Search the archive

SEE THE PLATFORM

NANOCHAT LETS YOU BUILD YOUR OWN HACKABLE LLM

Andrej Karpathy's nanochat is an open-source project that enables the creation of a simple ChatGPT clone for approximately $100 using 8,000 lines of minimal-dependency code and a single speedrun.sh script, producing a 1.9 billion parameter model trained on 38 billion tokens in about 4 hours on NVIDIA 8XH100 GPU hardware. The accessible codebase allows security researchers and developers to experiment with LLM architecture, understand model training processes, and test modifications without commercial platform restrictions, with scaling to $1,000 enabling significantly more capable models for math, coding, and reasoning tasks. This transparent, hackable approach provides security professionals with valuable insight into LLM internals for threat modeling, adversarial testing, and understanding AI system vulnerabilities that commercial black-box models obscure.

DOMAINSTACK

Domainstack is an all‑in‑one app for exploring domain names. Search any domain (e.g., github.com) and get instant insights, including WHOIS/RDAP lookups, DNS records, SSL certificates, HTTP headers, hosting details, geolocation, and SEO signals.

SILENTPUSH (PRODUCT LAUNCH)

Silent Push offers proactive threat intelligence, detecting and mapping malicious infrastructure pre-attack as it supplies “indicators of future compromise” via continuous internet scans. It also supports threat hunting and brand protection, and integrates with existing security tools or can operate standalone.

WINOS 4.0 HACKERS EXPAND TO JAPAN AND MALAYSIA WITH NEW MALWARE

Winos 4.0 threat actors have expanded operations from China and Taiwan to Japan and Malaysia, deploying HoldingHands RAT through phishing emails with fake Finance Ministry PDFs containing embedded malicious links hosted primarily on Tencent Cloud infrastructure. The sophisticated multi-stage attack chain uses digitally signed executables, anti-VM checks, targets Norton/Avast/Kaspersky for evasion, leverages Windows Task Scheduler for persistence, and injects payloads into taskhostw.exe with process monitoring for re-injection, while newer variants added C2 IP update capabilities via registry (HKEY_CURRENT_USER\SOFTWARE\HHClient). Security teams should monitor for suspicious PDF attachments impersonating government finance documents, block identified C2 infrastructure, including IP 156.251.17[.]9 and domain twczb[.]com, implement behavioral detection for Task Scheduler manipulation and unusual dokan2.dll/TimeBrokerClient.dll activity in System32, and trace Tencent Cloud APPID patterns to identify related phishing infrastructure.

RUSSIAN LYNK GROUP LEAKS SENSITIVE UK MOD FILES, INCLUDING INFO ON EIGHT MILITARY BASES

Russian cybercrime group Lynx breached Dodd Group, a UK Ministry of Defence contractor, on September 23, stealing approximately 4TB of data, including sensitive files on eight RAF and Royal Navy bases such as RAF Lakenheath (hosting US F-35 jets and believed nuclear weapons storage), RAF Portreath (NATO radar site), and RAF Predannack (UK Drone Hub). The leaked data includes roughly 1,000 documents containing staff names, emails, phone numbers, vehicle details, visitor logs, security guidance, and construction records marked as “Controlled” or “Official Sensitive,” with the gang publishing data after failed ransom negotiations. Security professionals should prioritize third-party risk management and contractor security assessments, as supply chain compromises continue to expose critical defense infrastructure and personnel data that nation-state actors can leverage for intelligence gathering or future attacks.

Read the case study now

XUBUNTU.ORG MIGHT BE COMPROMISED

The Xubuntu.org website's torrent download links are serving malicious ZIP files containing a suspicious Windows executable with a 2026 copyright date (despite being 2025) and no actual torrent file inside.

MICROSOFT: OCTOBER UPDATES BREAK USB INPUT IN WINDOWS RECOVERY

Microsoft's October 2025 security updates (KB5066835) break USB mouse and keyboard functionality in Windows Recovery Environment (WinRE) on Windows 11 24H2, 25H2, and Windows Server 2025.

Register to attend live (or watch the recording)

WHAT DOES THE RISE OF CREATOR-LED STOREFRONTS MEAN FOR BEAUTY?

Creator-led storefronts are changing beauty retail by combining media, commerce, and influence. Sephora and Condé Nast allow creators to curate and sell products directly, reducing friction with integrated checkout and offering competitive commissions. Brands must treat creator storefronts as both performance and cultural channels, using community-driven content to drive conversion. Today, creators serve as the “new shelf space”, connecting awareness to purchase.

SOULLESS SOCIAL

Meta's Vibes and OpenAI's Sora are flooding platforms with endless, personalized videos that risk replacing authentic creativity with algorithm-driven output. These tools deepen the attention economy by maximizing screen time while worsening issues like loneliness, burnout, and reduced critical thinking. Even with safeguards such as likeness controls in Sora, the spread of deepfakes and misleading media blur the line between reality and fabrication.

