Over 6 million tech professionals read TLDR including developers, product managers, marketers, designers and executives. Get in front of your target audience with an ad placement just like this one! Learn more [4] about running a test campaign.
Sierra has raised $350M at a $10B valuation to expand its AI agent platform, backed by Greenoaks. The platform supports hundreds of major companies, reaching 90% of Americans in retail and 50% of US families in healthcare. The new funding will enhance AI development capabilities and international expansion, strengthening Sierra's global presence.
Atlassian has acquired The Browser Company. It will integrate Dia and Arc browsers with its productivity tools. This strategic move will cater to knowledge workers by optimizing for SaaS apps, incorporating AI, and enhancing security features. The acquisition aims to revolutionize work efficiency in web browsers.
Investors are increasingly focused on AI coding as a monetizable product category, highlighted by recent acquisitions and Anthropic's significant $13 billion Series F funding round. Despite lower traffic and user numbers compared to OpenAI's ChatGPT, Anthropic is thriving by catering to AI-driven software development needs, with its models forming the backbone for many successful coding startups. Investors are shifting towards clear, profitable use cases in AI, with automation in the tech industry being a promising area.
Replit made its Y Combinator Winter 2018 application video public, offering a rare behind-the-scenes glimpse into its early founder pitch. The video reveals how Replit, now a leading collaborative in-browser coding IDE, introduced itself to the YC community and provides context into its startup journey.
AI tools like ChatGPT can streamline research, organize information, draft supplemental content, overcome writer's block, and improve accessibility with translations. AI excels at repetitive tasks but requires verification and thoughtful use. While AI aids in the creative process, originality and storytelling remain human domains.
Most SaaS companies spend weeks building elaborate forecasting models only to base projections on gut feelings, then act surprised when ARR comes in 15% below target because they forgot about that summer churn spike that happens every year. The companies that nail their forecasts aren't trying to predict the future - they calculate churn, expansion, and contraction as percentages of opening balance using six-month rolling averages from their own historical data.
2025.09.05·
thesaasbarometer.substack.com·4 min read·TLDR Founders
When a prospect tells you they'll think about it, you've already lost - they've failed to connect emotionally with the problem you're selling. Learn how to turn hesitation into yes by helping prospects persuade themselves with NEPQ - your new influence edge [12] in funding, sales, and partnerships. Register for the FREE 5 day
a16z Speedrun invests up to $1M in early stage startups. The SR006 class just opened applications this week for the SF cohort in 2026. a16z's Global Founders Program offers hands-on support with banking, visas, and relocation for international founders.
Skywork Super Agents transform simple prompts into rich multimodal content like documents, slides, podcasts, and webpages, complete with deep research.
Venture fund success depends heavily on understanding ownership and the role of outlier companies in generating returns. Despite increasing fund sizes, many VCs face challenges capturing sufficient value due to unrealistic expectations on investment outcomes. Smaller, emerging funds often outperform larger ones due to better IRRs by focusing on high multiples rather than sheer volume.
AI advancements now enable startups to pursue "one-and-done" funding, drastically cutting personnel costs and speeding up time to market. This approach reduces reliance on traditional VC funding and promotes a rapid rise in software startups, sparking a surge in new, younger founders. Venture capital firms, facing reduced demand from software startups, might pivot towards deep tech sectors that still require significant funding.
Venture capital is heavily concentrated, with a small number of ultra-unicorns receiving the majority of funding, while mid-tier companies struggle. Companies like OpenAI and Scale AI have raised massive rounds, distorting the funding landscape. The focus on a few giants creates a fragile market, potentially ignoring smaller, capital-efficient businesses that could offer significant returns.
Weak and reused passwords expose companies to critical risks. In fact, the majority of web application breaches stem from poor credential hygiene, costing organizations millions per incident.
Over 252 million identity records from seven countries—Turkey, Egypt, Saudi Arabia, UAE, Mexico, South Africa, and Canada—were exposed through three misconfigured servers in Brazil and the UAE. These contained government-level profiles with ID numbers, birth dates, contact details, and addresses. The databases had similar structures, suggesting a single operator, but the source remains unknown. Turkey, Egypt, and South Africa were most affected. Cybernews contacted hosting providers, and the data is no longer publicly accessible as of June.
