Full-text search across article titles and summaries. Refine with sector, year, content type, and reading-time filters.
Back in July, and without fanfare, Adobe implemented a significant change in how the Creative Cloud Adobe Fonts service works. A new category of fonts called “Added Fonts” appeared in the Creative Cloud desktop app and Adobe Fonts website. Added Fonts are only available for use in Adobe apps, to use them elsewhere they need to be “installed” which can only be done online.
Time zone selectors are tricky to design. They involve many time zones and mysterious abbreviations — UTC, GMT, DST, CET — that are not intuitive. Designers must consider all time zones, help users think in their local time, show current times in locations, and detect users' time. This article includes a complete list of time zones, a UX checklist, and valuable resources.
Most Americans think artificial intelligence will negatively affect the U.S. job market, with 75% saying it will decrease the total number of jobs over the next 10 years.
Between RTO, AI, and all the layoffs in tech, it feels like power in the workplace has shifted away from the employees and back to employers.
This is a big shift for SoftBank, who in recent years has been moving towards doing smaller and more selective deals.
Whether you’re a founder doing sales or a sales rep, it seems we’ve collectively gotten a little bit slower at promptly responding to customers, follow-ups, and inbound interest. The best way to keep someone engaged is to not keep them waiting.
Growing 40% YoY between 2022 and 2023 and cash flow positive, Samsara is back to growth. There are several stats in this article, but perhaps the standout is how Samsara compensated its sales team on net new revenue, rather than new logos, allowing them to upsell into their existing user base or seek out new business.
Jumping directly into a new job or a startup idea straight after another is a bit like dating immediately after a breakup. You don’t want to fall into the “rebound” idea or job. Taking time off requires planning your finances and setting self-expectations.
The rosy macroeconomic conditions of the 2010s have certainly come to an end. The relationship between fixed interchange fees, which often form the staple of fintech revenue, and unfixed increasing interest rates is putting pressure on newly minted technology companies.
The startup ecosystem has experienced a tumultuous period, with the transition from a hyper-growth market to one that rewards a different style of operation. While overall valuations in the seed stage have remained relatively unchanged, the top decile of startups has been less impacted than the second decile, largely due to the involvement of better-known firms who are happy to pay more for a spot on the cap table.
Most people think that angel investing is for the ultra-wealthy. As it turns out, the vast majority of angels are investing $1k-$5k into startups. This in-depth post provides tactical tips for how to get started.
We often avoid having tough conversations or calling out the things in meetings we really should be. Here’s a reminder that it’s okay to feel uncomfortable or fearful doing it. Learn how to do it anyway.
Partnering with SF-based Gusto, JPM is looking to offer digital payroll processing in order to appeal to small business customers. It’s nice to see an incumbent taking meaningful actions towards innovation.
AI is looking to take on several dying markets and news is just another avenue. This article looks at how AI might be a path forward for news. We’re already seeing this happen with smaller local TV affiliates with some success.
Microsoft has reported that an Iranian cyber espionage group, tracked as Peach Sandstorm but known otherwise as Holmium, APT33, or Elfin, targeted organizations in the satellite, defense, and pharmaceutical sectors. The group compromised dozens of entities, exfiltrated data from a subset, and gained access using password spray attacks. The campaign began in February and targeted thousands of organizations.
From 2020 until 2022, a random sampling of users downloading the Free Download Manager software received a Trojan horse version of the app. The malicious software has a collector backdoor that collects secrets from systems and then utilizes another backdoor to download an uploaded script from a C2 and periodically upload the stolen secrets. IOCs are included in the article.
Researchers from Checkmarx discovered a new method to exploit a race condition in the GitHub retired namespaces protection process to repojack popular repositories. Repojacking is an attack where an attacker sets up a malicious mirror of a GitHub repository that was renamed with the goal of impersonating the old repository. To prevent these attacks, GitHub enabled a protection to automatically retire popular repository namespaces when they are renamed. However, attacks such as this one bypass this protection.
This document provides an in-depth analysis of TPM-based BitLocker Drive Encryption, which is a feature in Windows that allows users to encrypt their hard drives. It explains how the BitLocker keys are stored and how they are accessed using the TPM. Additionally, the author describes a vulnerability in BitLocker that allows attackers to bypass the encryption and provides a detailed explanation of how the attack works.
A vulnerability in Facebook/Meta's Canvas on the Comet platform could allow account takeover if a user plays a malicious Canvas game. The issue stems from Compat iframes used for OAuth dialogs. A malicious game could exploit cross-window messaging with the parent window to set up a rogue communication channel and take over the account. This blog post explains how the exploit works with examples.
Terraform’s remote-exec provisioner is a powerful tool that allows for executing commands on a remote server to configure it. However, without proper guardrails, this can pose security risks such as data exfiltration. This article features an example and discusses some mitigations.
Dropbox has released this repository of prompt injection example scripts for educational purposes to understand how to attack LLMs and learn how to defend against these types of prompts.
Invictus-AWS is a standalone Python script to enumerate relevant data and services in an AWS account.
Pynt is a security testing solution that automates security testing for developers and testers, enabling effortless vulnerability discovery and mitigation throughout the SDLC. It has raised a $6 million seed funding round.
