Search the archive

BMX ENTERS INTO A DATA PARTNERSHIP WITH TOKEN TERMINAL

BMX, a rising derivatives exchange on Base and Mode Network, has partnered with Token Terminal to enhance transparency and data reporting.

PANTONE'S 2025 COLOR OF THE YEAR IS A DELICIOUS FLAVOR OF BROWN

Mocha Mousse (17-1230), Pantone's 2025 color of the year, is a versatile, seasonless brown blending neutrality and luxury. It complements vibrant pastels, rich hues, and white, symbolizing thoughtful indulgence and cultural wholeness. This adaptable shade reflects post-pandemic mindsets, promising lasting relevance across industries, including fashion, design, and digital platforms like Wix.

PENTAGRAM'S CONTROVERSIAL NEW WEBSITE COULD CHANGE THE AI ART DEBATE

Pentagram's recent use of AI in designing the website for Performance.gov surprised many in the industry. Despite criticism over the company's collaboration with Midjourney, partner Paula Scher has defended the decision. This highlights an evolving landscape where AI's role in design challenges and transforms traditional practices.

THE MACBOOK PRO TOUCH BAR IS BEING REVIVED

A new Kickstarter project by Eniac introduces the Flexbar, a standalone 10-inch 2K OLED touchscreen inspired by Apple's discontinued Touch Bar. The customizable device allows users to create macros, offers haptic feedback, and includes a magnetic stand but lacks Bluetooth connectivity.

STOP WIREFRAMING (BUT STILL START LOW-FIDELITY)

Wireframes, once crucial in UX design, are now less essential due to modern design tools and systems advancements. Originally a workaround for tooling limitations, they are increasingly redundant as visual design has become just as efficient and accessible.

NO SOCIAL MEDIA FOR PEOPLE UNDER 16: WHAT THAT MEANS FOR UX

Australia's ban on social media for children under 16 aims to safeguard mental health and reduce harm like online bullying. This shift challenges designers to prioritize ethical, user-focused experiences over addictive practices. The policy encourages privacy, simplicity, and education innovation, allowing young users to create healthier digital ecosystems.

WHY MICROTYPOGRAPHY IS KEY TO FLAWLESS DESIGN

Microtypography refines design by focusing on kerning, spacing, and alignment to enhance readability, accessibility, and aesthetics. It supports branding, improves device usability, and elevates a website's value through seamless user experiences. Avoiding errors like overtightened kerning or improper line heights ensures that designs remain functional and visually appealing.

GAME UI WIREFRAME KIT (FIGMA RESOURCE)

Create simple, low-fidelity mockups of game UI using dozens of components.

BUILD ANIMATED SITES 10X FASTER

Spark UI is a collection of animated components built with Vue3, TailwindCss, and @vueuse/motion. It combines the best of various animated components and offers a diverse and powerful toolkit for quickly creating sleek, animated, and modern interfaces.

UNFOUND GOES BEYOND SUPERFICIAL STEREOTYPES FOR COLLAGEN BRAND INGENIOUS

Ingenious, a UK collagen brand redesigned by Unfound Studio, emphasizes science, wellness, and vitality over superficial beauty. The rebrand features confident messaging, a unique capsule delivery system, and a modern identity for active city dwellers and lifestyle-focused consumers.

THE NEXT ERA OF DESIGN IS INTENT-DRIVEN

Search interfaces have evolved from simple "10 blue links" to intelligent, context-aware formats that adapt to user intent. This shift, marked by milestones like Google's Knowledge Graph and the current contextual UI era, raises user expectations and transforms digital tools across industries.

HOW TO WRAP UP CREATIVE WORK LIKE A PRO BEFORE THE FESTIVE HOLIDAYS

The end of the year often overwhelms creative professionals with deadlines and client demands. Strategies like prioritizing tasks, setting clear client expectations, automating workflows, and organizing digital files can ease the workload. Incorporating self-care, mindfulness, and intentional relaxation ensures a smoother transition into the holidays while fostering a refreshed start to the new year.

I CAN'T GET ENOUGH OF THIS VIRAL TREND OF POSTING INDIE GAME MAIN MENU UI DESIGNS

Indie devs are sharing main menu designs on X, showcasing the unique artistry of indie games through a range of styles, from minimalist menus to intricate animations.

KAKANIN SQUAD: CHARACTER CONCEPT ARTWORKS AND ILLUSTRATIONS BY JOHN PATRICK GAÑAS

John Patrick Gañas merges vibrant creativity with cultural inspiration by reimagining Filipino desserts as video game characters in his "Kakanin Squad," showcasing rich heritage through modern artistry.

MEET THE DESIGNER WHO KNITS WITH WIND POWER

Merel Karhof uses wind-powered knitting machines to create scarves, upholstery, and more, blending traditional craftsmanship with sustainable energy to showcase wind power's artistic and eco-friendly potential.