Chess.com reported that it experienced a data breach after detecting unauthorized data stored in a third-party file transfer application. The incident only impacts an estimated 4.5K users and may have exposed names and other PII.
TP-Link has confirmed the existence of an unpatched zero-day vulnerability impacting multiple routers. The vulnerability was discovered by a security researcher who stated that it is caused by a stack buffer overflow in the CPE WAN Management Protocol (CWMP). An attacker could exploit it by redirecting vulnerable devices to a malicious CWMP server, which could deliver an oversized SOAP payload, leading to remote code execution.
Attackers deployed fake GitHub repositories and npm packages that stored malware download URLs in Ethereum smart contracts rather than directly in the code, making detection significantly harder for security tools. The campaign targeted cryptocurrency developers with fake automated trading bots, using packages like colortoolsv2 and mimelib2 that connected to blockchain addresses to retrieve second-stage payloads. The attackers automated thousands of fake commits daily to inflate repository legitimacy, demonstrating sophisticated supply chain attack techniques that combine social engineering with blockchain-based evasion.
A new vulnerability in popular Electron-based apps like Signal, 1Password, and Slack allows attackers to get around code integrity checks by hiding backdoors in overlooked V8 heap snapshot files. Electron's integrity protections often miss these files, meaning backdoors can be inserted without failing code signatures or integrity checks, especially when apps are installed in user-writable folders. This post shows a proof of concept to demonstrate keylogging and privilege escalation with the exploit, showing that even patched applications may have missed attack surfaces.
Most SOC teams focus on reactive work but aren't actively looking for threat actors that have bypassed their security controls. TryHackMe's THREAT HUNTING SIMULATOR gives analysts a safe, repeatable environment to practice spotting adversary behaviours [12]. Gamified hunts and instant feedback enable teams to sharpen detection rules and response playbooks, without the overhead of building internal labs. Start free
Fraction Loader is an educational malware project that creates a stealthy in-memory loader capable of downloading, reassembling, and executing payload fragments without touching disk. It uses Windows APIs like VirtualAlloc and WinHTTP to handle encrypted payload chunks, parse headers for order, and reassemble them into executable memory with suitable permissions. While meant for penetration testers and security researchers to learn evasion techniques, it functions as a weaponized dropper that can bypass file-based detection and pose a threat to InfoSec professionals monitoring for in-memory attacks.
Tidal Cyber maps tactics, techniques, procedures, and procedural-level insights to MITRE ATT&CK to tailor security strategies around adversary groups and their behavior for threat-led defenses.
Mixeway Flow is a DevSecOps platform that automatically performs four security scans (SAST, SCA, IaC, and secret detection) on Git repositories through webhook integration. It aggregates vulnerabilities from various open-source scanning tools such as Bearer, OWASP Dependency Track, KICS, and Gitleaks into a single dashboard for streamlined security management. The platform simplifies CI/CD pipeline setup and offers thorough application security testing across code, dependencies, infrastructure, and credential exposure.
Egyptian authorities and the Alliance for Creativity and Entertainment (ACE) shut down Streameast, the world's largest illegal sports streaming platform that received 136 million monthly visits across 80 domains, arresting two suspects and seizing assets linked to $6.2 million in laundered advertising revenue.
A California jury found Google liable for collecting user data even after tracking was disabled, resulting in a $425 million penalty. The class action lawsuit covered 98 million users and claimed Google continued to gather app activity despite settings meant to protect privacy.
France's data authority fined Google €325M and SHEIN €150M for using cookies without user consent and breaching privacy laws. Google was also penalized for showing ads in Gmail based on those cookies. Meanwhile, SHEIN's opt-out failed as cookies were still sent even when users clicked “Reject All.”
Texas Attorney General Ken Paxton filed suit against education software provider PowerSchool for a December 2024 data breach that exposed personal information of more than 880,000 Texas students and teachers, alleging the company failed to implement adequate security measures despite knowing about vulnerabilities.
Disney agreed to pay $10 million to settle FTC claims that it mislabeled child-directed YouTube videos as "Not Made for Kids," which enabled unlawful collection of children's personal data and targeted advertising without parental consent in violation of COPPA regulations.
