Search the archive

for you in <24 hours. Get your 3 free candidates

OUR SOURCE OF TRUTH ON MARKETPLACES (REPORT)

NFX report on the current state and future potential of marketplace business models.

METICULATE

Laser-focused B2B prospect lists in minutes.

WHALESYNC

Control your apps from a spreadsheet.

4 YEARS, €2M, AND A GREEN DREAM

Grünfin, a sustainable investment platform that sought to make values-based ETF investing accessible, has closed after four years due to challenges in scaling and overcoming misconceptions about sustainable investing. Despite delivering positive portfolio growth for nearly all customers and receiving significant venture funding, the startup struggled with market reluctance, timing, and trust barriers, underscoring the difficulties faced by mission-driven startups in uncertain economic climates.

THE ANTI-SHACKLETON MANIFESTO

In business today, trying to keep everything going like Shackleton did is a bad idea. Leaders need to be good at regularly figuring out what parts of the company aren't working and getting rid of them. They should move fast, cut things in a smart order, and be super clear with their team. This helps them deal with change and come out better. The new leadership motto is to stop doing what others keep doing and grow by ending stuff on purpose.

THE ULTIMATE GUIDE TO NAVIGATING THE VC INVESTMENT FUNNEL

The VC investment funnel is the step-by-step way VCs find, check out, and put money into promising startups. It has six main parts: finding deals, picking the good ones, double checking everything, deciding to invest, helping the startups grow, and eventually selling their part of the company. Knowing how each step works helps startup founders make their companies look better to investors and helps investors make smart choices. The funnel starts with a lot of possible investments but narrows down to just a few in the end. Out of 100 leads, about 20-30 make it to the first review step, 10-15 of those get looked at really closely, and 5-10 end up getting money.

WHAT PERCENT OF STARTUPS MAKE THE LEAP FROM SEED TO SERIES A?

Approximately 50% of startups transition from Seed to Series A funding, highlighting the challenges of securing further investment.

THE EXECUTION TRIANGLE

When doing any kind of project, there are three main things: what you want to get done, what you need to do to get it done, and how long you have.

5 INTERESTING LEARNINGS FROM TWILIO AT $4.5 BILLION IN ARR

Twilio has experienced a significant turnaround, with growth re-accelerating to over 10% and its stock up 51% this year.

👉 Register to save your spot

7-ZIP VULNERABILITY LETS ATTACKERS EXECUTE ARBITRARY CODE

7-Zip has released an update for a high (7.8) vulnerability that can allow for RCE. The vulnerability exists in the implementation of the Zstandard decompression where improper validation of user-supplied data can result in an integer underflow before writing to memory. It allows attackers to run arbitrary code under the current user.

760,000 EMPLOYEE RECORDS FROM SEVERAL MAJOR FIRMS LEAKED ONLINE

A massive data leak exposed over 760,000 employees' information from major organizations like Bank of America and Morgan Stanley. Originating from last year's MOVEit hack, the breach is attributed to the Cl0p ransomware gang. It revealed names, emails, and work details, potentially enabling sophisticated social engineering attacks.

TELECOM GIANT BT GROUP HIT BY BLACK BASTA RANSOMWARE

The Black Basta ransomware gang has attacked BT Group's Conferencing division, stealing 500 GB of sensitive data. The telecom giant claims limited impact, with core services unaffected. The leak could include financial information and even passport copies.

USING VBS ENCLAVES FOR ANTI-CHEAT PURPOSES

Virtualization-based security enclaves are a Windows 11 feature that allows code to be run in a Secure Enclave that runs at a higher privilege mode than the kernel. The author of this post decided to attempt to write a simple Pong game that would run the core game logic in a VBS enclave and only run the code to write the display and read keypresses in the user mode. The theory was that if a game could run in a VBS enclave, then an attacker would only be able to cheat if they hooked into the Windows boot chain before the VBS enclave was loaded. Ultimately, the author found that the performance and API limitations that result from using VBS enclaves makes it an infeasible option.

HOW TO USE AWS RESOURCE CONTROL POLICIES

AWS Resource Control Policies (RCPs) are like Service Control Policies (SCPs) for setting access limitations across your entire AWS Organization. RCPs help control resource sharing and enforce policy standards, making it easier to manage data perimeters and prevent undesired actions from external accounts. Deploy RCPs carefully across your organization to avoid potential issues and ensure security measures are maintained.

MOONLOCK'S 2024 MACOS THREAT REPORT

The 2024 macOS threat report by Moonlock Lab highlights a significant increase in malware targeting macOS users, with a focus on stealers. The rise of malware-as-a-service (MaaS) has made macOS threats more accessible and cost-effective, leading to an evolution in cybercriminal operations and techniques. The report emphasizes the need for users to stay vigilant as macOS malware continues to evolve rapidly and adapt to evade detection.

