Search the archive

START FOR $0 TODAY

INSIDE REPLIT'S BREAKOUT GROWTH: LESSONS FROM $2.8M TO $150M ARR

Replit's marketing and strategic lifecycle systems mirror strategies used at ClickUp. The company emphasizes cohesive product launches, lifecycle-driven velocity, and community engagement to convert organic energy into structured growth. The disciplined approach linked product features like the Replit Agent to organic and content-driven campaigns, significantly enhancing activation, retention, and conversion rates.

PSIQUANTUM RAISES $1 BILLION TO BUILD MILLION-QUBIT SCALE, FAULT-TOLERANT QUANTUM COMPUTERS

PsiQuantum secured $1 billion in Series E funding to develop million-qubit fault-tolerant quantum computers. The funding will enable the company to establish quantum computing sites in Brisbane and Chicago and validate its systems architecture. New investors include BlackRock, Temasek, and NVIDIA's venture arm, valuing PsiQuantum at $7 billion.

WHY FOUNDERS FAIL AND WHY YOU NEED TO RUN TOWARD FEAR

Ben Horowitz, co-founder of a16z, emphasizes that successful founders make many small, difficult decisions rather than relying on one big moment. He advises CEOs to act decisively in tough situations and prioritize finding great talent over fixing underperformers. Horowitz also discusses the underestimated potential in AI startups and highlights the importance of embracing challenges to avoid failure.

GITHUB CEO THOMAS DOHMKE ON COPILOT, VIBE CODING, AND AI'S NEXT CHAPTER

GitHub CEO Thomas Dohmke discusses AI's lasting impact on coding, highlighting GitHub Copilot's role in the AI coding boom. He emphasizes the importance of competition from newer platforms like Cursor and Windsurf. Dohmke also ponders how AI will continue transforming the role of software engineers.

7 PRODUCT STRATEGY EXAMPLES

A B2C finance app strategy centers on behavioral design and habit nudges to drive goal completion, using a measurable North Star metric and a Now‐Next‐Later roadmap structure. A compliance automation product prioritizes modular onboarding for frameworks, proactive alerts, and quarterly customer roundtables, aligning legal and product goals. A freelancer-client marketplace leans into quality and trust with verified matches, dispute handling, and user-informed roadmaps to boost retention and project outcomes.

WHY YOUR AI PRODUCT NEEDS A DIFFERENT DEVELOPMENT LIFECYCLE

AI products require a different development lifecycle compared to traditional software due to their non-deterministic nature and the balance between agency and control. The Continuous Calibration/Continuous Development (CC/CD) framework helps address these challenges by continuously refining system behavior and gradually granting more autonomy. This approach ensures stability, user trust, and the successful scaling of AI products.

new. Get early access

OPENMEMORY MCP

OpenMemory MCP is a private memory service for MCP-compatible AI tools, enabling them to securely store, retrieve, and share session context locally or via a hosted cloud.

KNOWLEDGE

Knowledge is an AI sales intelligence platform that uses behavioral data and psychometrics to identify in-market buyers and coach teams on personalized, high-converting outreach.

NARROW

Narrow is a smart LinkedIn inbox that organizes messages, follow-ups, and prospecting in a clean, kanban-style dashboard for founders, sales teams, and job seekers.

WHY MORE STARTUPS ARE BUYING OTHER STARTUPS IN 2025

Startups are increasingly acquiring other startups due to challenging fundraising environments and affordable valuations. In the first half of 2025, M&A deals rose 18% year-on-year, driven by companies looking to access new technologies or consolidate market positions. Notable transactions include OpenAI's $6.5 billion acquisition of Io and Ripple's $1.25 billion purchase of Hidden Road.

HOW TOP VCS ARE REALLY INVESTING IN AI APPLICATIONS (AND WHAT IT MEANS FOR YOUR SAAS STRATEGY)

Jacob Efron of Redpoint Ventures emphasizes that AI companies scale faster than traditional SaaS due to plummeting model costs and advises focusing on four AI use cases: chat, document processing, speech, and coding. Redpoint's investment strategy evaluates AI by examining market wedge potential, industry expansion capability, and market quality demands. The rapid evolution of AI necessitates a swift adaptation and integration into SaaS to maintain competitiveness, with Redpoint highlighting marketing AI as a promising yet underdeveloped area.

HOW TO ACTUALLY DECIDE

Focus on defining decision criteria and evaluating options quantitatively. Use techniques like cost-benefit analysis and expected value to make informed choices. Prioritize clarity and consistency in decision-making processes.

