Full-text search across article titles and summaries. Refine with sector, year, content type, and reading-time filters.
& Other Stories has unveiled a new logo, replacing its chic, script-style wordmark with a minimalist serif design that many feel strips away the brand's personality. While the update improves legibility, critics argue it embodies a wider trend of generic, characterless rebrands that leave once-distinctive identities feeling flat.
Apple's first foldable iPhone, expected in 2026 at around $2,000, will likely feature Touch ID on the side button instead of Face ID due to thickness and cost constraints. An under-display sensor is unlikely. The device will have a 5.5-inch outer screen, a 7.8-inch inner display, a minimal crease, and multiple cameras.
AI tools show promise in product design but require strategic integration rather than wholesale replacement. It can enhance four key stages: idea generation through RAG systems that pull relevant context from focused documents, rapid prototyping for individual UI elements and micro-animations, visual experimentation as a creative sparring partner despite styling limitations, and large-scale data analysis that enables designers to process thousands of user responses efficiently. Rather than serving as an autopilot, AI functions best as a co-pilot that accelerates exploration, validates concepts, and handles repetitive tasks, allowing designers to focus on strategic thinking and creative problem-solving.
Software inevitably dies despite builders' pride in creating seemingly eternal products. Designing for ephemerality means building with grace: ensuring data portability, leaving documentation artifacts, and treating longevity as a bonus rather than a guarantee. This approach shifts focus from chasing immortality to creating meaningful impact, embracing impermanence as a design principle that adds weight rather than diminishes value.
Wise's design team has been exploring AI ahead of its Design Day, developing practical frameworks for prompting and even creating a witty “Prompt Coach” in Gemini to help colleagues improve their skills. By blending design thinking with AI, they've turned prompting into a teachable craft, showing that AI can complement and scale their work rather than replace it.
Create captivating videos in just minutes with the power of AI. No prior video editing experience is needed.
Nuraform is an AI-powered form builder that helps you create beautiful forms in seconds. Simply describe your form, and AI generates it in seconds.
Convert any raster image to crisp, scalable vectors with AI-powered smart grouping, layer naming, and industry-leading accuracy.
Learning frontend development fundamentally changed this designer's approach by revealing the underlying layers and relationships in user interfaces beyond just visual elements. Understanding CSS, design tokens, and semantic HTML improved their ability to create scalable systems, design with accessibility in mind, and collaborate more effectively with developers through shared technical language. While the designer is not pursuing full-time development, the coding experience enhanced design practice by fostering empathy, curiosity, and cross-functional partnership skills.
Peter Schmidt, who died this July at 87, was a pioneer of holistic branding in Germany, shaping iconic identities for Jil Sander, Grohe, HUGO BOSS, and more while elevating German design to international recognition. His legacy of timeless, purposeful aesthetics lives on through the Peter Schmidt Group, one of Europe's largest agencies, which continues to apply his philosophy and even uses a typeface based on his handwriting.
Saint-Urbain crafted Massi's brand identity from designer Ostroff's childhood memory, using Scopa card game characters, vintage Italian deli lettering, and warm, nostalgic palettes to create a playful yet authentic visual system. The result balances cultural resonance and craftsmanship with approachable charm, turning the restaurant into both a neighborhood anchor and a design success embraced by the community.
Inflatable design is transforming architecture and product development by offering lightweight, portable alternatives to rigid structures that can adapt to modern lifestyles, which demand flexibility.
Taylor Swift's latest album, "The Life of a Showgirl," features nine alternative covers, exemplifying a trend where artists release excessive variants of album artwork.
Peter Judson's new series, Staring At Fields, uses pixel-art animations inspired by the CMYK palette to explore how colour, form, and sound interact to create fragile moments of harmony.
Sponsored
Every growing B2B SaaS needs solid auth and user management. The problem? Building it in-house drains engineering resources from the product your customers actually use.
Anthropic raised $13 billion in a Series F round, valuing the company at $183 billion. Significant investors include ICONIQ, Fidelity, and Lightspeed. This funding will support growing enterprise demand, safety research, and international expansion.
OpenAI has acquired Statsig and named its founder, Vijaye Raji, as CTO of Applications. Raji will oversee ChatGPT and Codex engineering. The acquisition strengthens OpenAI's experimentation capabilities, enhancing product development and responsiveness. Statsig will operate independently in Seattle, with continuity for current customers.
