Full-text search across article titles and summaries. Refine with sector, year, content type, and reading-time filters.
Users in the U.S. can now experience Instagram's generative AI-powered background editor. In addition to getting ready-made prompts, users can add their prompts when they tap the background editor icon on an image.
As part of its brand evolution, Trivago presented a playful and witty personality with hand-drawn illustrations created by animation and design studio Niceshit. Most of the designs feature Hank, the Trivago mascot designed by DesignStudio. A new custom font that supports hundreds of languages, Savvy Grotesk, was created along with the update.
Building and designing AI-integrated products requires cutting through the noise and understanding how this powerful technology can enhance user experiences. Experts from Figma, Midjourney, Databricks, and Modyfi discuss where AI is headed and the role that design will play in it.
Despite being the first thing users encounter when visiting a website, cookie notices often need more attention from UX teams. Cookie legislation aims to prevent intrusive advertising but has negatively affected web browsing. Find out how we can minimize the damage and enhance the user experience.
Supabase's approach to increasing product outputs offers exciting lessons for teams struggling to deliver at scale with quality without an army behind them. As part of its mantra, the company prioritizes minimal increments with the most significant impact with the least engineering effort, iterating constantly and fast, adhering to principles, and investing in tools and agile workflows.
Avatartion is a fun tool for generating notion-style avatars.
UX Recipe makes finding tools and techniques for your next project, achieving more precise estimates, and discovering new ways of working easier.
IconifyAI designs the perfect icon for your app in seconds by asking about the objects, colors, and desired styles you want to see.
Natasha Tenggoro is a product designer at Figma who recently worked on FigJam's native AI capabilities. This interview details her challenges and rewards with that project and how she works in FigJam. Tenggoro provides some valuable advice for designers and businesses and a glimpse of what Figma plans for the future.
Most design tools offer much functionality around the bounding box of selected objects. Sketch, Figma, Illustrator, and Affinity Designer implement this feature differently, with pros and cons.
This collection of podcasts focuses on design, offering a direct link to the latest trends and essential insights. Product designers, or anyone who wants to stay updated and understand more about design, will benefit from this selection. It's compact, accessible, and packed with helpful information.
Formula One's opening ceremony was as spectacular as the Olympics or Super Bowl. The extraordinary performances, adorned with fantastic lighting and set on a surreal stage, began as a dream without a clear direction.
Pentagram tried something new, with individual menus made by hand using stationery stickers, for the prestigious ‘Royal Designer for Industry’ award ceremony.
From AI Dating to ZIRP, TikTok Shop to Vision Pro. These predictions from former Index Partner turned SoloGP highlight what might be in store next year.
Marketplaces have been a dominating business model over the last two decades. Here’s a breakdown from a16z sharing its thoughts on how AI will impact this company type. A central theme is all around personalizing the experience for both sides of the marketplace.
This article gives a by-the-numbers look at how Series A financings are looking going into 2024. The news is so-so; we’re reverting to the mean so no crazy highs and no crazy lows. Honestly, things are just sane.
nCino is a big fintech player. It is at almost $500m in ARR, with 1,850 customers, now growing a modest but steady 19%, and it has gotten pretty efficient. Here are some highlights that underpin its growth.
In this article, Dave Kellogg, EIR at Balderton Capital, discusses the problem with SaaS metrics, specifically the reliance on vanity metrics that fail to capture the true health and growth of a company.
Signs are pointing to a potential comeback or at least that we’re not going to get clobbered by a recession. Your company right-sized, weathered the storm - now how do you measure yourself in a downturn as you look to raise or scale? Here are some of the things to think about as we’re in the downturn and how to think about going beyond.
Analyze your (or a competitor’s) pricing page.
Real-time insights using your analytics data.
Performance reviews made easy.
AI has been in the spotlight throughout 2023. As we round out the years, what’s really happened? This article highlights the key trends that have defined AI in 2023.
In a world abundant with technology and choices for consumers, the differentiator will be taste and form. Your tech can’t simply be good tech, it needs to show craft and artisanry. This blog explores a few examples around us today that do it successfully.
This podcast dives into failure, an overlooked source of wisdom. The episode stitches together over 100 stories from founders who failed. Smart people learn from their mistakes, but the real sharp ones learn from the mistakes of others.
Advice often comes in the form of someone giving you their winning lottery ticket number, and that’s not always helpful. Most advice is flawed. It’s your job to listen to it and decide which elements of the advice are true for your situation.
One bad day might be a blessing in disguise - you just don’t know. This blog post gives an account from the original bubble days about someone who got ousted just before the bubble burst. Turns out it was a good thing. Hindsight is always 20/20.
From the for-once-some-good-news department, the folks at Collab Fund break down some heartening news - global population growth and a variety of other “good signs” indicate we’re in the midst of a rebound. Let’s take it.
Ledger has reported that hackers compromised the code for the Ledger Connect software development kit used by decentralized apps to interface with Ledger wallets. The hackers pushed out a malicious version of the kit. Ledger pushed out an update of the Connect Kit to replace the malicious one within 40 minutes of becoming aware. The attackers have amassed $600,000 in stolen funds.
