Search the archive

BUILD WEB AND MOBILE APPS 10X FASTER WITHOUT CODE

Rocket.new turns ideas into live web and mobile apps in minutes. Generate clean code, customize with AI, and launch fast, all with no code.

CONVERT VECTOR GRAPHICS TO 3D

Vecto3d is a simple tool for converting your 2D SVGs, mostly logos, into 3D models.

BENTLEY DOUBLES DOWN ON DESIGN WITH NEW LOGO, CONCEPT CAR, AND DESIGN STUDIO

Bentley has transformed its historic 1939 Crewe HQ into a state-of-the-art design lab, highlighting a shift toward modernising the brand with a focus on design, innovation, and electric mobility, exemplified by the launch of the EXP 15 concept car and a new, simplified logo. The studio brings together CMF, UX/UI, and Mulliner teams under one roof to foster collaboration and create cars that blend cutting-edge technology with heritage-inspired design, aiming to meet the complex demands of luxury buyers—especially in the growing Chinese market—while retaining Bentley's storied identity.

IS YOUR TEAM READY FOR AI-ENHANCED DESIGN?

AI design tools are transforming from futuristic concepts into essential workflow accelerators, particularly excelling at rapid prototyping and layout generation. Figma's native AI capabilities, such as Make, have addressed key integration challenges that plagued earlier standalone tools, making AI adoption more practical for structured design environments. Teams should start with low-risk pilots to build AI fluency now, as success depends more on operational integration than tool sophistication.

CONTEXT MANAGEMENT UI IN AI PRODUCTS

AI products struggle with context management, as users need to understand what information influences responses. However, current solutions, such as context chips, break down when dealing with complex, multi-agent systems. The evolution from simple context display to agent-based systems creates a nested amount of context that overwhelms traditional UI approaches. As users become more confident with AI tools, context management interfaces may become less prominent, as people typically only examine the underlying process when the results seem questionable.

DEAR MONDAY: A FRESH LOOK FOR THE COACHING PLATFORM HELPING WOMEN LEAD THE CHANGE

Dear Monday, formerly the Female Leadership Academy, has rebranded with a bold new identity by Arndt Benedikt to reflect its evolution from a coaching platform into a dynamic movement empowering women in leadership.

HOW WE BUILT BLUEY'S WORLD: TALES FROM ORIGINAL SERIES ART DIRECTOR, CATRIONA DRUMMOND

Catriona Drummond, the 23-year-old lead art director for Bluey's first series, developed the show's distinctive visual style by drawing from Brisbane's architecture and light.

Read the full playbook on the Metronome blog

WINDSURF'S CEO GOES TO GOOGLE; OPENAI'S ACQUISITION FALLS APART

OpenAI's $3 billion deal to buy coding startup Windsurf collapsed Friday morning. By afternoon, Google hired Windsurf's CEO and top researchers for $2.4 billion, licensing their tech without buying the company. It's the latest reverse-acquihire where Big Tech gets talent and technology while dodging regulatory scrutiny. Now they're left with 250 employees and an interim CEO while their founders build competing tools at Google. Every AI startup that lost its leaders this way has struggled to maintain momentum.

SAAS 2.0

Every SaaS app is just an expert's playbook turned into software. Salesforce encodes how the best salespeople work into lists and rules, but it's a rough translation - like getting advice through a game of telephone. Now AI can skip the middleman. Instead of buying software that nudges you toward best practices, you get the actual expert managing your data directly. A new dating app already does this - it turns a matchmaker into an AI that manages compatibility data. Soon we won't need apps at all, just specialists who happen to be software.

SVB'S STATE OF THE MARKETS

AI ate half of all venture capital in 2024. While total VC investment hit $204 billion - the third-highest year ever - AI companies grabbed 50% of all deals and 61% of megadeal dollars. They're getting 100% valuation premiums over non-AI peers at late stage. Meanwhile, everyone else is playing defense. The typical Series A company now needs $2.5 million in revenue (up 75% from 2021), but growth has cooled to 70% annually. With only 7 tech IPOs last year and 640 unicorns trapped in private markets, the liquidity crisis continues - just 25% of unicorns even meet basic IPO requirements.

