Search the archive

with pricing in 2025. Grab your free copy

AI'S LABOR IMPACT, AND HOW TO NOT LOSE OUR MINDS

Stanford researchers analyzed payroll data from 25 million American workers and found AI is already replacing early-career workers in specific fields. Software developers aged 22-25 have seen 6% job losses since ChatGPT launched, while developers over 30 gained 9% more jobs in the same period. Customer service shows the same pattern - young workers losing jobs, older workers gaining them. The data suggests AI isn't coming for all jobs or even most jobs, but it's systematically eliminating the entry-level positions in fields where experience matters less and tasks can be automated.

KLARNA TO SEEK VALUATION OF UP TO $14 BILLION IN IPO NEXT MONTH

Klarna plans to go public in the U.S. next month, seeking a valuation of $13-$14 billion after pausing its IPO in April. The fintech company aims to raise nearly $1 billion, with shares priced at $34-$36. This reflects a significant drop from its 2021 valuation target of $50 billion.

XAI HAS OPEN-SOURCED GROK 2.5

xAI open-sourced the model weights for Grok 2.5, its leading model from last year, on Hugging Face. Elon Musk noted that Grok 3 is expected to be open-sourced in about six months.

THE FOUNDER'S GUIDE TO EFFECTIVE SOCIAL MEDIA USE

PREVENTING CHURN

Many tech companies enforce long-term contracts to mask churn by preventing dissatisfied customers from leaving. This tactic hides dissatisfaction rather than addressing root problems, leading to customer resentment and lost future revenue. Instead, companies should prioritize customer satisfaction and renewals through excellent product and service, fostering loyalty without forced commitments.

5 INTERESTING LEARNINGS FROM GOOGLE CLOUD AT $54 BILLION IN ARR

Google Cloud's ARR reached $54 billion, with a 31.7% growth driven by AI advancements. Key drivers include increased infrastructure demand, new revenue from Gemini AI models, and competitive AI-native positioning. Google also reported 38% backlog growth, a 35x increase in Gemini customer adoption, and larger deal sizes, indicating robust enterprise adoption and confidence in sustained growth.

CLAUDE FOR CHROME

Claude has released a new browser extension for Chrome.

INCONVO

Build ChatGPT-style analytics into your product.

RUBBRBAND

Create movies with AI.

RILLET RAISES $70M SERIES B FROM ANDREESSEN HOROWITZ AND ICONIQ

Rillet raised $70M in a Series B funding round led by Andreessen Horowitz and ICONIQ, bringing its total funding to over $100M in less than a year. The AI-native ERP platform, designed for modern finance teams, is rapidly growing with over 200 customers, including strategic partnerships with top accounting firms. Rillet aims to redefine enterprise accounting by offering faster insights, leaner teams, and improved decision-making through native integrations and AI-powered financial systems.

ZERO-WASTE GTM

Public SaaS companies are spending between $2 and $8 to acquire $1 of revenue. Most of this money goes to the same place: trying to get leads into the top of the funnel. Monday.com learned this lesson painfully when its stock dropped 30% in a single day after admitting organic search had dried up. Without a cheap pipeline, you grow slower or pay more. Now, everyone's betting AI will save them, but AI SDRs are producing the same mediocre results as human SDRs, only faster and in greater volume. The math suggests something different: use AI to cut your sales team in half while keeping revenue flat, then pour those savings into finding new customers.

TO LEARN A NEW MARKET, START BY BUILDING YOUR PRODUCT

Othman Laraki left Twitter to build a $250 genetic test because the one that could have saved his grandmother cost $4,000. He knew nothing about healthcare but figured the technology was simple enough. After two years of talking to doctors and insurance companies, he learned that healthcare doesn't work like normal markets - even if you make something 90% cheaper, insurance companies can't buy more of it from just you because doctors want tests from specific labs, so they restrict the whole category instead. The cheap test was the wrong product anyway. Big employers who actually pay for healthcare don't want to buy individual tests, they want to cut their cancer costs by millions. So Laraki built a virtual cancer clinic instead, which is now worth a billion dollars. Most technical people think everyone before them was incompetent, but usually those people were just responding to incentives you don't understand yet.

THE LATEST B2B IPO IS NETSKOPE. AND IT'S FIRE

Netskope filed to go public at $707 million in annual revenue, growing 33% - numbers that shouldn't coexist at this size.

MINIMALLY VIABLE CONSISTENCY

Companies love copying simple operating systems from the outside without understanding why they work.