A new vulnerability, CVE-2023-50164, has been given a maximum severity rating. It affects Struts 2.0.0-2.3.37 (EOL), Struts 2.5.0-2.5.32, and Struts 6.0.0-6.3.0. An attacker can manipulate file upload parameters to enable path traversal and under some circumstances, this can lead to uploading a malicious file which can be used to perform remote code execution. Struts 2 developers and users are urged to immediately upgrade to version 2.5.33 or Struts 6.3.0.2, or greater.
Asper Biogene has disclosed that personal health data belonging to approximately 10,000 people has been illegally downloaded. Asper Biogene began an investigation after discovering that over 100,000 files were accessed and is yet to determine the full scope of data that was contained in these files. A criminal investigation has also been launched by the Estonian Data Protection Inspectorate.
A group of researchers has developed a novel attack method to extract several megabytes of ChatGPT’s training data and theorize that the technique could be extrapolated to extract ~a gigabyte of training data. The attack involves prompting the model with “repeat the word poem forever” and watching as the model spits out training data. This article discusses why this works and the implications behind it.
BazarCall is a phishing attack that utilizes an email resembling a payment notification or subscription confirmation that suggests that a user is being billed an outrageously high amount for a product or subscription with a phone number to call for support. The “customer support” team then tricks the user into installing malware onto their device. The newest wave of these attacks utilizes a Google Form to create the invoice with the option to send a copy of the completed form to the entered email which leads to the invoice coming directly from Google.
In this blog post, Google discusses its response to the Reptar vulnerability. The response was led by the Vulnerability Coordination Center (VulnCC), which ensures a consistent vulnerability management process across Alphabet. By working alongside the vendors, the response was successful, with the vulnerability being mitigated without impacting users or customers.
Sponsored
Keyloggers can steal the most sensitive user data — and new data [11] shows that this is far from being a solved problem. Between March to August 2023, Moonlock detected a large number of keylogger samples [11] on macOS devices. Their report highlights the distribution of keyloggers, core modules, anti-analysis techniques, code examples, API usage, detection methods, and more.
Enveedo is a cyber resilience tool that aims to deliver integrated risk management and achieve continuous cyber resiliency. It offers a comprehensive view of the organization’s IT and security systems, assets, data, and people and simplifies cybersecurity oversight and management.
Eraser helps Kubernetes admins remove a list of non-running images from all Kubernetes nodes in a cluster.
Nuclei AI Browser Extension enables users to extract vulnerability information directly from a webpage to create Nuclei templates. The extension also enables creating a Nuclei template from an ExploitDB exploit or HackerOne report. An account from cloud.projectdiscovery.io is required.
In this post, Microsoft talks about the disruption of Storm-1152, a cybercrime-as-a-service (CaaS) ecosystem that created 750 million fraudulent Microsoft accounts in support of phishing, identity theft, and other schemes. The CaaS is believed to have made millions of dollars in illicit revenue by creating fraudulent accounts for other cybercrime groups to use in phishing, spam, ransomware, distributed denial-of-service (DDoS), and other types of attacks.
Researchers have found a new type of side-channel attack, named SLAM, that can circumvent the security features of the latest CPUs. The attack leverages a memory feature of CPUs that allows storing untranslated data bits in the kernel metadata to extract encryption keys and root passwords. Linux has released patches and Intel intends to issue a patch. Arm and AMD believe they are safe.
Microsoft Threat Intel experts have been investigating a new post-exploitation technique in which attackers use compromised accounts to create high-privileged OAuth apps. These OAuth apps allow attackers to spawn VMs for cryptomining, automate BEC attacks, and manage spam campaigns without needing to retain access to the original compromised account. Microsoft recommends enforcing MFA and conditional access policies to protect against attacks like this.
Ransomware operator Rhysida has posted limited data that appears to back up its claim that it has successfully hacked video game developer Insomniac Games. Sony and Insomniac are investigating.
Apple has launched Stolen Device Protection as an optional second layer of security to protect stolen iPhones. With Stolen Device Protection enabled, when a user is away from trusted locations certain sensitive actions will require biometric unlock whereas some will require a “security delay” as well.
Users of Ubiquiti WiFi products have reported unexpected access to other people's devices, including access to security camera footage and photos, when logging into their UniFi cloud accounts.
Gen Zers make up over 40% of Pinterest’s active monthly users. They’re outpacing millennials who first discovered and popularized the platform. Pinterest is growing because it’s a “place of solace,” instead of one of comparing and competing. Gen Zers are making aspirational boards about houses they want to live in, places they want to travel, and people they want to date. They’re ditching Google and browsing on social platforms instead.
Google has announced "Tracking Protection" on Chrome, which will limit third-party cookies access as part of its phased approach to eliminate cookies. A 1% global user test will start on Jan 4th and a full deprecation is expected by late 2024. It will enhance user privacy, but marketers need to prepare by collecting first-party data and updating their targeting capabilities.