Full-text search across article titles and summaries. Refine with sector, year, content type, and reading-time filters.
This post outlines potential signals of a bull market top, including increased public interest in crypto, excessive displays of wealth, market structure breaks, bullish sentiment across retail and media, and exaggerated price predictions, suggesting caution as markets may become overheated.
U.S. spot ETH ETFs have recorded positive inflows for 13 consecutive trading days.
This proposal suggests depositing $1.3B of idle stablecoins from the Polygon POS bridge into Morpho vaults to generate ~$91M in annual yield, which can be redirected to grow the Polygon ecosystem.
Rabby Wallet has expanded to Firefox, offering browser users another way to manage their crypto.
Aligning its appearance with the main YouTube app and introducing portrait mode browsing, YouTube Kids is receiving a significant redesign. Key changes include a new carousel for content filters, a bottom navigation bar with “Your Stuff” for saved content, and updated parental controls. The update will roll out soon on iOS and Android.
180 updates were introduced in Figma this year, improving usability and collaboration. Key highlights include the UI3 redesign, enhanced AI tools like visual search, and developer-focused features in Dev Mode. Innovations such as Multi-edit, Auto Layout, and Figma Slides streamline workflows. With AI-powered improvements, Figma emphasizes thoughtful development to boost creativity and productivity in design processes.
Reliable leaker "Digital Chat Station" suggests the iPhone 17 Pro will feature a horizontal camera bump with three lenses, resembling the Pixel 9 Pro's design. While lens details remain unknown, the iPhone 17 Air is expected to have a single camera. Apple may switch from titanium to aluminum for the Pro model.
Design transcends outputs and is rooted in mindset, encompassing curiosity, conviction, curation, and orchestration. As AI democratizes creativity, human ingenuity becomes crucial for vision, intention, and meaningful execution. Blending intuition and strategic thinking, design literacy is essential to navigating complexity and creating resonance.
Gen Z increasingly bypasses Google, favoring TikTok and Instagram for visual, social-first content. This shift impacts Google's dominance, challenges web designers to prioritize mobile UX, visual storytelling, and social optimization, and pressures Google to innovate through AI and partnerships. As digital habits evolve, adapting design strategies ensures relevance in a fragmented ecosystem.
Agua de Madre, a low-sugar water kefir drink rich in live cultures, has been rebranded by adam&eveDDB with vibrant colors, nostalgic typefaces, and playful elements to reflect its lively taste and retro feel. The redesign, a collaboration between founder Nicola Hart and creative director Chris Chapman, honors the brand's nurturing spirit and supports its community-focused mission.
A comprehensive resource hub for guidelines, tools, and accessibility tips.
Build campaign visual reports and uncover insights to boost your ad campaigns.
This guide helps you choose the perfect gift for your designer partners and friends.
Perfectly Boring Studio created a playful branding for Second Brain, an HR service provider, blending bold typography, warm hues, and dynamic iconography to balance professionalism and approachability. Classic office objects shape the brand's elements, reflecting Second Brain's mission to elevate organizations with a personal touch.
Michael Mauer has shaped Porsche's design for over twenty years, overseeing iconic models like the 911 and pioneering innovations such as the Taycan. His leadership blends tradition and boldness, delivering groundbreaking cars while respecting Porsche's heritage. Reflecting on evolving technologies like AI, Mauer emphasizes the irreplaceable human touch in car design.
OpenAI has launched Sora Turbo, a video generation tool that can create clips from 5 to 20 seconds long and offers various editing features. Sora is unavailable in the EU or the UK at launch, with OpenAI's CEO indicating the company is working on future availability but lacking a specific timeline. This decision follows prior instances where OpenAI's products, such as the Advanced Voice Mode for ChatGPT, also excluded EU users due to compliance with local regulations.
True fulfillment arises from working in your Zone of Genius, the sweet spot where your passion and skills converge.
In 2024, Spotify Wrapped marks its 10th anniversary with a campaign focusing on reinvention and evolution, emphasizing genre-blending, cultural milestones, and groundbreaking global music trends.