THE ILLUSION OF EXPLANATORY DEPTH

Ask someone to explain how a toilet works and watch them stumble.

Supersolution Every Business Can Afford_

ROWHAMMER ATTACK CAN BACKDOOR AI MODELS WITH ONE DEVASTATING BIT FLIP

ONEFLIP is a Rowhammer-based attack that can insert backdoors into AI models by flipping just a single bit in DRAM memory during inference. The attack targets vulnerable weights in the final classification layer of neural networks, allowing attackers to craft imperceptible trigger patterns that cause catastrophic misclassification (such as making self-driving cars misidentify stop signs as speed limit signs) while maintaining normal model accuracy for other inputs. It requires access to a white-box model and co-location on the target machine with DDR3/DDR4 memory, making it particularly concerning for multi-tenant cloud platforms and AI inference servers.

CISA WARNS OF ACTIVELY EXPLOITED GIT CODE EXECUTION FLAW

A new arbitrary code execution flaw in Git is being actively exploited. The vulnerability stems from Git mishandling carriage return characters in configuration files, which can lead to incorrect submodule path resolution. Attackers can exploit this vulnerability by publishing repositories with submodules that end in a carriage return (\r) and creating a crafted symlink with a malicious hook set up.

HEALTHCARE SERVICES GROUP DATA BREACH IMPACTS 624,000

A cyberattack on Healthcare Services Group exposed the personal data of over 624,000 people, including Social Security numbers and financial info, in late 2024. No identity theft has been reported, but victims have been offered free credit monitoring.

AGENTIC BROWSER SECURITY: INDIRECT PROMPT INJECTION IN PERPLEXITY COMET

An indirect prompt injection vulnerability in Perplexity Comet allows attackers to embed malicious instructions in webpage content, hijacking AI assistants and stealing sensitive data across authenticated sessions. The attack exploits Comet's inability to distinguish between user instructions and untrusted webpage content, allowing attackers to extract OTPs, access banking accounts, and perform unauthorized actions without the user's knowledge. Defenders should implement clear separation between user commands and webpage content, require explicit user confirmation for sensitive actions, and isolate agentic browsing from regular browsing sessions.

ENUMERATING AWS THE QUIET WAY: CLOUDTRAIL-FREE DISCOVERY WITH RESOURCE EXPLORER

DataDog discovered a now-patched enumeration technique for AWS that evades CloudTrail logging. AWS Resource Explorer is a service that provides a web-search-like interface for discovering resources in an account. The researchers found that the ListResources API call was previously categorized as a data event and, therefore, did not log to CloudTrail by default. AWS reclassified the call as a management event, which logs to CloudTrail by default, after DataDog alerted it to this technique.

TRACKING MALICIOUS CODE EXECUTION IN PYTHON

This article discusses techniques that cyber attackers use to hide malicious code execution in Python, focusing on the obfuscation of dangerous functions such as exec and eval. It explains how attackers bypass security tools using methods such as homoglyphs, built-in modules, variable reassignment, import tricks, and code obfuscation (e.g., with base64). The article introduces a static analysis library that detects these tricks, highlighting that tracking such abuses is challenging. It emphasizes the importance of combining automated analysis with human review for effective defense.

ULTIMATELSASSDUMPER

UltimateLsassDumper guides users through eight LSASS dumping techniques: Task Manager automation, rundll32-comsvcs minidump, MiniDumpWriteDump API, handle duplication, PssCaptureSnapshot, SilentProcessExit registry tweaks, and entire memory read using ReadProcessMemory. It explains methods with code examples, comparing benefits like avoiding child processes, disk writes, and detection. It also discusses modern mitigations such as LSA Protection (PPL) and Credential Guard (VBS/VTL), with bypass options via vulnerable drivers, PPL bypasses, and downgrades.

EVE

Eve is a Jamf exploitation toolkit used to interact with either cloud hosted or locally hosted Jamf Pro tenants using API calls.

SBOMQS

Sbomqs is a tool for evaluating SBOM quality, ensuring compliance, and managing your software supply chain security. From quality scoring to compliance validation, component analysis to vulnerability tracking - Sbomqs provides everything you need to work with SBOMs effectively.