Secondary sales hit $162 billion in 2024, up 45% from the previous year, with founders increasingly cashing out small portions during funding rounds - Revolut's CEO just sold $200-350 million while companies like Stripe, Databricks, and OpenAI run regular employee liquidity programs. The old taboo against founder secondaries has died because IPOs now take 10+ years, and founders need basic financial stability, but the key is moderation.
HubSpot's success stems from its focus on predictable, compounding growth through inbound marketing and platform development. Expanding from a marketing automation tool to a comprehensive system of record, HubSpot increased customer retention and ARPU. Strategic acquisitions and significant R&D investments further solidified its position, creating sustainable competitive advantages and continual growth.
Revenue leakage, the gap between potential and collected revenue, often occurs due to system misalignments across sales, finance, and customer service. Common causes include missed invoices, unintended discounts, churned customers still receiving service, and untracked credit memos. Identifying and addressing these leaks is crucial for maintaining revenue integrity and ensuring organizational efficiency.
Modern CFOs act as business operators, focusing on turning capital into outcomes rather than just financial reporting. They prioritize strategic judgment, guide growth decisions, and align business metrics with execution goals. A CFO who thinks like a founder can provide clarity amidst startup chaos, enabling faster, more effective decision-making.
Sponsored
Entire companies live on Slack. But to make things happen, companies need Gmail, Linear, HubSpot, etc. — which means context switching and coordination problems. Zest AI helps make Slack your everything app [11]: Simply _@Zest_ to search for an answer, create a Linear issue, retrieve knowledge from Notion, or anything else. Start in 2
Jinear is an open-source, self-hostable task manager and calendar app built for small teams and privacy-conscious users to manage projects, tasks, and schedules collaboratively.
DrDroid is an AI-powered on-call assistant that automates incident triage, troubleshooting, and fixes by integrating with 50+ ops tools to help engineers resolve production issues faster.
Zero is an AI-powered email client that drafts replies, summarizes threads, extracts action items, and helps manage inboxes with lightning-fast keyboard navigation and smart, personalized workflows.
This post recommends 12 essential books for startup founders tackling initial challenges that emphasize customer development and achieving product-market fit. They include "Running Lean" by Ash Maurya for Lean Startup methodologies and "Effectual Entrepreneurship" by Saras Sarasvathy on venture growth. It is important to focus on discontinuous innovation, building relationships, understanding customer perspectives, and iterating based on real offers to refine products and business strategies.
SaaStr has transitioned to a workforce comprising 60% AI, significantly boosting efficiency and output at a reduced cost. Key functions handled by AI have tripled content production, managed over 100,000 chat interactions, and built substantial sales pipelines. The shift raises questions about maintaining company culture, as AI teams bring productivity but lack the human energy and interaction that traditional teams offer.
VCs are heavily investing in formal verification, a niche programming skill that uses mathematical models to ensure software reliability beyond traditional testing. Companies like Certik and Quantstamp leverage formal verification for blockchain security, while AWS employs it for cloud infrastructure stability. This critical skill, integral to high-stakes applications like AI safety, attracts significant funding as it promises unbreakable software and a future built on trust.
AI agent startups are rapidly scaling with several, like Anysphere and Moveworks, exceeding $100M ARR.
Platforms like Genies, Grok, and Woebot offer customizable avatars with dynamic behaviors.
OpenAI called on Governor Newsom to align California's AI regulations with emerging federal and global safety frameworks, such as the EU AI Code of Practice and CAISI agreements, to avoid fragmented rules that could slow innovation.
Sponsored
_Your MDR provider_: "We've escalated this to our Tier 2 team, expect a response in 2-4 hours"
Zscaler confirmed that a threat actor compromised OAuth tokens via the Salesloft Drift integration from August 8 to 18, exposing business contacts and Salesforce data. Though core infrastructure remained secure, the breach revealed names, emails, job titles, phone numbers, and licensing info. The attack extended beyond Salesforce, targeting AWS keys and Snowflake tokens across multiple organizations. Zscaler revoked Drift's access and rotated API tokens.
The Go module "golang-random-ip-ssh-bruteforce" mimics an SSH brute-force tool but secretly exfiltrates credentials to a Telegram bot (@sshZXC_bot) controlled by Russian-speaking threat actor IllDieAnyway. It scans random IPv4 addresses on port 22, attempts to log in with default IoT credentials (such as "root"/"admin" with passwords like "toor"), and then stops after the first successful login to avoid detection. Active since June 2022 and still on pkg.go.dev despite removal requests, it exploits trust in security tools, turning them into credential harvesters using ssh.InsecureIgnoreHostKey() and the HTTPS Telegram API are used to evade monitoring.
