SO-CON 2026 (April 13-18, 2026) [11] is where the community comes together to advance the practice of Attack Path Management. We are excited to share that Kevin Mandia, Founder and Former CEO of Mandiant, will deliver the featured keynote at SO-CON 2026 [11].
Prime Security (Prima) provides an AI-powered “agentic security architect” that autonomously performs design-stage security reviews across planned development work, continuously identifying, prioritizing, and helping mitigate software design flaws so security teams can focus on higher-level architecture strategy.
AI Infra Guard integrates capabilities such as AI infra vulnerability scan, MCP Server risk scan, and Jailbreak Evaluation to provide users with the most comprehensive, intelligent, and user-friendly solution for AI security risk self-examination.
Flare's research reveals that over 10,000 public Docker Hub images expose active secrets from more than 100 organizations, including a Fortune 500 company and a major bank, often via personal or “shadow IT” accounts. These images leak API keys and other live credentials for cloud, CI/CD, and AI services, and even when secrets are removed from images, about three-quarters of the underlying keys remain valid, leaving organizations open to compromise.
Nontechnical employees can quickly build Copilot Studio agents that connect to sensitive systems, but these bots are easily tricked into ignoring security instructions, leaking customer data, and even modifying records such as trip costs. Tenable's experiment with a travel-booking bot shows how simple prompt injections expose credit card details and abuse edit permissions.
A group of current and former CISOs, security leaders, and practitioners has released an open letter urging the public, employers, journalists, and policymakers to stop spreading outdated security recommendations. Specifically, they cited: avoid public WiFi, never scan QR codes, never charge devices from public USB ports, turn off Bluetooth and NFC, regularly clear cookies, and regularly change passwords as outdated advice. Instead, they recommend focusing on reminding the public to keep critical devices and applications updated, enabling MFA, and using strong passphrases and password managers.
Microsoft has announced an expansion of its bug bounty program to include any Microsoft service and third-party service that impacts Microsoft and doesn't offer its own bug bounty program.
The UK's Information Commissioner's Office (ICO) fined LastPass £1.2M over failing to implement security measures that could have prevented the 2022 data breach.
Building an integration that actually gets adopted is hard. But by integrating your app with CONTENTFUL [4], your product will get seen by customers who actively look for solutions like yours on the Contentful Marketplace.
AI is reshaping work from the bottom up, creating a widening gap between how individuals use AI and how organizations plan for it. Between 23% and 58% of employees bring their own AI to work, and 54% would use it without support, so informal usage is already shaping workflows and outputs. This shift makes judgment more important than skill and increases the cost of quality control as output rises and time spent falls. Marketers should treat emerging ‘vibes' as early signals of structural instability and prepare for new forms of debt created by AI-generated work that looks right, but is not actually right.
About 20% of US teens say they are on TikTok or YouTube almost constantly. 64% use AI chatbots, including roughly 30% daily. YouTube reaches nearly all teens, with TikTok, Instagram, and Snapchat also widely used, though Facebook and X have declined. ChatGPT is the most popular chatbot at 59%, more than twice the use of the next most common options. Older teens, Black and Hispanic teens, and those in higher-income households report higher usage of both social media and AI chatbots.
1 in 3 podcast creators are quitting as video production demands outpace what many can sustain, driving a 32% churn rate even though getting started is easier than ever. Many who leave prefer audio-first consumption while feeling pressured to produce video, which raises workload and accelerates burnout. At the same time, video adoption keeps climbing, with 71% of active creators using it. Younger and multicultural creators are fueling most of the growth. The tension between rapid video expansion and strong audio habits is reshaping who stays, who leaves, and where platforms need to focus to keep creators engaged.
Airbnb doubled its revenue in one week by replacing low-quality host photos with high-quality images that reduced uncertainty and increased trust. The founders photographed 24 listings themselves, which sparked a program that later used 2,000 photographers to shoot 35,000 listings across 5,000 cities. Listings with professional photos earned 2.5× more bookings and $1,025 more per month. The strategy worked because it solved a major trust gap in an experiential marketplace and showed that hands-on, unscalable work can reveal root problems that code alone cannot fix.
This video explains how to create AI video ads using a real example for HiBob. It covers identifying pain points with Perplexity, developing visual hooks, generating key frames with Gemini, producing footage with Enhancor and Kling, writing voiceovers using the TPSA formula, and recording and directing AI voice actors with ElevenLabs. The video walks through the full process from research to execution.
Showing up in LLM answers matters - but search engines are still the #1 discovery channel. With Semrush One [12], you get both keyword-based SEO metrics and prompt-level AI search insights. Measure visibility across SERPs and LLMs, in the same place. Sign up through Dec 31st for 30% off an annual subscription (new customers only) [12].
Creators can now enable comments on ads, link directly to brand websites, and run ads on mobile web and TV. For ad creation, use vertical 9:16 videos. Keep clips under 60 seconds and make ads look natural and social-friendly. Include audio and text overlays, and use creator content or original material to boost engagement and conversions.