3 MARKETS FUELING THE SHIFT TO AGENTIC COMMERCE

Generative Engine Optimization (GEO) enhances AI platform visibility, with nearly 40% of players launching recently.

INDUSTRIAL AUTOMATION AI READINESS: HOW SIEMENS, HITACHI, AND ABB ARE BUILDING THE INDUSTRIAL AI FOUNDATION

Siemens, Hitachi, and ABB advance industrial AI by integrating automation and AI technologies.

HOW AI HAS CHANGED THE RULES OF SAAS: WHAT EVERY FOUNDER NEEDS TO KNOW. A LIVE DEEP DIVE

AI is transforming the SaaS landscape, fundamentally altering scaling and growth strategies for founders.

→ [4]Get the full research

→ [5]Explore the security trends

HYBRIDPETYA RANSOMWARE BYPASSES UEFI SECURE BOOT ECHOING PETYA/NOTPETYA

The HybridPetya ransomware on VirusTotal echoes the infamous Petya/NotPetya attacks but adds UEFI bootkit capabilities and exploits CVE-2024-7344 to bypass UEFI Secure Boot on outdated systems. Unlike NotPetya, HybridPetya functions as actual ransomware with decryption capabilities, encrypting the Master File Table after compromising EFI partitions and displaying fake CHKDSK status before showing ransom demands. This marks the fourth known UEFI bootkit with Secure Boot bypass capability, joining BlackLotus, BootKitty, and the Hyper-V Backdoor PoC, indicating these sophisticated attacks are becoming more common.

WHITECOBRA FLOODS VSCODE MARKET WITH CRYPTO-STEALING EXTENSIONS

A threat actor named WhiteCobra has been flooding the VSCode marketplace and OpenVSX registry with malicious extensions targeting VSCode, Cursor, and Windsurf users. The extensions contain an extension.js file that is nearly identical to the Hello World example but loads a prompt.js file, which downloads and executes a platform-specific infostealer payload from Cloudflare Pages. An Ethereum core developer reported on X that their wallet was drained after downloading a seemingly legitimate extension with a professional logo, detailed description, and 54K downloads.

SAMSUNG PATCHES ACTIVELY EXPLOITED ZERO-DAY REPORTED BY WHATSAPP DEVS

Samsung patched a remote code execution vulnerability that impacted Samsung devices running Android 13 or later. The vulnerability arose from an out-of-bounds write in the libimagecodec.quram.so library, which is used for image parsing. Apple patched the relevant vulnerability in its devices last month after it was reported to it by WhatsApp and Meta researchers as well.

THE CURIOUS TALE OF A FAKE CARRIER.APP

Google Project Zero found a fake carrier app exploiting a heap overflow in Apple's DCP firmware on iPhone 12/13. The exploit bypassed kernel protections by targeting the DCP's weaker security, using a fake Vodafone app distributed via enterprise certificates to sideload malware. The vulnerability (CVE-2021-30983) caused memory corruption through an unbounded loop in display code, allowing attackers to gain kernel access by corrupting C++ objects and manipulating memory between the DCP and main system.

UNMASKING THE GENTLEMEN RANSOMWARE: TACTICS, TECHNIQUES, AND PROCEDURES REVEALED

The Gentlemen ransomware group has executed sophisticated attacks across 17 countries, focusing on sectors like manufacturing and healthcare. Their operations use custom tools to bypass security measures, exploit privileged accounts, and deploy ransomware with double extortion tactics. The campaign demonstrates a shift to highly tailored, evasive strategies, raising the bar for enterprise defense and incident response recommendations.

SUPABASE SECURITY BEST PRACTICES (2025 GUIDE)

This comprehensive guide addresses frequent security pitfalls seen in Supabase deployments, offering precise and practical solutions grounded in recent audits. It covers how components like authentication, database schemas, Edge Functions, storage, and CORS interact from a security perspective and how to secure them with simple, effective policies—such as “read-only by default”, automate audits, and revisit configurations as the platform evolves.

attacks, ADÉ automatically creates and backtests Detection Rules

in response to missed attacks.

Read more on the Sublime Security blog

GROUPPOLICYBACKDOOR

GroupPolicyBackdoor is a tool for Group Policy Objects (GPOs) manipulation and exploitation.

REDACCESS (PRODUCT LAUNCH)

Red Access provides an agentless security platform that protects web sessions and assets across browsers and apps, enabling secure access, data loss prevention, and visibility for remote and hybrid enterprise environments.

GARUDRECON

GarudRecon is an automated reconnaissance framework designed for asset discovery, vulnerability detection, and continuous monitoring.