GOODBYE, MQLS. HELLO, QUALIFIED PIPELINE

This marketing VP bet everything on 100 target accounts instead of 10,000 leads - and pipeline exploded. The trick was launching messy ABM campaigns before they were ready, which exposed what actually worked. Now, BDRs report to marketing, and everyone's compensated on qualified pipeline, not lead volume. Turns out, companies buy differently at different sizes, so they tier their approach. However, the real shift was mental - stop thinking about capturing demand and start thinking about creating it.

FIXING MARKETING'S MISSING MIDDLE

Most teams focus on awareness and conversions while ignoring the messy middle where 80% of leads die. There's never enough content between "hey check us out" and "buy now" - that trust-building zone where buyers actually decide. This article breaks down how Ahrefs and HubSpot fixed this by becoming media companies. Weekly newsletters, teaching content, and showing up even when metrics look flat. The hard truth is that most companies won't do this because it takes months to see results.

RAMESH SRINIVASAN, SENIOR PARTNER AT MCKINSEY, SHARES HOW GREAT LEADERS BUILD EMPATHY, RESILIENCE, AND PURPOSE

Founders must focus on leadership skills such as fearless learning, empathy, resilience, and purpose. Great leaders adapt quickly, manage relationships, and maintain stability through challenges. Purpose-driven leadership and recognizing knowledge gaps further contribute to their effective company growth.

SUPEREXPERT.AI

Superexpert.AI is an open-source, web-based platform for deploying and managing enterprise AI agents.

PRESWALD

Preswald is an AI agent that helps users build and deploy data apps, dashboards, and internal tools with built-in UI components.

CREATIFY PRODUCT VIDEO

Creatify Product Video is an AI tool that converts product images into marketing videos for brands to produce content quickly and at scale.

MARK ZUCKERBERG: FACEBOOK'S STRATEGY TAX

Mark Zuckerberg saw it in 2018 - Instagram was eating Facebook alive. In this leaked email, he admits they'd been artificially pumping Instagram's growth by siphoning users from Facebook, and the data from Japan and Russia showed what happens next. When Instagram usage passes Facebook, the entire Facebook network collapses. His solution was radical - stop all promotion between apps, maybe even spin Instagram off entirely before regulators forced them to. He knew Kevin Systrom would never agree to slow Instagram's growth, writing "I am skeptical it is possible to both retain Kevin and do what it takes."

THE HOLDING COMPANIES OF OUR HEARTS

Constellation Software quietly turned $890M into $10.3B by buying 500 software companies since 2012 and never selling them. Now, AI entrepreneurs are copying this playbook - buying accounting firms and law offices to force AI adoption from the inside.

LOVABLE MAKES $75M IN 7 MONTHS—BUT IS IT NAILING PRICING?

Lovable hit $75M ARR in 7 months by letting anyone type English and get working apps. This unlocked a wave of non-technical founders building SaaS businesses, just like Shopify did for e-commerce. However, here's where it gets messy - it charges for AI credits that get consumed mostly upfront during building, then usage drops off. Worse, successful MVPs often graduate to "real" code and churn. Lovable is trying to be Shopify for SaaS while pricing like a construction tool.

SHOULD I MOVE MY START-UP TO THE SF BAY AREA?

The SF Bay Area remains a prime hub for tech, especially B2B and AI startups, due to its unmatched talent density, access to aggressive VC capital, and proximity to major tech partners.

AI STARTUPS TAKE TO THE STAGE TO PITCH THEIR COMPANIES TO A PANEL OF JUDGES

Fluix AI, Clicka, and Narada AI pitched their offerings at TechCrunch Sessions.

MOST-ACTIVE US INVESTORS: KHOSLA, ACCEL TOP MAY RANKING

Khosla Ventures and Accel topped May's activity, each involved in 12 funding rounds, with Accel backing large investments in Anysphere and Wonder.

Download the full defender's guide

ROWHAMMER ATTACK DEMONSTRATED AGAINST NVIDIA GPU

A group of researchers from the University of Toronto demonstrated that the Rowhammer attack method can be applied to GPUs in an attack they dubbed GPUHammer. Rowhammer attacks involve repeatedly accessing (“hammering”) a DRAM row, leading to electrical interference that causes bit flips in adjacent memory regions. The researchers have demonstrated that GPUHammer attacks can reduce the accuracy of ML models from 80% to 0.1%.

MCDONALD'S CHATBOT RECRUITMENT PLATFORM EXPOSED 64 MILLION JOB APPLICATIONS

McDonald's chatbot recruitment platform, McHire, exposed the personal data of over 64 million job applicants due to default credentials ('123456' username/password) and an insecure API. Security researchers accessed all applicant information, including names, addresses, phone numbers, and chat messages.