OVERSIGHT

Oversight is a modular LLM reverse engineering, red teaming, and vulnerability research platform. It currently has a single loader that supports loading plugins directly from Hugging Face but more are planned.

PERMCHECK

PermCheck is a little tool that checks if the files in a PHP project have the executable bit set properly.

INTRODUCING NACHOVPN: ONE VPN SERVER TO PWN THEM ALL

Amberwolf's NachoVPN is an open-source tool that demonstrates how vulnerabilities in popular corporate VPN clients can be exploited by attackers to gain remote code execution. NachoVPN simulates rogue VPN servers to showcase insecure behaviors in VPN clients and help security professionals understand and mitigate risks. Detailed advisories for vulnerabilities in clients like Palo Alto GlobalProtect and SonicWall NetExtender are also provided to aid organizations in protecting against threats.

EMPLOYEE LAWSUIT ACCUSES APPLE OF SPYING ON ITS WORKERS

An Apple employee has accused the company of privacy violations due to its monitoring of personal iCloud accounts when using personal devices for work. The employee alleges that Apple-provided devices have too many restrictions to be used, virtually forcing employees to use personal devices.

AWS ANNOUNCES DECLARATIVE POLICIES

AWS has announced a new type of management policy for AWS Organizations. Declarative policies enforce a security baseline that persists even when services add new APIs or features and when new principals or accounts are added to an Organization. Currently, declarative policies support blocking public access to VPCs, blocking public access to EBS snapshots, and various configurations for EC2 such as restricting available AMIs.

EU COUNCIL PROPOSES NEW CYBERSECURITY LAWS

The EU has adopted two new cybersecurity laws establishing a pan-European Cybersecurity Alert System and introducing certification schemes for managed security services. These measures aim to enhance cooperative threat detection, improve information sharing, and strengthen cyber resilience across member states through coordinated technological and regulatory approaches.

CRYPTO.COM LAUNCHES $2M BUG BOUNTY PROGRAM

Crypto.com has launched a bug bounty program with a maximum payout of $2M, the largest sum on HackerOne.

AWS ANNOUNCES BLOCK PUBLIC ACCESS FOR AMAZON VIRTUAL PRIVATE CLOUD

AWS introduced Virtual Private Cloud (VPC) Block Public Access (BPA) for enhanced network security, allowing administrators to block Internet traffic for their VPCs.

PINTEREST PREDICTS 2025

Pinterest predicts that next year's trends will lean into bold forms of expression and maximalism. Individuals will look for ways to stand out and engage all their senses through their style choices. Nesting parties will replace baby showers while travel shifts to remote mountain destinations. Fashion trends will include coordinated outfits and a fisherman aesthetic with cable-knit sweaters and sardine-themed accessories. Food will highlight chaos cakes and pickle-inspired creations, and home décor will embrace solar punk sustainability.

FOHR'S 6 BEAUTY PREDICTIONS FOR 2025

2025 marks the death of the “influencer trip”. Brands will focus on genuine relationship-building through intimate events with influencers, press, and community members. Strategic casting and transparency will replace scripted messaging for credibility. With face product innovation slowing, growth will shift to fragrance, body care, and wellness. Age inclusivity will gain traction, with terms like “pro-aging” highlighting mature consumers' buying power. Fragrance will continue expanding, and the influencer market will evolve with older creators as CMOs allocate larger budgets to the maturing segment.

HOW TO ANALYZE YOUR COMPANY TO FIND THE WINNING POSITIONING

Marketers can learn from LEGO's turnaround by focusing on core strengths and eliminating distractions. LEGO identified its key assets - brand recognition, the LEGO System, and global distribution - while cutting unprofitable ventures like video games and theme parks. It leveraged its fan network for co-creation, streamlined its product portfolio by 30%, and re-emphasized compatibility between sets to reduce costs and boost customer loyalty. When a brand is struggling, marketers should start by analyzing their company's capabilities, assets, network, weaknesses, and strengths to uncover the right positioning and path forward.

HOW TO CREATE THE RIGHT B2B OFFER

Commoditized offers are easily compared with competitors, while proprietary offers create differentiation through rare methods, unique skills, or exclusive processes. Effective proprietary offers solve high-priority problems and deliver clear outcomes, driving better sales and customer loyalty. To create a proprietary offer, brands must align it with a “big idea” narrative and focus on showcasing its value instead of features or technical aspects.

6 STEPS TO REPAIR YOUR SENDER REPUTATION POST-BFCM

After BFCM, repairing sender reputation requires targeted steps, including avoiding emails to unengaged recipients and pausing third-party marketing. Adopting a rewarming strategy based on subscriber engagement levels can help restore trust and improve deliverability over a three week period. To track the effectiveness of the repair process, closely monitor metrics like spam complaints, click rates, and unsubscribe rates.