The FreeBSD Project is developing a policy to restrict LLM-generated code contributions due to licensing concerns, though AI may still be allowed for documentation, translations, and code analysis tasks.
AI search is changing the way customers discover brands. If your content isn't optimized for generative engines, you risk being invisible where it matters most.
Global linear TV ad spend is projected to fall to $139.1bn in 2026, its lowest since 2005, after declining 27.5% between 2014 and 2024 and 50.8% when adjusted for inflation. Audiences are shifting from linear to connected TV, which now accounts for nearly half of TV usage in the US, while YouTube earned $36bn in US ad sales last year, surpassing all four broadcast networks combined. Fragmentation and measurement gaps remain a challenge, but retail data integration is reshaping how advertisers measure outcomes and plan campaigns. Smaller brands, which allocate only 9% of ad budgets to TV compared to 38% for large brands, may gain new opportunities as CTV moves toward programmatic selling.
Tulpamancy and synthetic intimacy show how people are creating companions and relationships through imagination and AI, from Reddit communities building tulpas to users forming bonds with chatbots. These practices provide comfort, therapy, and connection, but also carry risks of manipulation and harm, as seen in cases linked to AI platforms. Trust in AI remains low, though use is growing among younger people who treat these interactions as real. Brands are beginning to explore similar dynamics through worldbuilding and attachment, raising questions about how far engineered intimacy can go before it undermines human agency.
Dollar stores are attracting more affluent shoppers as consumers across income levels look for value. At Dollar Tree, customers earning over $100K made up two-thirds of new shoppers in Q2, up from 50% in Q1. Dollar General also saw same-store sales rise 2.8%, fueled by higher foot traffic and basket size. Middle and higher-income shoppers are increasingly trading down, making them a larger force in overall retail spending.
Stripe processes $1.4 trillion annually, equal to 1.3% of global GDP, by positioning itself as the payments engine behind major platforms like Shopify and Lyft. Its success comes from frictionless integration, offering clean APIs, strong developer documentation, and self-serve tools that make it the default choice for engineering teams. It deepened platform lock-in by expanding into adjacent services like fraud prevention, billing, and lending, which increased switching costs and made it indispensable to partners. Stripe also built a win-win ecosystem through partner incentives, co-marketing, and technical support that fueled both its own growth and that of its platform customers.
Research shows that launching products unrelated to a brand's core category makes people view the brand as cooler. Across 4 experiments with 1,454 participants and over 5,000 social media comments, unrelated extensions like KFC's fried chicken-scented nail polish or a hot pot brand's spicy toothpaste increased perceived coolness by up to 20%. The effect is stronger for popular brands and co-branded products, such as McDonald's being rated 9.7% cooler with its Adidas sneaker launch, and weaker when extensions are too close to the core category. The strategy works because it surprises consumers, creates humor, and signals creativity and rebellion.
Every day, data is bought, sold, and pushed through martech. But none of it is as valuable as first party data - which is accurate, reliable, and most importantly - yours. This OneTrust guide [10] shows you how to operationalize first party data across channels to deliver better targeting, richer personalization, and measurable ROI. Read it
A wave of UGC gig platforms is emerging, with apps like Noise, Home from College, SideShift, and PayPer using TikTok-first strategies to recruit creators and grow. Noise, backed by venture funding, runs a network of accounts targeting moms, while Home from College focuses on Gen Z students. SideShift and PayPer experiment with clipping and direct brand mentions to capture users. Results vary, and the market is expanding quickly with self-serve marketplaces and full-service operations.
Nano Banana gives marketers and creators a free, AI-powered platform for precision editing, branding, and multimedia production. It turns simple images into Studio Ghibli-style visuals, product mockups, or even 3D models while keeping brand consistency across campaigns. This guide shares multiple prompts and tips that can help marketers leverage the tool across multiple design and production tasks.
Workers aged 22-25 in highly AI-exposed jobs, such as software developers and customer service agents, saw a 13% drop in employment since ChatGPT's launch. Meanwhile, older workers and less-exposed roles held steady or grew. Companies are not firing at scale but are slowing hiring, which hits new entrants hardest. Applied AI firms must address worker anxiety, build trust through clear benefits like time savings and cost reduction, and design simple products that focus on core features before expanding.