THE GUIDE TO PRICING PAGE STORYTELLING

Good pricing pages use storytelling to differentiate a company and guide customers toward decisions. Many companies make mistakes, such as focusing on product details instead of pricing philosophy, overloading pricing menus, or neglecting meaningful social proof. Fixes include leading with a clear pricing philosophy, showcasing only the most relevant features, and adding context-rich testimonials or interactive tools that clarify plan value.

THE REAL META AD MIX

Leading advertisers are balancing video and static assets to support both demand creation and conversion. Static ads are effective for urgency and personalization, while video builds awareness and intent over time. Attribution systems often misrepresent video's contribution to performance by over-crediting lower-funnel conversions. A portfolio approach that includes both asset types aligns better with long-term growth and platform diversity.

CAREER AMA WITH ALLISON STADD (WEBINAR)

Allison Stadd is the CMO of Ollie, a premium dog food company. She has scaled teams through IPOs (Shake Shack, Sweetgreen, and BarkBox), led global digital transformation for Stella Artois at Anheuser-Busch InBev, and driven marketing and creative transformation for Shipt at Target. In this AMA, she will answer curated and audience questions live. The free webinar takes place on October 29 at 9 am PT.

HOW TO USE THE USER ID FEATURE IN GOOGLE ANALYTICS

The User ID feature in GA4 lets you track individual users across sessions and devices by linking an internal identifier from your CRM or database, but it requires a login system. To implement it correctly, assign each user a unique, consistent, non-personal ID, send it only after login, and reset it to null on logout. Avoid empty or invalid values, ensure user consent, and don't use User ID as a custom dimension to prevent data issues. When configured with the correct reporting identity, GA4 can retroactively connect pre-login events and enable more accurate tracking and segmentation.

WHY THE ONION BRAND IS ‘MADE FOR RIGHT NOW'

The Onion is evolving its brand while maintaining its reputation for sharp, timely satire. It's still pursuing the purchase of InfoWars after a judge blocked its winning bid, viewing the deal as part of a strategy to expand into unexpected spaces. The publication has also launched its own marketing agency, America's Finest Creative Agency, which attracts clients aligned with its irreverent style rather than major corporations. It continues to resist using AI in its editorial work but applies it to business operations to improve campaign efficiency.

SAM'S CLUB SHOWS HOW IN-STORE RETAIL MEDIA SHOULD REALLY WORK

Sam's Club turned in-store retail media into a scalable system by uniting technology, data, and operations. Its Member Access Platform connects events, in-club displays, and digital tools through closed-loop measurement that tracks member behavior to purchase. Activations like “Race to the Club” and Scan & Go ads prove how physical spaces drive sales and engagement.

BEYOND THE #AD: HOW BRANDS ARE MAKING INFLUENCER MARKETING FEEL REAL AGAIN

Influencer marketing is growing as brands focus on authenticity and smaller creator partnerships. Audiences trust content that feels genuine, with nano- and micro-influencers achieving higher TikTok engagement (10.3% and 8.7%) than larger accounts. Product seeding remains effective, with 92% of marketers saying it boosts awareness and 76% reporting it drives sales. Brands also expand influence into real-world communities through events and collaborations, building loyalty and organic engagement.

INSTAGRAM'S UPDATED UI IS COMING

The platform is rolling out a redesigned layout that centers high-usage features like Reels and messaging.

BRANDS EMBRACE HALLOWEEN HIJINKS FOR SPOOKY SEASON 2025

Recent Halloween campaigns from Heinz, Six Flags, and Cutwater.

Register now ↗️

IS AI ADOPTION SLOWING DOWN?

AI adoption is slowing, but product stickiness is rising. As social media becomes a last-resort business model and job seekers resist AI résumé filters, it's clear that lasting growth still depends on human judgment.

IN THE AIR

This year's Coalesce felt like the end of an era, with the venture capitalists - and the raw sense of possibility they embodied - now gone. The data world has matured into stability, leaving its pioneers to choose between the rush of invention and the calm of permanence.

MOMENTUM IS THE ONLY MOAT

Real moats like brand, network effects, and scale only form once a startup gains traction, so in the early days, momentum isn't the moat - it's the engine that builds one.

HOW TO BE LEGITIMATE

Legitimacy in tech has evolved from user groups and magazine reviews to venture capital and AI credentials. Despite new tools, true success still depends on earning trust and demonstrating genuine expertise - not just chasing trends.

4 STEPS TO BUILDING A PRODUCT STRATEGY

This post outlines a four-step approach to building product strategy: gather inputs, craft strategic narratives, find leverage, and make focused choices. Strategy isn't neat or formulaic - it's an ongoing, messy process driven by learning, conviction, and disciplined focus.