The National Security Agency (NSA), Federal Bureau of Investigation (FBI), and Cybersecurity and Infrastructure Security Agency (CISA) have released a Cybersecurity Information Sheet (CSI) on deepfake threats. The CSI provides an overview of synthetic media threats, techniques, and trends. It includes recommended steps and best practices for organizations to prepare, identify, defend against, and respond to these threats.
Meta's Native Assurance team found a vulnerability in the Meta Quest 2's Android OS that could have allowed arbitrary code execution with system privileges by exploiting memory corruption over IPC. Though it never reached production, the vulnerability highlighted improvements needed in Quest security. Meta shares its review process to demonstrate its commitment to secure product development.
An article from AWS outlining some of the DDoS options offered by AWS as well as the options and processes for running DDoS simulations on AWS. Users have the option of running a simulated DDoS attack through an approved partner or a synthetic simulated DDoS attack with the AWS Shield Response Team.
A new possibly North Korean group named Konni has entered the ransomware game. It recently started to employ new techniques using WinRAR vulnerabilities to exploit for cryptocurrency.
The CISA has announced a new program offering free vulnerability scans for public water utilities. The program will install scanners in the organizations and send weekly scan reports with vulnerabilities and recommendations.
Scattered Spider, a cybercrime group known for social engineering attacks, has hit over 100 organizations and recently deployed ransomware in attacks. Mandiant reports they are expanding beyond telecom and outsourcing into hospitality, retail, media, and finance. Mitigations include monitoring for phishing links, credential theft, and ransomware.
Google’s Creative Guidance leverages AI to make suggestions for enhancing video ad performance. It is available through 'Recommendations' and has been integrated into Video Analytics within Google Ads. The tool can check for the following in your creative: brand logo presence, appropriate duration for marketing goals, high-quality voice-over, and adequate aspect ratio.
TikTok quietly introduced Wikipedia snippets within its search results a few months ago. Users can find these Wikipedia excerpts interspersed between relevant videos and the links redirect to Wikipedia. This pivot signaled TikTok’s intention to become a more comprehensive search engine.
Sometimes it's not clear what images are most appropriate for the query or topic you're optimizing a page for. In these cases, you should perform a Google Image search for the keyword you're optimizing for. You'll find what type of imagery Google believes is contextually related to the topic.
This post outlines how to use AIPRM, a free plugin, to generate SEO-optimized content efficiently. The plugin provides ready-made prompts, a keyword generator, keyword analysis, and more through ChatGPT. Its combination of tools simplifies the content creation process, but the output should be thoroughly reviewed.
This post shares 6 types of prompts to use in ChatGPT Plus for visualizations and insights into your marketing analytics data. Examples include conducting a competitive analysis of your key pages, an analysis of the performance of campaigns across your full marketing funnel, and a web page audit for SEO and conversions.
Now is the time to prepare your brand’s Black Friday and Cyber Monday emails. This guide explains the steps to kickstart your campaigns. It includes tips to build your email list, the content to include, and effective subject lines to use. The guide also includes sample campaigns, such as a “get ready” email and an average-spend-per-customer promotion.
Targeted advertising is under threat due to privacy regulations and consumer distrust. Privacy laws, like GDPR and CCPA, are demanding higher levels of consumer consent, impacting traditional targeted advertising practices. While this does not mean targeted advertising will end soon, the industry is shifting towards a more transparent, user-centric, and consent-driven model. Advertisers are turning to alternative methods such as contextual advertising and zero-party data to navigate this changing landscape.
This article discusses how Web3 Academy, a media company, has been leveraging Web3 to provide a better customer experience and grow its business. Web3 Academy focuses on people interested in new technologies and provides various resources including a newsletter, podcasts, and courses. It integrated NFTs into its business model to improve the experience for premium subscribers. Web3 Academy is using Web3 to innovate podcast and video consumption.
A play-by-play on the latest developments from the landmark Google search antitrust trial, which is set to last for 10 weeks. The outcome could bring significant changes to Google and the future of the internet.
Your competition is already trying to improve on what they're doing, so focus on differentiation instead of copying their content or ads.
This post shares how a company leveraged a product-led SEO opportunity to increase its traffic by 400% by showcasing its product in its content and making its product data public.
A list of over a hundred unique marketing tactics that target buzz generation, creating brand awareness, acquisition, retention, and monetization.
Small software teams are more common in 2023 due to tech layoffs. However, there are five common factors that allow these teams to outperform their competition, such as keeping things simple, reusing code liberally, and having a clear vision in mind. This article uses ChatGPT, Bun, and indie hackers as clear examples. It also delves into actionable takeaways for software engineers, who can benefit from the lessons learned from small teams shipping fast.
v0.dev is a website that allows you to create copy-pastable, styled frontend components with just natural language. Basically, it’s AI for React components. v0 is currently in private alpha, but there are multiple example components available to everyone for free.
Schadcn-ui is a repository of beautifully designed components that you can copy and paste into your apps. It’s accessible, customizable, and fully open-source. This repository provides the Vue version of the original React version.
Catala is a domain-specific language for deriving faithful-by-construction algorithms from legislative texts.