17 MIRO TEMPLATES FOR STRATEGY, DISCOVERY, AND DELIVERY

This free set of templates streamlines product management, UX research, and marketing by aiding strategy, discovery, and delivery tasks. It includes templates for creating product visions, conducting interviews, refining backlogs, and prioritizing assumptions. Each one is editable to fit custom needs.

HOW TO BUILD THE MARKETING FUNCTION OF THE FUTURE (WEBINAR)

Gartner experts will discuss the three critical design areas that will change the marketing function of tomorrow and what leaders should do to prepare on December 12 at 10 am ET.

MARKETING TEARDOWN: PODCAST GUEST LAUNCH

Podcast Guest Launch is a software tool that automates podcast booking for businesses, helping executives secure guest spots efficiently and scale their brand presence. Its target audience is B2B companies, which value podcasts as a means to build trust and position themselves as industry experts, even with audiences as small as 5,000-10,000 downloads. The platform's branding emphasizes simplicity and focus, using the tagline “Where do you want to be famous?” to inspire users to envision success. Marketers can leverage podcast appearances facilitated by Podcast Guest Launch to generate content, improve SEO, and run targeted ads using highlights from interviews. Opportunities for the brand include adding video proof of success on its site and exploring partnerships with podcasters.

A GUIDE FOR THE NEW ERA OF REDDIT MARKETING: HOW GOOGLE'S PARTNERSHIP CHANGED EVERYTHING

Google's partnership with Reddit has elevated the social platform's visibility, with Reddit posts now dominating search results for product reviews and industry insights. This collaboration has reshaped search behavior, as users increasingly seek unfiltered community discussions rather than traditional marketing content. Brands must now consider Reddit a central part of their marketing strategies to engage with audiences where purchasing decisions are being influenced.

‘SO LAZY THIS YEAR': THE INTERNET IS FURIOUS THAT SPOTIFY WRAPPED EMBRACED AI—AND GOT BORING

This year's Spotify Wrapped faced criticism for inaccurate data and prioritizing AI features over its usual creative and entertaining elements.

7 TOP CAMPAIGNS FROM 2024 AND THE TACTICS THAT DROVE SUCCESS

A look into this year's best campaigns from Calvin Klein, Liquid Death, Gap, and Lays.

MYFITNESSPAL FIRST-HAND ONBOARDING EXPERIENCE

Within 12 minutes, a user's MyFitnessPal experience went from delight to ultimate frustration, leading her to search for an alternative app.

HOW TO USE AI FOR PROTOTYPING AS A PM

Prototyping with AI is becoming an essential skill for PMs as it enables rapid iterations and reduces the dependency on engineering teams. This article reviews key tools like Replit, Vercel v0, Cursor, and Windsurf. It's important to choose tools based on project type and team expertise, with an approach focused on starting small, iterating quickly, and scaling thoughtfully.

THE GENAI BRIDGE TO THE FUTURE

Mainframes laid the groundwork for modern technology by automating complex calculations. Over time, evolving paradigms from PCs to smartphones bridged by innovations like the Internet and generative AI have paved the way for future wearable devices.

HOW TO WRITE YOUR OWN JOB DESCRIPTION AND INVENT YOUR ROLE

You can create your own role at work by aligning your skills and interests with what adds value to your manager and organization. Focus on crafting a role that addresses your manager's priorities, ensuring your proposal is a win-win for both sides.

AI IS EVERYWHERE

Products must address critical operational challenges, including model inconsistency, compliance requirements, pricing strategy, and maintenance needs, before implementing AI features to avoid costly rework and maximize AI's potential benefits.

“AI INSIDE” OPENS NEW MARKETS FOR VERTICAL SAAS

AI's ability to reduce costs through labor automation and improve sales efficiency will make previously unprofitable vertical SaaS markets viable, particularly benefiting high-revenue-per-employee sectors through copilots and low-revenue-per-employee sectors through administrative automation.

16 PRODUCT MANAGEMENT FRAMEWORKS YOU SHOULD BE USING

Here are 16 essential product management frameworks that guide prioritization, product discovery, product development, team management, and customer experience.

PART 2: NAVIGATE THE AI WORKFORCE REVOLUTION: HUMAN VS. AI - A STRATEGIC ANALYSIS

Humans excel in creativity and ethical judgment, particularly in complex, ambiguous situations where moral nuance is essential. AI, on the other hand, excels at data processing and objective decision-making, offering consistent outcomes. Humans should focus on leadership and ethical governance, while AI's role is in automation and enhancing human creativity. The future of work depends on a balanced integration of both, leveraging human ingenuity alongside AI's computational power for innovation and efficiency.

META SAYS IT'S MISTAKENLY MODERATING TOO MUCH

Meta's content moderation system is overly aggressive. Harmless content and users are being unfairly restricted. A senior executive has suggested potential policy changes may be coming.

THE IMPERFECT PRODUCT ORGANIZATION SURVIVAL GUIDE

Most product organizations struggle with mediocrity, but PMs can still thrive by taking control of what they can influence and fostering collaboration.