600 GB OF ALLEGED GREAT FIREWALL OF CHINA DATA PUBLISHED IN LARGEST LEAK YET

Hacktivists from Enlace Hacktivista leaked nearly 600 GB of data supposedly from China's Great Firewall, exposing source code, communications, and documents from Geedge Networks and MESA Lab, key to the censorship system. The leak reveals that the Great Firewall operates as a commercial platform called "Tiangou," which has been exported to Myanmar, Pakistan, Ethiopia, Kazakhstan, and other Belt and Road countries for surveillance purposes. The 500 GB archive includes source code, project records, and internal documents revealing how China's censorship functions and spreads globally through public-private partnerships.

MODDER INJECTS AI DIALOGUE INTO 2002'S ANIMAL CROSSING USING MEMORY HACK

A modder connected AI chatbots to the 2002 game Animal Crossing, enabling villagers to discuss their indebtedness and organize against Tom Nook. Using memory hacking and two Python scripts, the mod injects dynamic, AI-generated dialogue into the game, with a writer creating the dialogue and a director adding technical elements.

WHAT I LEARNED FROM GETTING REJECTED BY AMAZON: A SECURITY ENGINEER'S INTERVIEW EXPERIENCE

A security engineer shares their experience preparing for and interviewing for an AppSec role at Amazon. The author walks through their screening interview and three days of onsite interviews, which included scripting and automation questions, a coding challenge, a threat modeling exercise, and other questions. The article wraps up with lessons learned after a rejection and the resources the author used to prepare.

Register for free

QRATOR LABS MITIGATED RECORD L7 DDOS ATTACK FROM 5.76M-DEVICE BOTNET

Qrator Labs thwarted a record Layer 7 DDoS from a botnet of 5.76M compromised IoT devices targeting government infrastructure, a 333% increase since March 2025, mainly from Brazil (1.41M), Vietnam (661K), and the US (647K).

POPULAR AI CHATBOTS LEAKING DATA: MILLIONS OF USERS COULD BE AFFECTED

Researchers revealed that Vyro AI's server leaked 116GB of data, exposing user prompts, authentication tokens, and putting over 150 million users' privacy and accounts at risk.

UTF-8 IS A BRILLIANT DESIGN

UTF-8 is a great character encoding design that represents millions of characters from different languages while still having backward compatibility with ASCII. It uses a variable-width encoding (1-4 bytes) where the first byte indicates the number of bytes required for a character, making sure ASCII characters remain single-byte. This design makes every ASCII file a valid UTF-8 file and vice versa when only ASCII characters are present.

USING THE NODE 18+ NATIVE TEST RUNNER WITH TYPESCRIPT AND REACT

Node.js 18 introduced a native test runner that can replace Jest, Mocha, or Vitest for basic testing scenarios, including TypeScript and React component testing. The setup requires minimal configuration with experimental flags for TypeScript support and module mocking, plus dependencies like `tsx`, `global-jsdom`, and `@testing-library/react`. While it has advantages like no config files and a smaller dependency footprint, it has limitations like having a smaller ecosystem compared to established testing frameworks.

DEVELOPING AN ALT TEXT BUTTON FOR IMAGES ON MY WEBSITE

This dev created an HTML and CSS-only "Alt" button for images on their website inspired by Mastodon's similar feature that allows users to view alt text descriptions by clicking a button. The solution uses a checkbox trick with CSS styling to show/hide alt text content when the button is clicked, positioning the actual checkbox off-screen while keeping the label visible as the clickable button.

HOW TO WRITE "GARBAGE CODE" (BY LINUS TORVALDS)

Linus Torvalds, the creator of Git and Linux, says that overly complex or abstracted code, like unnecessary helper functions, makes code maintainability and understanding worse. It increases cognitive burden and, in some cases, it makes sense to repeat code to reduce human and LLM context switching. Code should be optimized for readability and ease of iteration.

AI CODING

AI coding is essentially a fancy compiler, not a magical replacement for programmers. The excitement around AI coding is from dissatisfaction with current programming tools and languages rather than AI's true coding capabilities. While AI can be a useful tool for search, optimization, and pattern recognition, it doesn't remove the need for human coding.

MY FIRST IMPRESSIONS OF GLEAM

Gleam is an Elixir-like language with static typing, which this dev is learning by building a parser for his old AIM chat logs. He documents his initial experiences, highlighting both the enjoyable aspects, like pipelines and pattern matching, and the challenges of adjusting to a functional paradigm with no loops or traditional control flow. He also talks about the language's limitations, including a small core and standard library, as well as awkward error handling.

development. Read the guide