies intervened to assist in recovery, but full restoration of systems remains ongoing.
Sponsored
Discover how attackers “call home” through your outbound traffic—and how you can stop them before they do real damage. Read
The bipartisan Foreign Robocall Elimination Act has passed the Senate Commerce Committee, establishing an FCC-led task force to investigate overseas robocalling operations, recommend countermeasures, and evaluate the effectiveness of STIR/SHAKEN caller authentication protocols.
The Shadowserver Foundation has identified over 266,000 internet-exposed F5 BIG-IP instances, nearly half located in the United States.
Trust is a key factor that influences how consumers consider and spend on brands, ranking second only to price. New research found that 59% of consumers say trust is vital in persuading them to consider a product or service, and 92% will take action if they trust a brand, with 74% willing to spend more. Losing trust has major consequences, as 60% of consumers who stopped using a brand did so due to a lack of trust. Reliability is the strongest pillar of trust (35%), followed by Reciprocity (19%) and Aligned Interests (14%).
Publishers are reviving specialist magazines that build strong reader communities and reflect public interests. Hearst, for example, has shifted from subscriptions to a membership model, creating forums and perks that foster belonging and real engagement. This sense of community distinguishes a brand from a product and strengthens advertising potential. The industry is becoming smarter at responding to active communities, embracing one-shots, bookazines, and niche fandoms to reach highly engaged audiences.
AirOps has turned webinars into its top growth channel by focusing on education, not product pitches. Each session features experts sharing real tactics on SEO and AI search, delivering substance instead of sales. The team repurposes every webinar into dozens of content pieces shared across multiple channels. This approach has shortened enterprise sales cycles from months to weeks. By teaching openly and offering value first, AirOps positions itself as a credible guide.
Free user churn in SaaS often starts long before conversion decisions. This five-step audit framework involves analyzing user data for drop-offs, interviewing both active and churned users, mapping competitor offerings, scoring product actions by friction level, and connecting these insights to find and fix friction points. This process reveals where users lose interest, which features fail to drive value, and where gates or limits appear too early. When done correctly, it helps create data-driven retention strategies that boost activation, engagement, and long-term conversions.
Wynter created a dedicated page for AI agents to scrape accurate information about its product. The page should be simple, factual, and crawlable, outlining what the product does, who it serves, key features, and pricing. Including a short “how to reference us” section further guides AI summaries.
As buyers use AI to research, compare, and decide before speaking with sales, marketing teams must adapt strategies, KPIs, and structures. This session will discuss faster buyer behavior, the merging of marketing and sales, and how “AI-readiness” is becoming central to GTM strategy. It's free to register and will take place on October 30 at 10 AM PDT.
Tally.so is a no-code form builder that functions like writing a document. Questions and blocks can be added for text, files, payments, or signatures. It supports forms, surveys, quizzes, and checkout pages. Compared to Google Forms, Tally offers greater design control, conditional logic, and integrations. It also allows unlimited forms and responses, even on the free plan.
Evidence shows that social cues like ‘likes' influence user behavior in advertising. The first like enhances both credibility and engagement, while subsequent likes mainly reinforce social conformity. Platforms that display like counts in ads may see varying impacts based on campaign type. In click-driven campaigns, excessive like counts may reduce informational influence. In brand awareness efforts, larger like totals may support perceived popularity.
Most pricing models have limitations, but a full overhaul is usually unnecessary. Flat-rate pricing restricts expansion, seat-based models lose effectiveness in leaner, AI-driven teams, and usage-based pricing introduces forecasting challenges. Hybrid approaches can offer flexibility but often add complexity for both buyers and internal teams. Many companies address these issues by layering in premium tiers, usage thresholds, admin controls, and aligning incentives with realized usage. In enterprise settings, usage-based expansion can be successfully added to core pricing to increase wallet share.
LinkedIn uses a hidden Social Selling Index score to evaluate user activity, which may influence how widely content is seen on the platform.
Analysis of billions of search interactions shows that user attention is overwhelmingly concentrated in the first 10 Google results.
A speaker sheet template that books gigs.