THE ONE-DAY PRODUCT LOOP

Grant Lee's team at Gamma prototypes, tests, and refines ideas within a single day using AI tools and real user feedback. It's a model of instant learning and iteration that shows how fast, data-driven product development is becoming the new standard.

THE FEASIBILITY FALLACY: WHY TEAMS STILL TRIP OVER TECHNICAL FEASIBILITY

Technical feasibility is the hidden backbone of great product teams. When treated as a guide instead of a hurdle, it keeps ambition honest, reduces rework, and turns speed into sustainable progress.

5 TIPS TO SUCCEED WITH STAKEHOLDER MANAGEMENT

Prioritize key players, build trust, align on shared outcomes, involve stakeholders early, and manage conflict constructively. Done well, these practices turn stakeholder alignment into a lasting advantage for great product leadership.

CRAFT IS SCARCE

AI makes it easy to build fast, but true value now lies in the 20% of craft that turns rapid output into thoughtful, user-centered design.

ADVANCED TIME MANAGEMENT PRINCIPLES

Many product leaders avoid strategic thinking out of fear or “placebo productivity.”

Download the report to learn how memory is reshaping AI →

HOW SAM ALTMAN PLAYED HOLLYWOOD

OpenAI made a series of calculated moves when it released Sora. The app initially had an opt-out clause for people's likenesses to be used in clips. This caused a flood of clips using copyrighted material to be created. The company then quickly pivoted to an opt-in model. This could cause legal trouble for OpenAI in the near future.

THE LITTLE-KNOWN CRYPTO POWERHOUSE BEHIND BILLIONS IN TRADING

Hyperliquid is a decentralized exchange with an automated trading pool and token buybacks. It is a booming platform for perpetual futures, the never-expiring contracts that dominate crypto speculation. Run by a team of roughly 15 people based in Singapore, the site's front end blocks US users, but anyone can trade on the blockchain that powers it. Hyperliquid was designed with transparency in mind - every trade, liquidation, and validator action is verifiable in real time, and Hyperliquid never takes custody of user funds. Much more about the two-year-old exchange is available in the article.

WHY THE NEXT GENERATION OF MRNA VACCINES IS SET TO BE EVEN BETTER

mRNA vaccines that code for virus-like nanoparticles produce a strong immune response while still being quick and cheap to make. Scientists at the University of Washington have shown that an mRNA version of a COVID-19 nanoparticle vaccine produces an immune response in mice that is up to 28 times higher than that of a standard mRNA vaccine. The more potent vaccine could lower side effects as patients receive lower doses. Scientists are already working on mRNA-launched nanoparticle vaccines for the flu, Epstein-Barr, and other viruses.

THE FIRST NON-OPIOID PAINKILLER

Post-operative pain relief has relied on opioids since ancient times. The FDA approved the first non-opioid pain reliever suitable for treating post-surgery pain in January. Vertex Pharmaceuticals' Journavx has known of the signs of the problematic side effects associated with opioids. While the drug likely won't serve as an outright opioid replacement, it is the first step on the journey to minimizing opioid usage.

levels. Download your copy

KNOWLEDGE CREATES TECHNICAL DEBT

Technical debt is essentially a pile of knowledge. Everything 'bad' about the code represents what has been learned about how to do software better. Fixing that code isn't a 'debt to pay off', but an investment opportunity that will reap rewards. Skipping the opportunity to fix code is wasting the investment previously made in learning, and this could lead to a loss in revenue as competitors make the most of their knowledge.

OPEN SOURCE IS THE MOST FRAGILE AND MOST RESILIENT ECOSYSTEM

Open source powers the internet. If it stopped being maintained by benevolent people, things would break. Companies fail, but open source is immortal. Open source will never fail to adapt to new markets because someone will force it to adapt either by contributing to it or forking it. Open source's fragility demands collective action to ensure its resilience.

HOW TO SEQUENCE YOUR DNA FOR <$2K

The first human genome took $2.3 billion and 13 years to sequence. It now takes an Oxford Nanopore to sequence whatever DNA you want in less than 48 hours. The machine uses electrical nanopores to read the individual charge of each DNA base pair. It costs $1,000, making it possible to sequence your own DNA at home for around $1,100. Using the machine can help people avoid giving their DNA to companies and risking it being lost in a data breach.

RESEARCH RESULTS ARE CULTURAL ARTIFACTS, NOT PUBLIC GOODS

Knowledge and scientific progress are very much private goods. It's all about specific people and how they think. Cultural artifacts can and will spread, but there's nothing free about it, and it won't spread equally everywhere. The view that scientific research is a public good is a naive and indefensible view.

Subscribe now.