A16Z'S BIG IDEAS FOR 2025

50 a16z partners share their predictions for major innovations in 2025. Top ideas include: AI companions with rich inner worlds, game tech transforming how businesses operate, on-device AI and multi-modal databases becoming ubiquitous, stablecoins disrupting traditional payments as adoption grows, a second wave of "faceless" video creators leveraging AI, and hyperscale AI compute infrastructure influencing geopolitical power dynamics.

HOW CEOS SHOULD THINK ABOUT GROWTH

The CEO's real job is deciding what matters most and rallying the team to get it done. To grow faster, CEOs must pick one of three levers - creating more opportunities, converting more opportunities, or reducing churn - and focus relentlessly on improving it. Trying to fix everything at once leads to an exhausting "just try harder" doom loop. The best CEOs make a clear bet on the single thing that will truly move the needle.

HIRING PLANS FOR 2025

Building the right team at the right time is critical for success, but most companies get hiring wrong by budgeting based on last year's needs. Zero-based budgeting, carefully selecting the experience level you need, and quickly removing mediocre performers are keys to assembling an A-team that fits your company's stage.

EFFORT JUSTIFICATION

We view outcomes more favorably when we've invested time or effort into achieving them. Brands can leverage this by requiring effort that makes the value feel "earned," like Duolingo's rewards system or Costco's paid memberships. Creating experiences that demand investment can lead to more satisfied, loyal customers who believe their decision was worth it.

7 PSYCHOLOGICAL DRIVERS OF REFERRAL BEHAVIOR TO ACCELERATE B2B GROWTH

To create successful B2B SaaS referral programs, you must understand the psychological drivers of referral behavior. Effective programs cater to "transactional referrers" motivated by tangible rewards while also considering the social capital they spend by referring. Meaningful rewards, thoughtful design, and A/B testing are key to aligning incentives with user motivations. Cello shares proprietary data and research on best practices to drive sustainable referral growth.

WHY YOU SHOULD LEARN FROM YOUR COMPETITOR'S AD COPIES

80% of your ad copy's success lies in the messaging. While marketers are expected to blend creativity with strategy to come up with ad copies that drive conversion, they don't always need to start from scratch. By analyzing competitors' ads, one can uncover valuable insights into messaging that resonates with the target audience - be it the tone that works, keywords that convert, or ad spend that is cost-efficient. This blog provides a structured approach to learning from your competitors.

LOVABLE.DEV

Idea to app in seconds.

LAYUP

AI assistant that guides your users in-app.

WHY FOUNDER CEOS ARE (PROBABLY) BETTER THAN HIRED GUNS

Founder CEOs demonstrate deep commitment to their startup's vision, driving innovation and strong IPO performance, but can struggle to scale. Hired CEOs bring experience and networks, but may disrupt culture and values if poorly managed. Data shows that founder-led unicorns have 10-18% higher valuations, and most top recent IPOs had founder CEOs. Founders invest more in R&D and have greater risk appetite. Overall, data suggests founders are best for fast-growing startups, but each case is unique.

HOW DOES THE ANATOMY FRAMEWORK RATE THE CURRENT GENERATIVE AI WAVE?

Generative AI significantly impacts all technology stack layers, with key developments in infrastructure, core platforms, applications, tools, and ecosystem enablers. Both startups and incumbents drive AI innovation across hardware and software, meeting surging demand despite challenges like the "compute crunch." The potential for generative AI to underpin future innovations remains promising, evidenced by breakthroughs like solving complex mathematical problems.

HOW NOTION USED COMMUNITY TO SCALE TO 20M+ USERS

CEO PROTECTION TAKES CENTER STAGE

Companies are increasing security spending for senior executives in the wake of the UnitedHealthcare CEO's assassination.

PAUL GRAHAM ON HOW TO GET STARTUP IDEAS

The best way to get startup ideas is to learn about things that interest you and work on problems you care about with people you respect.

THE “QUIET QUITTING” MYTH IS TOXIC FOR TECH

The myth of "quiet quitting" engineers earning $300k while doing little work is misleading and stems from mismanagement.

Download now →

ANNA JACQUES HOSPITAL RANSOMWARE BREACH EXPOSED 300K PATIENTS

Anna Jacques suffered a data breach towards the end of 2023 that led to the publication of the breached data in early 2024. The hospital concluded a manual review of the breached data in November 2024 and has notified the over 300K individuals who were affected. The exposed information includes demographic information, medical history, health insurance information, SSNs, driver's license numbers, and financial information.

SENIOR DATING DATA BREACH EXPOSES MORE THAN 700K USERS

A data breach at the app Senior Dating has exposed the data of over 700K users. The owner of the site acknowledged the breach as well as a breach on Ladies.com which affected over 100K users in an email announcing the closing of both apps. The breached data includes bios, dates of birth, drinking habits, education levels, email addresses, genders, geographic locations, occupations, profile photos, relationship statuses, smoking habits, and social media profiles.