Sponsored
OpenAI's Atlas browser is now available for macOS. The browser has all the features users expect from a browser and also lets users chat with an assistant about web pages, browsing history, and bookmarks. Windows and mobile versions will be rolled out soon. Atlas has an Agent Mode that can complete tasks for users, but it is only available to ChatGPT Plus and Pro subscribers while still in 'preview mode'.
Amazon plans to replace more than half a million jobs with robots by 2033. The company's automation team estimates that Amazon can avoid hiring more than 160,000 people in the US it would otherwise need by 2027, saving the company 30 cents on each item that it delivers to customers. Amazon is so sure of this automated future that it has started developing plans to mitigate the fallout in communities that may lose jobs. The company's plans could have a profound impact on blue-collar jobs and serve as a model for other companies.
Muon Space is integrating Starlink's laser technology into its own satellites to provide them with an optical fiber-like connection to the Starlink constellation. SpaceX's mini laser terminals can support a 25Gbps connection between two satellites at a range of up to 4,000 kilometers. Muon Space plans to launch the first Starlink-enabled Halo satellite in Q1 2027. The company supplies weather and climate-monitoring satellite systems to third-party clients, including the US Space Force. Starlink's laser technology will transform Muon Halo satellites from isolated vehicles to real-time nodes on Starlink's global network.
Amazon got started with robots in 2012 when it bought the robot maker Kiva, which made circular robots that could lift a stack of goods and take it to a worker. Since then, the company has categorized all of its operations into six types of automation: movement, manipulation, sorting, storage, identification, and packing. Amazon has developed robots that tackle particular changes like moving heavy carts, sorting packed orders, and manipulating items and packages. Employees only touch products at a few stages at Amazon's most advanced warehouse. This article takes a look at the state of Amazon's automation activities and what the future holds for the company and its technology.
Sponsored
Successful AI transformation starts with deeply understanding your organization's most critical use cases. We recommend this practical guide from You.com [9] that walks through a proven framework to identify, prioritize, and document high-value AI opportunities. Learn more with this _AI Use Case Discovery Guide_ [9].
This post walks readers through how to build a key-value database from the ground up. Key-value databases work similarly to objects in JavaScript - you store values using a key and retrieve them later using that same key. The post covers everything required to build a Log-Structured Merge (LSM) Tree, a type of database used in the real world that works by combining an in-memory list with an on-disk file. LSM trees have proven to perform really well at scale - on Prime Day 2020, DynamoDB peaked at 80 million requests per second.
Next.js features improvements to Turbopack, caching, and the Next.js architecture. Cache Components are a new set of features designed to make caching in Next.js more explicit and flexible. The Next.js DevTools MCP provides agents with Next.js knowledge, unified logs, automatic error access, and page awareness. More details about what's new in Next.js are available in the article.
Samsung's Galaxy XR brings an experience comparable to Apple Vision Pro, but with a $1,799 price tag, giving users much more bang for their buck. The headset launches in the US and Korea today. It is significantly lighter than the Vision Pro, and it also comes with a native Netflix app. Samsung and Google are offering an 'explorer pack' with each headset that includes a free year of Google AI Pro, Google Play Pass, and YouTube Premium, YouTube TV for $1 a month for three months, and a free season of NBA League Pass.
The AI boom has revived a 996 culture (working from 9 AM to 9 PM, six days a week). The increase in work may be due to hyper-capable tools creating a new kind of pressure to keep working. The challenge of the AI era is learning to live with these tools in a healthy way that doesn't allow them to enslave us, and knowing when and how to use them in a way that doesn't diminish our efforts. AI doesn't demand work - people and systems do.
Sponsored
Basecamp is refreshingly straightforward, with a 21-year track record that proves it actually works. Get every core feature in the
GitHub is migrating to use git reftables instead of packed-refs so that multi-ref updates/restacking will be O(n).
OpenAI has formed a new team of over 100 former investment bankers to create financial models to train AI.
Once the bad guys have your data, it often replicates to numerous channels and platforms - if you can aggregate enough of the data en masse, you can end up with huge volumes of threat intelligence data.
Sponsored
Launch payments experiences without choosing between innovation and
Many software engineers have seen no evidence of long-term boosts to efficiency.
SSA (static single assignment), developed in the 80s, is a popular architecture featured in many optimizing compilers.
The breakout financial products of the past decade are highly engineered lotteries - small, low probability bets with asymmetric upside.
Sponsored