OVER 600 LARAVEL APPS EXPOSED TO REMOTE CODE EXECUTION DUE TO LEAKED APP_KEYS ON GITHUB

Cybersecurity researchers discovered that leaked Laravel APP_KEYs from GitHub can enable remote code execution attacks. Over 260,000 APP_KEYs were extracted from GitHub, with more than 600 vulnerable applications identified. When attackers obtain these encryption keys, they can exploit deserialization flaws to execute arbitrary code on servers, compromising data and infrastructure security.

GROK-4 JAILBREAK WITH ECHO CHAMBER AND CRESCENDO

Researchers have shown that combining two LLM jailbreak techniques, Echo Chamber and Crescendo, enhances the ability to bypass AI safety measures more effectively than using either method separately. Experiments with Grok-4 on harmful tasks, like providing bomb-making instructions, achieved success rates ranging from 30% to 67%.

ROLLING OUT SANTA WITHOUT FREEZING PRODUCTIVITY: TIPS FROM SECURING FIGMA'S FLEET

Figma successfully deployed Santa, an open-source binary authorization tool, across all employee laptops by running it in monitoring mode for months to build a comprehensive allowlist based on actual usage patterns. It minimized user disruption through a custom Slack-based self-service system that allows employees to quickly approve blocked applications after automated security checks, as well as an escape hatch that enables temporary monitoring mode during rollout. The phased deployment began with users having zero unknown binaries and gradually expanded to 100% coverage over three months, utilizing automated package rule generation and group-based policies to handle edge cases, such as developer tools.

HOW I FOUND A BYPASS IN GOOGLE'S BIG ANTI-ADBLOCK UPDATE

The author discovered a Chrome bug that allowed MV3 extensions to bypass Google's removal of webRequestBlocking (which kills adblockers) by exploiting legacy JavaScript bindings and creating fake webRequest events with spoofed WebView IDs. The exploit worked by using the constructor of existing webRequest events to create new events with the opt_webViewInstanceId parameter set, which skipped permission checks for webRequestBlocking since the browser never verified if the extension had WebView permissions. Google patched the vulnerability in Chrome 118 by adding proper permission validation, although it didn't award a bounty since it didn't expose new data to extensions.

TRUSTIFI (PRODUCT LAUNCH)

The cloud-based email security solution leverages AI to scan emails for threats such as impersonation, spoofing, spear-phishing, and business email compromise.

CAMERADAR

Cameradar hacks its way into RTSP video surveillance cameras as it is a tool that scans for RTSP camera streams, identifies device models, performs dictionary attacks to find stream routes and credentials, then generates a comprehensive report.

RECONSNAP (PRODUCT LAUNCH)

The platform enables automated digital change detection, capturing visual and structural changes on selected targets. This helps you track updates, detect anomalies, and react to potential threats before others.

GOOGLE GEMINI FOR WORKSPACE HIJACKS EMAIL SUMMARIES FOR PHISHING

A security researcher discovered an indirect prompt-injection attack on Google's Gemini model. The prompt injection attack involves including invisible instructions for Gemini in emails. When a user then uses Google Gemini for Workspace to summarize the email, Gemini will follow the instructions and may include phishing links or misinformation in its summary.

“LOCALHOST TRACKING” EXPLAINED. IT COULD COST META 32 BILLION

Meta deployed “localhost tracking” that bypassed Android security protections by using its mobile apps to listen on local network ports while tracking scripts in web browsers sent user identifiers via WebRTC, linking anonymous browsing activity to real Facebook/Instagram identities even when users employed VPNs, incognito mode, and deleted cookies. The scheme affected 22% of the world's most visited websites and collected complete browsing histories, purchases, and behavioral patterns without proper consent across billions of users over multiple years. Meta now faces potential fines of €32 billion under GDPR, DSA, and DMA regulations for violating data protection, personalized advertising restrictions, and rules governing the combination of cross-platform data.

