Full-text search across article titles and summaries. Refine with sector, year, content type, and reading-time filters.
With a stylish combination of nostalgia and modern design, Coca-Cola released its holiday campaign identity for 2023. In this article, Coca-Cola’s design VP Rapha Abreu and creative director Kristie Malivindi share their thoughts behind the new designs.
People tend to think of startups as creating something from nothing, but it’s more like finding order in chaos, and given the changes in the funding environment, the variables within that chaos are a little different compared to previous years. This read is a healthy reminder that fundraising is not the goal - it's just one of many levers you can pull in order to chart a course towards an outcome.
This article offers some high-level research on the biggest factors that are causing the risk teams at large tech companies to lose sleep. Some of them seem far from the startup world, but it’s curious to see that the majority will likely also be felt by small company founders.
The evolving landscape of startup investing is a mix of diverse ideas and methodologies. The crowded field makes it difficult for founders to navigate. This post chats with insights from 8 unicorn founders to hopefully make some sense of it all.
Stripe’s advisor and former COO Claire Johnson published a book earlier this year called “Scaling People” designed to be an operating manual for culture and hiring. This interview with Johnson breaks down some of the key highlights from the book, including the impact of brand, onboarding, and soft power.
Modern sales successfully defines the buyer journey and aligns the sales process to it. You’re setting yourself up for failure if you don’t spend a meaningful portion of time defining your customer and developing a deep understanding of the way they search for and buy products.
What signals should you look out for that might suggest you’re ready to start to diversify your product offering, and more so, how? This article highlights six different types of product expansion in increasing levels of difficulty based on these vectors.
Build automation workflows that reflect your customer journey. Include email, in-app messages, and internal notifications to your team. Measure results with A/B tests and conversion goals.
Summarize hours of customer interviews in minutes.
SaaS billing on autopilot with full flexibility.
Earlier on in your company life cycle things are generally simpler. You have one product, solving one pain, and a small team running it. As you grow, things get more complex, but it’s that layer of complexity and pursuing multiple strategies at the same time that delivers outsized value. This article explores some examples of companies that failed to juggle multiple strategies and paid the price.
Tiger drastically reduced its investment activity in 2023 and is set to cut its deal flow by 90%. This shift reflects a broader pullback in the venture industry and is one more indication of valuations creeping downward.
Often when we’re asked this question we start to talk about results that have already happened. We rarely talk about the smaller actions we’re doing right now. The real answer is not where you’ve been, but where the impact of your actions will take you.
Salesforce recently shared that they’re placing sales reps on performance improvement plans after only a month or so of missing quotas. Generally, it seems that companies are leaning harder on their sales reps and considering redundancies if they dip below 30-40% attainment of their quota.
Lightspeed’s take on the legaltech landscape as it relates to AI is interesting and transparent from the view of what’s-good-for-VCs-is-good-for-everyone take. There are few interesting insights and only time will tell if they are on the right track or not.
Sponsored
The shocking reality of critical vulnerabilities in publicly-exposed containers. Kubernetes (K8s) has transformed the way applications are deployed and managed in the cloud-native landscape. Based on scans of over 200,000 cloud accounts, the Wiz Security Research team [5] exposes how many clusters are at risk, and what it means for your cloud defense.
Kentucky healthcare organization Norton Healthcare is informing about 2.5 million individuals that their personal information was compromised in a ransomware data extortion hack earlier this year. The organization said that it did not pay the ransom demands as the hackers leaked 4.7 TB of data. This included contact information, dates of birth, Social Security numbers, health and insurance information, and medical identification numbers.
Forescout Vedere Labs has identified a total of 21 new vulnerabilities affecting Sierra Wireless Airlink cellular routers and their dependencies. Of these vulnerabilities, 1 is rated critical and 9 are rated as high. Over 86,000 internet-facing devices were discovered by the researchers, with less than 10% being fully patched. This article includes mitigation and patching instructions.
A group of researchers from Singapore discovered a series of 14 vulnerabilities that impact a total of 710 5G smartphone models from Android, Apple, routers, and USB modems. The 5Ghoul attacks range from temporary service disruption to network downgrade and can be executed without any secret knowledge of the victim, such as SIM card details. The flaws involve impersonating a legitimate 5G base station with proof-of-concept exploits available.
This guidance is focused on people and processes, so organizations can effectively respond during critical incidents. The guide explains how to structure the human elements of incident responses with best practices to help navigate the crucial hours after breach detection and help security teams and leaders steer an investigation when plunged into an incident.
This post is part 2 of a blog series by Datadog focusing on Kubernetes security fundamentals. It details the attack surface of the Kubernetes API in both managed and unmanaged clusters. The post provides guidance on how to reduce the network exposure of these API endpoints and how to encrypt communication.