WHY SIEM RULES FAIL AND HOW TO FIX THEM: INSIGHTS FROM 160 MILLION ATTACK SIMULATIONS

The Picus Blue Report 2025 analyzed 160 million attack simulations and found organizations detect only 1 out of 7 attacks, with 50% of failures attributed to log collection issues, including source coalescing, unavailable log sources, and network disruptions. Additional failure causes include rule misconfigurations (13%) and performance bottlenecks (24%) from resource-heavy rules and inefficient queries that overwhelm systems. Organizations must implement continuous validation through breach and attack simulation to test rules against evolving TTPs, optimize log collection pipelines, and tune detection thresholds to close critical security gaps.

BLISTERING WYDEN LETTER SEEKS REVIEW OF FEDERAL COURT CYBERSECURITY, CITING ‘INCOMPETENCE,' ‘NEGLIGENCE'

Senator Ron Wyden demanded that Chief Justice Roberts authorize an independent cybersecurity review of federal courts following allegations that Russian hackers had stolen sealed case data from systems with vulnerabilities that had been left unfixed for five years. Wyden criticized the judiciary's failure to implement mandatory cybersecurity requirements, slow adoption of phishing-resistant multifactor authentication, and a pattern of stonewalling congressional oversight about previous breaches. The letter highlights systemic cybersecurity failures in the handling of critical government infrastructure, including classified national security documents and sealed criminal investigations.

SALESLOFT BREACHED TO STEAL OAUTH TOKENS FOR SALESFORCE DATA-THEFT ATTACKS

Hackers breached the sales automation platform Salesloft to steal OAuth and refresh tokens via its Drift chat agent integration with Salesforce. Salesloft's SalesDrift platform connects the Drift AI chat agent with a Salesforce instance, allowing organizations to sync conversations, leads, and support cases into their CRM. Salesloft determined that this breach only impacted customers who use the Drift-Salesforce integration and has worked with Salesforce to revoke all active sessions and refresh tokens for the Drift application.

FCC REMOVES 1,200 VOICE PROVIDERS FROM TELEPHONE NETWORKS IN MAJOR ROBOCALL CRACKDOWN

The FCC blocked 1,200 voice service providers from U.S. phone networks for failing to comply with STIR/SHAKEN caller authentication requirements and robocall mitigation protocols.

GOOGLE TO VERIFY ALL ANDROID DEVELOPERS IN 4 COUNTRIES TO BLOCK MALICIOUS APPS

Google, aiming to prevent malicious apps and enhance security, will require all Android app developers in Brazil, Indonesia, Singapore, and Thailand to verify their identities by September 2026.

FRENCH RETAILER AUCHAN CYBERATTACK - THOUSANDS OF CUSTOMERS' PERSONAL DATA EXPOSED

Auchan suffered a cyberattack that exposed the loyalty program data of hundreds of thousands of customers, prompting alerts, phishing warnings, and a response to its second major breach in nine months.

LINKEDIN DEEPENS VIDEO AD PUSH, TAPS MORE PUBLISHERS AND CREATORS TO SPUR GROWTH

LinkedIn is expanding its BrandLink program by adding more publishers and creator-led video shows, with sponsors including AT&T Business, IBM, SAP, and ServiceNow. Since launching, it has brought in over 70 publishers and creators, with the number of creators on the platform nearly doubling since 2021. BrandLink revenue rose nearly 200% in the three months to June 30 compared to the prior quarter, while publisher and creator payouts more than tripled year over year. Video remains one of LinkedIn's fastest-growing formats, with uploads up over 20% by July and views rising 36% year over year as of February.

NETWORKS, NOT AI OR SEARCH, ARE THE #1 TRUSTED SOURCE AMID INFORMATION OVERLOAD

LinkedIn research shows professionals trust their networks more than AI or search. 43% cited colleagues as their top source for advice, and 64% said networks help them decide faster. Rising AI expectations overwhelm workers, as 51% feel learning AI is like taking on another job. For brands, this means B2B buyers rely on peer insight as much as company channels.

GLOBAL MARKETING LEADERS SAY THEY'LL INVEST MORE IN SOCIAL MEDIA

80% of marketing leaders plan to shift funds to social media as it becomes central to customer acquisition, loyalty, and revenue. Top platforms driving business impact are Facebook (70%), YouTube (68%), and TikTok (64%). 87% of leaders will increase paid social spend, over 80% will raise investment in influencer and organic social, and 75% plan to grow social team headcount, especially in SEO roles. However, only 44% rate their teams as “expert” in measuring ROI, which is often blamed on a lack of sophisticated reporting.