Sponsored
Ready to join the 92% of entrepreneurs who've never looked back? Hubspot's groundbreaking 2024 Trends Report [4] unlocks the proven playbook of today's most successful business owners.
* Get actionable insights on team building, marketing channels, and customer retention
In 2025, cloud companies' survival will hinge on proving they have customer churn under control. Investors are laser-focused on net and gross revenue retention (NRR and GRR) as leading indicators of efficient growth. Public companies' median NRR is 110%, with top performers over 130%. Retention benchmarks vary by factors like ACV, sales model, and company stage, so be wary of mismatched comparisons. While strong NRR can mask churn problems, GRR is an important early warning sign. The key is balancing both and plugging the "leaky bucket" before growth stalls out.
Imagine having an AI assistant that not only understands you, but can take action on your behalf. That's the promise of Google's new Gemini 2.0 model. It powers AI agents that could one day handle complex tasks like planning a vacation or even writing software. However, as these AI capabilities become more advanced, ensuring they are developed responsibly becomes increasingly important. Google is prioritizing safety measures as it explores applications in areas like gaming and robotics. The pace at which we integrate these AI partners into our daily lives will likely shape the trajectory of their impact.
Topology Ventures has raised $75M to back technical founders building frontier technology like AI, decentralized protocols, and neurotech. The company was founded by Casey Caruso, formerly at Google, Bessemer, and Paradigm.
Traditional goal-setting can feel like a never-ending cycle of chasing targets. However, Spotify's success story shows the power of embracing detours. By staying open to unexpected opportunities, it achieved milestones a rigid plan might have prevented. The key was shifting from a perfectionist mindset to one of experimentation. Pay attention to what truly interests you, run small tests, and build in time for reflection. While you can't predict exactly where you'll end up, this flexible approach often leads to more meaningful growth.
Building AI startups requires adapting quickly to rapid advancements in LLMs, avoiding problems that upcoming models will solve, and leveraging high costs of cutting-edge technology for a competitive edge. Focus narrowly on specific use cases to compete with general-purpose AI, while emphasizing a seamless product experience. Despite the fast-paced nature of generative AI, the core principles of creating desirable products remain unchanged.
Virtual addresses and mailboxes for startups.
Jenium, a productivity SaaS, now offers GenAI and AI Agents for startups to manage tasks, leads, and finances in one place.
Devin is now available for engineering teams at $500/month, offering no seat limits and integrations with Slack, IDEs, and APIs. It's recommended for handling small frontend bugs, creating first-draft PRs, and refactoring code. Devin improves workflows by automating tasks and allows for sessions and reviews via Slack and VS Code extensions.
AI's disruption of software means today's "10x better" quickly becomes tomorrow's table stakes. Startups will die more from competition than starvation. AI reduces switching costs by automating data/process migrations and can have strong or weak data network effects - more data isn't always better. There are still big opportunities for startups: $100T of global GDP is up for grabs outside big tech's turf. Winners will sell AI-driven outcomes and workflows, not just software. Though investments currently outpace revenue, sufficiently-capable AI will transform every company and industry.
Facebook's mistake was letting others control its narrative as it scaled. Early on, it thrived by focusing on tech and letting users and journalists spread its story. However, over time, external forces reshaped that story to Facebook's detriment. Lessons for founders: your story needs to connect with customers to drive organic growth; if you don't own your story, others will exploit it; and content must do more than optimize funnels. New social networks are now intentionally crafting their own narratives. Startups must prioritize authentic storytelling to avoid Facebook's fate.
Metrics meant to measure reality often distort it, creating dangerous blind spots. Facebook's metrics masked its user exodus to TikTok. Coinbase's stellar dashboards belied its eventual layoffs. The bigger the eventual crash, the better things looked on paper. Now, elite companies like Basecamp and Notion are thriving after ditching analytics, A/B tests, and KPIs.
Founders often assume board meetings are mainly about keeping investors informed - just present the data, take questions, and move on.
AI tools significantly speed up workflow, saving time and increasing efficiency.