Palo Alto Networks suffered a data breach due to compromised OAuth tokens from the Salesloft Drift breach. The attacker primarily extracted business content and related account information, internal sales account records, and basic case data from their Salesforce environment. They were searching for secrets, including AWS access keys, Snowflake tokens, VPN and SSO login strings, and generic keywords.
Attackers have been exploiting CVE-2024-36401 in GeoServer to deploy legitimate SDKs and bandwidth-sharing apps that monetize victims' internet connections, operating stealthily with minimal resource consumption while generating passive income through residential proxy networks. The campaign uses Dart-compiled executables distributed via transfer. To maintain persistence, attackers are targeting over 7,000 exposed GeoServer instances globally, while evading detection by shifting their infrastructure with different IP addresses. The exploit leverages JXPath extension functions to achieve remote code execution, allowing attackers to download and execute monetization payloads that masquerade as legitimate passive income services.
Long-lived IAM access keys can present risks such as credential exposure, unauthorized sharing, or theft. AWS CLI access can be achieved with CloudShell or via IAM Identity Center to avoid using access keys. Users can work with IDEs without using access keys by leveraging the AWS Toolkit extension for IDEs such as VS Code. IAM roles can be leveraged by CI/CD pipelines, on-premise workloads, or third-party applications instead of access keys.
Tailscale offers a web-based SSH tool called Tailscale SSH that can be used to SSH into connected devices without the need to manage SSH keys. It utilizes an ephemeral authentication key to create an end-to-end encrypted tunnel in a pop-out browser window to allow for one-click access via the admin panel. Tailscale SSH requires users to run the open-source version of Tailscale's Mac client to access Macs and does not work on Synology or QNAP systems.
SAMLSmith is a C# tool designed for creating custom SAML responses and executing Silver SAML and Golden SAML attacks. It offers extensive features suitable for security researchers and penetration testers dealing with SAML-based authentication systems.
`mcp-context-protector` is a security wrapper for LLM apps using MCP that defends against line jumping attacks and prompt injection via tool descriptions and ANSI escape codes. It requires users to review new and modified server descriptions and tool definitions. The tool sanitizes ANSI sequences to prevent prompt injection and is implemented as an MCP. It is unable to evaluate chain-of-thought attacks.
This repository is a maintained fork of the Burp Automator tool, originally at 0x4D31/burpa, which was left abandoned. It provides a high-level CLI and Python interfaces to Burp Suite scanner and can be used to set up Dynamic Application Security Testing (DAST).
Any organization that wishes to retain its ISO 27001 certification must upgrade to the latest 2022 standard by October. This post breaks down the clauses that cover formal certification requirements and are the focus of the audit process and provides examples of how each clause can be applied in practice. The post also highlights which of the Annex A controls were revised or added in the 2022 standard.
Modern infostealers operate through a sophisticated malware-as-a-service model, executing complete credential harvests within minutes using silent entry, stealthy data collection (including session cookies that bypass MFA), and traceless exfiltration before victims realize they've been compromised. These tools have evolved from simple keyloggers into turnkey identity harvesting systems that extract browser credentials, hardware IDs, personal documents, and cryptocurrency wallets, with stolen logs selling for as little as $10 on underground markets and Telegram channels. The harvested credentials serve as the foundation for 90% of corporate breaches, enabling initial access brokers to monetize compromised accounts through ransomware operations, financial fraud, and identity theft in an increasingly specialized cybercrime economy.
Jaguar Land Rover halted operations after a cyberattack disrupted its retail and production activities. The company is carefully rebooting its global applications, reporting no customer data theft so far. Experts say the breach was spotted late, and JLR is now working with responders to restore service and lock out attackers from its systems.
Cloudflare has autonomously blocked hundreds of hyper-volumetric DDoS attacks over the past few weeks, with the largest reaching peaks of 5.1 Bpps and 11.5 Tbps.
NIST updated its security controls to improve software patching to emphasize logging, root cause analysis, and designing for cyber resilience.
Frostbyte10 is a critical vulnerability in Copeland controllers, used by major grocery chains for refrigeration, that allows hackers to manipulate temperatures and potentially spoil food and medicine remotely.
Sponsored
Working from your kitchen was fine for 2020. But in 2025, you shouldn't be hunched and achy on your WFH days.