This reading list skips the usual filler and focuses on tactical insights across audience building, psychology, and product marketing. Highlights include Smart Brevity for writing that spreads and Traction for choosing the right growth channels.
Customer acquisition cost is rarely applied to SEO due to complex attribution and delayed results. This article shows a way to calculate SEO CAC using only direct costs such as content production, link-building campaigns, tools, and consultants. It uses first-touch attribution to connect organic search to conversions. Early CAC figures are typically high but decrease over time as content continues to generate conversions without additional spend. The model shows that SEO can achieve a lower CAC than paid channels if investment continues over multiple periods.
Consumers act on small business content differently depending on platform, content type, and generation. Facebook leads in discovery for 61% of adults, while Gen Z favors TikTok (76%) and Instagram (70%). UGC is the most trusted at 31%, while AI-generated content lowers trust for 48%. Reviews and customer testimonials drive purchases for 52%, and trend-driven posts influence 30% of Gen Z.
Skipping discovery may feel fast, but it slows value creation and increases risk. Even with AI speeding up development, discovery is still essential for avoiding waste and building what users actually need.
AI will transform industrial systems, scientific discovery, and the way software works across consumer and enterprise settings. 2026 will bring new automation, new data sources, and new AI-native products that change how people build, operate, and interact with technology.
Most teams are not missing strategy - they are missing clear communication about it, which traps them in nonstop execution. The Strategy Flywheel helps teams regain time, choose better, and move forward with purpose.
PMs often burn out because they focus on tasks instead of shaping strategy and value. These lessons outline how to evolve from invisible execution to strong, strategic product leadership.
Dyad is a free, open-source tool that helps PMs build working web apps with Gemini and Supabase without coding or paying for premium platforms. It is a simple way to prototype, learn, and ship apps at no cost.
Imprint has been adopting AI internally by making tools easy to access, centralizing prompts, and building agents that meaningfully improve workflows. Strong adoption requires rapid learning, hands-on leadership, real domain context, and careful IT execution.
Black box work weakens trust and leads to unnecessary rework. Proactive communication builds alignment and makes you the person leaders rely on for major opportunities.
QualityLogic's TestNitro service delivers 100% automatable Playwright coverage in weeks, in your repo, at <70% lower cost. Tests added + maintained each sprint and only human-verified defects reported. Finally, automation that works. Finally, test automation that works!
Deepfakes now span image, voice, and video. They're flooding the internet and being used in sophisticated social engineering attacks. But detection tools are getting better as well.
Companies like SpaceX, Blue Origin, and Google are racing to figure out the viability of orbital data centers. Operating data centers in space will require overcoming several technical issues, including managing temperatures for hardware, protecting that hardware from radiation, and transferring data back to Earth without long lag times. Skeptics say that space-based data centers won't be competitive on cost. It may take tens of thousands of satellites to recreate the compute capacity of a gigawatt data center in space.
An us-versus-them mentality has emerged between Meta's top AI team and Mark Zuckerberg's longtime lieutenants. TBD Lab's researchers have come to view many Meta executives as interested only in improving the social media business, while the lab's ambition is to create superintelligence. Employees have disagreed over which division should get more computing power. Those working on the social media ranking algorithm have argued that more of the company's computing power should be used to improve their business rather than to train AI models.
Nvidia-backed startup Starcloud is running an artificial intelligence model in space. The Washington-based company launched a satellite with an Nvidia H100 graphics processing unit last month. It is now running Google's Gemma large language model in orbit. Starcloud's satellite is proof that space-based data centers can exist and operate a variety of AI models.
Neural Balance Innovations has developed a device that cancels motion sickness in the body via Galvanic Vestibular Stimulation. It sends electrical signals to the vestibular system, the part of the inner ear that manages balance, so that it syncs up with what the eyes are seeing. The Stimbox needs to be calibrated for every user, but after, it can completely remove the sensation of motion sickness when using VR devices. The device has the potential to give wearers a more realistic virtual reality as it can simulate the feeling of falling. It can be purchased now for 1,200€.
Most AI tools live in silos - ChatGPT for brainstorming, Claude for writing, Notion for docs. According to new Forrester study [9], this fragmentation is the top factor limiting returns for 39% of organizations. The study surveyed 500+ decision makers and found that the real AI opportunity isn't individual productivity, but better
This blog collates several responses from tech bloggers on writing for developers. The bloggers tell the story of why they started blogging and why they continue to blog. The tech bloggers include antirez, Eric Lippert, Phil Eaton, and Thorsten Ball. A link to the full interview for each blogger is available.
CSS is hard, and the rules can be quite complex. It is currently hard to predict what CSS will result in. One commonly-proposed replacement for CSS is a constraint system. However, with constraint-based systems, it is possible to have more than or less than one layout that satisfies the rules. Predictability suffers again once you have complicated constraints and conflict handling rules.