The Trend Micro Managed XDR team discusses how the aspnet_compiler.exe, a legitimate Microsoft Process, is used to inject the AsyncRAT payload. The investigation revealed different tactics employed by the attackers, including phishing campaigns, code injection, and the use of dynamic DNS servers as well as the ability to evade detection by Antivirus software.
Sponsored
Next week: Join cybersecurity experts from MANDIANT, GOOGLE, and NUCLEUS as they uncover how to effectively leverage Vulnerability Threat Intelligence (VTI) [12] to prioritize threats and shape strategies for risk acceptance. Throughout the discussion, they will discuss how to use Vulnerability Threat Intelligence to gauge the true impact of vulnerabilities, shift from patch prioritization to an informed strategy, and preemptively tackle zero-day vulnerabilities and other imminent cyber threats.
BBOT (Bighuge BLS OSINT Tool) is a modular, recursive OSINT framework that can execute the entire OSINT workflow in a single command.
A free and open vulnerabilities database and the packages they impact. It also includes the tools to aggregate and correlate these vulnerabilities.
Amazon Inspector has launched a set of open source plugins and an API to enable container scanning at build time directly from a CI/CD plugin. Inspector has also launched a new capability to enable agent-less continuous monitoring of EC2 instances. It added a new feature that utilizes generative AI to provide assisted code remediation for Lambda functions.
Cisco Talos has discovered a new campaign by the Lazarus Group called "Operation Blacksmith." The campaign involves the use of three new malware families written in DLang, including two remote access trojans (RATs) that use Telegram for command and control. The malware families discovered in Operation Blacksmith demonstrate a shift in Lazarus Group's tactics and the use of DLang as a programming language.
An ex-employee from First Republic Bank allegedly deployed malware, broke services, and damaged the cloud environment after getting fired for watching pornography on his work laptop. He also impersonated a colleague who got the promotion he wanted. According to the bank, the total damage exceeded $220,000.
Log4J took the world by storm when it was first disclosed as being actively exploited in December 2021. A report from Veracode shows that roughly 38% of Log4J applications are still using vulnerable versions of the library.
FBI has issued a clarification to SEC-required data breach disclosure requirements, allowing for a 30 to 60-day delay in cases of national emergency, but not exceeding 120 days without an exemptive order from the SEC.
This playbook was developed to help vCISOs in their journey, covering vCISO goals, pitfalls to avoid, 5 phases (research, understand, prioritize, execute, and report), and the key activities for each phase.
AWS Secrets Manager recently announced a 99.99% availability SLA. In the event that AWS fails to meet this SLA in a given billing period, users will be eligible for a credit.
Epic Games has won its court case against Google's Android app store. A jury found Google held a monopoly power and used anti-competitive practices that hurt consumers and developers. The outcome is starkly different from the case against Apple. Epic had documentation that showed that Google was locking up the app store market through deals with handset makers. It called out revenue-sharing deals and showed how Google scared users away from sideloading apps.
Finstas are alternate Instagram accounts where people post real-life photos with closer friends. Instagram is looking to productize finstas in a new feature that allows users to establish a new, private side to their profile to share photos with a subset of their friends.
Using sniper links resulted in a 12% increase in email confirmations for Growth·Design. These links are customized links that prompt an inbox search that will only show your company’s confirmation email, even if it landed in the spam folder. This tactic reduces friction in the signup process and prevents emails from getting lost in the spam folder.
When a product category isn’t well-known, find a use case to anchor to in its messaging. This post includes an example of how DataCebo used this strategy to rewrite their homepage hero. Instead of non-specific jargon, hero messaging should clearly communicate what the product does, who it’s for, and when to use it.
YouTube's latest updates include a new 'You' tab for account control, interactive features on the watch page to boost engagement, and improved shopping capabilities for creators during live streams. The platform also introduced experimental AI functionalities such as Dream Track for Shorts music, comment topic summaries, and a conversational AI for content-related inquiries.
This 2024 calendar offers monthly templates, promotional ideas, social media posts, and relevant hashtags. It incorporates major holidays and events that can help with seasonal campaigns or initiatives.
Maxbone is a DTC pet accessory and clothing brand. It succeeds with paid social due to its lifestyle UGC content and social proof callouts. However, the brand could add more variety to its creative. In paid search, Maxbone covers the basics but misses out on demand capture due to the lack of shopping listings. The company’s website is effective in showing customer reviews and displaying a prominent sale banner on every page, but its subscription page lacks education and customization.
AR is reshaping e-commerce, revolutionizing retail, and transforming brand experiences. Examples include virtual fitting rooms for apparel, preview placement for items like furniture or decoration, interactive user manuals, and social media filters.
Snapchatters are now able to look back on their year and Snap’s 2023 top AR filters, trending moments, and snapped locations (available in the 'Memories' section of the app).
Sponsored
API development just got a power boost with the latest features added to the Postman VS Code extension: 🏃 Collection Runner [7]: Test API functionality by running a collection’s requests in a specified sequence and logging the results. Use scripts to pass data between requests and alter the workflow.