DISCOUNT COUPONS: WHEN TO GIVE % OFF VS $ AMOUNT OFF

Percentage coupons are more effective for store-wide promotions than fixed amount discounts. In an analysis of over 70,000 grocery orders, percentage coupons led to 42% more customer spending, 56% larger basket sizes, and 50% more profitability compared to fixed amount coupons. Fixed amount coupons work better for discounts on specific products or brands because they are easier for customers to calculate. Very large discounts, such as 60%, can hurt sales if customers doubt product quality.

ETHOS IN ADVERTISING: WHY IT WORKS + EXAMPLES

81% of consumers say they need to trust a brand before buying, but only 39% trust advertising overall, creating both a challenge and an opportunity for businesses. Ethos, which focuses on credibility, builds trust by showing character, competence, and care. Small businesses can use strategies like testimonials, community engagement, founder highlights, celebrity or influencer endorsements, and awards to establish credibility in digital advertising. Credible ads lead to higher conversion rates, lower acquisition costs, and long-term customer loyalty. Unlike short-term discount ads, ethos-based marketing creates sustainable growth through trust and word-of-mouth.

UNLOCK NEW LOYALTY FEATURES IN GOOGLE ADS & MERCHANT CENTER

Google Ads is introducing new loyalty offerings for brands. Retailers can now personalize member-only pricing and shipping benefits across both free and paid listings on Google, designed to drive deeper engagement with the most valuable shoppers. Sephora has used personalized annotations to show signed-in shoppers specific discounts based on their loyalty tier, which resulted in a 20% increase in click-through rate for personalized ads shown to loyal customers. Google Ads is also launching a loyalty goal to help optimize budgets towards the highest-value shoppers.

ZUBTITLE

Zubtitle streamlines video editing for social media by automatically transcribing speech and adding captions, headlines, and progress bars. It also enables resizing and formatting for various social platforms.

SOP: AI-ACCELERATED WRITING

This “smart chain” turns complex topics into clear content through 7 steps. These include agent research, voice dictation, synthesis, examples, metaphor, polish, and micro-test with iteration. It provides ready prompts, quality checks, and deliverables, enabling end-to-end management of the content process.

PRIVACY-SAVVY, KID-SAFE: THE NEW PLAYBOOK FOR KIDS' ADS ON CTV

Kids' content and co-viewing households are very valuable for advertisers since children influence household purchases. However, strict privacy laws like COPPA and GDPR-K, combined with the growth of ad-supported and FAST platforms, make compliance a major challenge. Regulators judge campaigns by likely audience, not genre, so brands must replace data-driven targeting with context-based strategies, creative suitability, and data minimization.

A CHEEKY PINT WITH ANTHROPIC CEO DARIO AMODEI

In this interview, Dario Amodei, CEO of Anthropic, discusses how he built the company with his sister and six other co-founders. He covers their work with the DoD, how the team proved skeptics wrong on revenue, and how AI models display capitalistic impulses as they improve. He also explains the current AI market structure and players, AI advancements vs. safety regulations, and how he personally uses AI.

WILL THIS CONTENT WORK?

5 questions to ask if your website content is problem-led or playbook-led.

9 WAYS TO IMPROVE AN AD

Fred Manley critiques VW's famous "Think Small" ad, arguing that cleverness replaced clarity.

Watch or listen on-demand

ELIMINATING JAVASCRIPT COLD STARTS ON AWS LAMBDA

Porffor is a new JavaScript engine that compiles JS code ahead-of-time to WebAssembly and native binaries, creating much smaller and faster executables compared to Node.js and other runtimes. In AWS Lambda cold start benchmarks, Porffor performed ~12x faster than Node.js and ~4x faster than Amazon's LLRT while being over 2x cheaper to run than Node.js. However, Porffor is still in pre-alpha development with limited JavaScript support and no current Node.js API compatibility, making it unsuitable for production use yet.

FROM PYTHON TO GO: WHY WE REWROTE OUR INGEST PIPELINE AT TELEMETRY HARBOR

At Telemetry Harbor, the team initially chose Python FastAPI for their time-series data ingestion pipeline to prioritize rapid prototyping and market validation, but as their user base grew, they encountered severe performance bottlenecks with CPU usage spiking to 800% and system crashes under moderate loads. After careful evaluation between Rust and Go, they decided to rewrite their core ingest system in Go due to its balance of performance, simplicity, and easier learning curve compared to Rust's steep complexity.