Recent LLM advancements suggest imminent strides toward AGI, raising crucial societal questions about job disruption, education adaptation, and security.
Sponsored
If you're an MSP, you could seriously upgrade your value proposition [4] by offering network pentesting to your customers.
Researchers from Lookout have discovered a spyware app developed by Wuhan Chinasoft Token Information Technology Co., Ltd and used by Chinese law enforcement. The spyware collects messages from chat apps, screen recordings, screenshots, audio recordings, location information, network activity, installed apps, browser bookmarks, and external storage files. Lookout found evidence that the app is still in active development and that an iOS equivalent may exist.
Researchers from Oasis Security discovered an MFA bypass on one of Microsoft Azure's MFA methods that could lead to the compromise of Microsoft 365 accounts. The researchers discovered that the endpoint did not implement rate limiting and that the auth period lasted for a full three minutes as opposed to the recommended 30 seconds. The researchers also discovered that an attacker could rapidly make many auth attempts to enumerate the full 6-digit MFA space.
Researchers at Aquasec have found over 336,000 exposed Prometheus servers and exporters, risking data breaches and DoS attacks. Vulnerabilities like "RepoJacking" can lead to code execution through compromised exporters. To mitigate risks, organizations should prioritize authentication, limit public exposure, and secure debugging endpoints.
AWS Lambda functions are popular attack vectors for credentials theft and lateral movement. This post presents a realistic application architecture and walks through a scenario in which an attacker exploits a vulnerability in a Lambda function to achieve code execution and pivots to data exfiltration. It suggests using hardened IAM roles, secure coding practices, and monitoring to mitigate Lambda attacks.
Google has made a large push to move to memory safe languages but in the process is embracing hardening C++ to bridge the gap. The security team has attempted to harden libc++ by adding bounds checking to improve spatial security. The team started by integrating the changes into the test and preproduction environment for a year before promoting to production for all but a few exceptions. The safety checks only add a 0.3% performance overhead, but they have resulted in the discovery of over 1,000 bugs and successfully interfered with a red team engagement.
This second part of a guide on "Everyday Ghidra" explains how to create custom Ghidra Data Type (GDT) files from Windows headers to improve reverse engineering. You can ensure accurate and efficient analysis of binaries by using a compiler to preprocess headers before submission to Ghidra. Training Ghidra to use NDIS data types enhances the decompilation process and reveals new structures and variables for better analysis.
Sponsored
Since July 2024, ZeroPath's software has autonomously uncovered critical zero-day vulnerabilities—including RCE, authentication bypasses, and IDORs—in widely-used AI and open source tools. These include security flaws in projects owned by Netflix, Salesforce, and Hulu. See the full list [11] and read more about the methodology and research [11].
Pipe offers authenticated pub sub pipes over SSH with zero install.
Picklescan is a CLI tool that can scan Python pickle files to detect suspicious actions. It can load files from directories, URLs, zip archives, or Hugging Face.
NetRise compiled advanced SBOMs for 70 of the most downloaded containers on DockerHub and found that the average container had over 600 vulnerabilities. 45% of the vulnerabilities were 2-10 years old and 7.9% were over 5 years old. 4.2% of high and critical vulnerabilities were being actively exploited. NetRise also noted that many components did not include manifests and emphasized the importance of advanced SBOMs.
This article discusses hacking Terraform state for privilege escalation by modifying the state file to control infrastructure changes without a "terraform apply." Attackers can manipulate the state file to delete resources or take over a deployment pipeline, which is why it is important to secure and lock the Terraform state to prevent unauthorized changes. The article highlights the need to use a read-only role for "terraform plan" executions to inspect changes without altering infrastructure until the deployment step.
Radiant Capital faced a cyberattack resulting in a $50M loss. It was traced back to a DPRK-aligned threat actor using sophisticated malware. Despite following best practices, the attackers evaded detection by simulating benign transactions while executing malicious ones in the background. The incident highlights the need for stronger device-level security measures in the evolving DeFi industry to combat advanced threats.