WPFORMS BUG ALLOWS STRIPE REFUNDS ON MILLIONS OF WORDPRESS SITES

A bug in WPForms allows users to issue Stripe refunds on over 6 million WordPress sites. The vulnerability was categorized as high-severity and a patch has been released in version 1.9.2.2. Website owners are advised to update to the latest version to prevent potential revenue loss and business disruption.

THE DARK SIDE OF DOMAIN-SPECIFIC LANGUAGES: UNCOVERING NEW ATTACK TECHNIQUES IN OPA AND TERRAFORM

Researchers from Tenable investigated the OPA policy-as-code language and the Terraform infrastructure-as-code language and discovered new attack techniques. When investigating OPA they found that data can be exfiltrated from IMDSv2 using the http.send function in Rego or via DNS tunneling if http.send is disabled. In Terraform, the team explored some known weaknesses in Terraform plans such as usage of the external, HTTP, or external data source as well as the local-exec and remote-exec provisioners. Tenable suggests only using trusted modules and policies, setting up cloud and application logging, limiting network access, and scanning to mitigate these risks.

CROSS-IDP IMPERSONATION: HIJACKING SSO TO ACCESS DOWNSTREAM APPS

Cross-IdP impersonation is an attack in which an attacker signs up for an account on an app that can function as an IdP and links it to the employee's company email address via a “use existing email” option. The attacker then either bypasses verification or verifies the domain by clicking a link in the email (or socially engineering an employee to click the link). The attacker can then sign into downstream apps by using the “sign in with” option with their impersonated IdP. Application protections against this attack vary significantly so Push Security suggests that companies alert on activation links to employee's emails, warn users of the risks associated with phishing, where possible configure SaaS apps to require reauthentication to add a new IdP, and where possible prevent the conversion of a personal account to a corporate account.

INSIDE ZLOADER'S LATEST TRICK: DNS TUNNELING

Zloader, a malware originally designed for banking trojans, has evolved into a sophisticated ransomware deployment tool. It now uses DNS tunneling, anti-analysis capabilities, and an interactive shell. Zloader attacks have become more targeted, and the malware has been updated with new features to evade detection. A specific variant, "BB3", is linked to Black Basta ransomware operations. Zloader's authors are focused on making the malware more resilient against security controls.

entitlements, and approvals with ZSP. Download now

VMI

Vmi (Virtual Machine Introspection) is a Rust library that provides safe abstractions for analyzing and manipulating virtual machine state from outside.

AN OFFENSIVE RUST ENCORE

This is a list of various Rust resources and tools to write secure Rust code.

GOCRACK

GoCrack is a management frontend tool from Mandiant that provides APIs for managing password cracking tasks.

I BOUGHT US-EAST-1.COM: A LOOK AT SECURITY, DNS TRAFFIC, AND PROTECTING AWS USERS

In 2021, Gabriel Koo noticed that the us-east-1.com domain was available and purchased it to prevent potential phishing. The most frequent DNS query that Koo observed was to a presumably production database (prod-backend-db.randomHash.us-east-1.com). Other top queries were to a loopback streaming service, a Cisco static file reputation host, and various cloud storage services. Koo encourages users to utilize tools like Route 53 Resolver DNS Firewall to prevent possible typos like this one.

WHAT SUCKS IN SECURITY? RESEARCH FINDINGS FROM 50+ SECURITY LEADERS

In this article, Maya Kaczorowski distills lessons from interviews from 57 security leaders and discovers that the top three pain points in security are access management (overwhelmed by access request tickets), vulnerability management (struggling with too many vulnerabilities to patch), and SaaS logs (difficulty accessing and analyzing logs during incidents). Beyond technical issues, cultural complications like vendor sprawl, unclear ownership of assets, and challenges in communicating security risks make these problems even more difficult to address. While there's excitement about AI improving security tooling, many core security challenges remain fundamentally unchanged, with few true breakthrough innovations that have eliminated entire classes of security issues.

FEDERAL APPEALS COURT UPHOLDS LAW THAT COULD BAN TIKTOK

A DC circuit appeals court has upheld the law requiring TikTok to sell to an American owner or face an effective ban.

WYDEN PROPOSES BILL TO SECURE US TELECOMS AFTER SALT TYPHOON HACKS

Senator Ron Wyden proposed a bill to enhance cybersecurity for U.S. telecom networks after Chinese state hackers breached major carriers earlier this year.

“CP3O” PLEADS GUILTY TO MULTI-MILLION DOLLAR CRYPTOMINING SCHEME

A man named Charles O Parks III, also known as "CP3O," pleaded guilty to wire fraud charges for running an illegal cryptomining operation that stole over $3.5 million worth of cloud computing resources.

The best campaigns don't wait until January. TLDR helps marketers

connect with an engaged audience of millions—engineers, founders, and tech leaders who turn to us daily.