SMM CALLOUT VULNERABILITIES IDENTIFIED IN GIGABYTE UEFI FIRMWARE MODULES

Four SMM callout vulnerabilities (CVE-2025-7026 through CVE-2025-7029) were found in Gigabyte UEFI firmware, allowing attackers with admin privileges to execute code in System Management Mode, bypassing OS protections and potentially disabling Secure Boot and Intel BootGuard. These flaws result from improper validation of CPU registers and pointers in SMI handlers, enabling malicious control over SMRAM writes and flash operations. Although they were previously fixed by AMI, these issues reappeared in Gigabyte's firmware, so users should urgently update to the latest UEFI from Gigabyte's support site.

TELEGRAM MESSENGER'S TIES TO RUSSIA'S FSB REVEALED IN NEW REPORT

Russian investigative outlet IStories alleges that Telegram's server infrastructure is maintained by companies with ties to Russia's FSB intelligence service, potentially enabling surveillance of users' communications even when using VPNs and incognito mode, though Telegram denies the claims and maintains that no third parties have access to user data.

DONOT APT HITS EUROPEAN MINISTRY WITH NEW LOPTIKMOD MALWARE

The India-linked DoNot APT group targeted a European foreign affairs ministry by using spear-phishing emails impersonating defense officials to deliver its LoptikMod malware via Google Drive links, marking an expansion of its operations beyond its traditional South Asian focus.

THIRTEEN ROMANIANS ARRESTED FOR PHISHING THE UK'S TAX SERVICE

Thirteen individuals in Romania and one in the UK were apprehended for executing a phishing scam targeting HMRC, which resulted in a theft of £47 million from taxpayers and impacted 100,000 HMRC customers.

LINKEDIN RESEARCH: HOW TO WIN MINDSHARE IN THE GENAI RACE

Most AI ads fail because they all sound the same and focus too much on technical features instead of what buyers actually care about. Only 6% of ads deliver a clear point of difference, while just 11% of buyers remember a brand or feature. Buyers tend to stick with known vendors, considering only 2.4 brands on average, and 60% of purchases are from existing relationships.

LUXURY SHOPPERS TURN TO TIKTOK FOR PRODUCT DISCOVERY

7 in 10 luxury shoppers on TikTok have spent over $1,355 on a single fashion item, often after seeing peer content. About 38% discover luxury brands through UGC, while 32% find them through creator videos. Only 15% of shoppers buy luxury items immediately after seeing them on TikTok, with most saving the content and purchasing later.

5 TIPS TO MAKE IG POSTS SEARCHABLE

Focus on clear, keyword-rich captions that reflect your content, not vague phrases. Write alt-text for every post. Use text overlays on Reels and images with titles, hooks, or searchable phrases. Refresh your bio with relevant keywords, avoiding filler or outdated info. Do light keyword research using tools like Google Trends to align with what people are actively searching.

HOW TO TRAIN AI FOR BULLETPROOF BRAND VOICE: TOP TIPS AND TRICKS

Start by setting clear guardrails using reusable prompts, live reference docs, and layered quality control with both automation and human review. Use Retrieval-Augmented Generation to ground AI responses in accurate, approved information. Feed the model only high-quality examples that reflect your voice, tagged with metadata like audience and funnel stage, and leave out anything outdated or off-brand. Clean your training materials of boilerplate language, fine-tune using lightweight methods like LoRA, and test results through blind evaluations.

LOTTIEFILES

LottieFiles is used for adding lightweight, high-quality animations to websites, apps, and social media. Using the JSON-based Lottie format, users can access a vast library of animations, tailor them with simple tools, and integrate via plugins for After Effects and Figma. Common use cases include animated ads, social posts, and interactive website elements.

GUIDE: HOW TO CREATE WINNING B2B OFFERS THAT SELL WELL

A great B2B offer solves a problem that is painful, urgent, recognized, and expensive for the buyer. Strong offers are proprietary rather than commoditized and should align with market demand rather than the creator's skill set. A successful offer includes 7 key elements, uses front-end options to reduce friction in the buying process, and fits into a broader portfolio aimed at increasing customer lifetime value. Pricing should be based on the value of the problem being solved, not the time it takes to solve it.

WHY ADVERTISERS ARE WRONG TO SHUN NEWS WEBSITES

Companies are pulling advertising from news websites due to brand safety concerns, leading to revenue losses for journalism. This movement began with the goal of avoiding ads next to extremist content, but has expanded to block ads from serious news. 30-40% of news stories are being demonetized, often due to outdated or overly cautious keyword blocklists. A survey found that ads placed next to negative news perform just as well as those placed next to positive stories, undermining the widespread fear of negative associations.