Search the archive

POMERIUM (PRODUCT LAUNCH)

Pomerium offers a unified access control solution that prioritizes access over restriction, dynamically verifying user identities and context to improve security.

SN1PER

Sn1per helps save time by automating the execution of open source and commercial tools to discover vulnerabilities across your entire attack surface.

NETFETCH

Netfetch is a tool that scans Kubernetes networks to identify whether any pods are running without a network policy. The tool provides a CLI and dashboard for visualization.

NEW GOVERNMENT BAN ON KASPERSKY WOULD PREVENT COMPANY FROM UPDATING MALWARE SIGNATURES IN U.S.

The US government has expanded its ban on Kaspersky software due to national security concerns, preventing the company from providing updates to customers in the U.S. This ban will impact the ability of Kaspersky software to detect threats on American systems over time. Existing Kaspersky customers in the U.S. have until September 29 to find alternative antivirus software.

YEAR-ROUND STRATEGIES FOR CAREER GROWTH

This blog post goes into detail about performance reviews, career ladders, and career growth strategies. Career growth is something that employees should be thinking about year-round. ICs can use hype lists to jot down what they worked on, the impact it made, and any notes they had. They should utilize this list in performance reviews in addition to making sure that their work is visible throughout the company.

6 QUESTIONS TO ASK WHEN INTERVIEWING FOR AN APPSEC ROLE

This post provides a list of questions to ask when interviewing for an AppSec role. The questions aim to understand the culture of the team, interactions with other teams, and what your work would look like. An explanation of why each question should be asked is provided.

UPDATE YOUR WINDOWS PC TO AVOID A SERIOUS WI-FI VULNERABILITY

Microsoft patched a critical vulnerability in Windows 10 and 11 that could allow hackers to remotely access devices on public Wi-Fi networks without user interaction.

AMD INVESTIGATING CLAIMS THAT COMPANY'S DATA WAS STOLEN IN HACK

An organization called "Intelbroker" conducted a breach of AMD's data.

LINUX VERSION OF RANSOMHUB RANSOMWARE TARGETS VMWARE ESXI VMS

The RansomHub ransomware operation is using a Linux encryptor designed specifically to encrypt VMware ESXi environments in corporate attacks.

Register for the live webinar happening on Tuesday, June 25!

REDDIT'S ‘FROM SEARCH TO RESEARCH' REPORT

According to a new report by Reddit, Gen Z is increasingly turning to personalized recommendations and trusted sources over traditional search engines for product discovery. The generation is also particularly sensitive to inaccurate information and lack of reviews, reflecting their desire for trustworthy research experiences. The report shows that Reddit is a highly trusted platform, similar to friend and family recommendations, and highlights its unique ability to provide reliable insights to users.

73% OF ENTERTAINMENT AND MARKETING CREATIVES THINK AI ‘WILL ELEVATE CONTENT'

A new study by the United Talent Agency (UTA) found that 73 percent of entertainment and marketing creatives believe generative AI will elevate content and 75 percent of those currently using AI say they are creating higher-quality work with it. The marketing creatives in the study were more bullish on AI than the entertainment creatives, but not overwhelmingly so. The results from the study suggest that these industries are shifting from fear and resistance of AI to curiosity and cautious optimism about it.

3 ZERO-CLICK CONTENT TACTICS

Two-thirds of Google searches end without a click, while many social platforms suppress posts with external links. 3 tactics to create effective zero-click content on social media: present the complete content or solution within the social media post, which leaves the audience with no unanswered questions and positions you as a reliable source; tease the audience with a sneak peek of the main idea to pique their curiosity, which incentivizes them to click-through or sign up; and distill the essence of your content into a succinct yet impactful summary within the post, which provides value to your audience and compels them to navigate to the full content.

5 WAYS THAT WEBSITES INTRODUCE FRICTION OR BARRIERS INTO THE SALES PROCESS

If you've succeeded in getting your target audience to your website, don't waste the precious seconds they'll spend on it. Avoid prompting users to make a purchase without also providing context about your offering, in case they aren't familiar. Only direct users to schedule a demo if it's actually necessary for them to understand the product — if so, explain to visitors what a demo will entail. If it's not possible to provide specific pricing information on your site, then explain the factors that go into it rather than simply telling users to call to find out. Extraordinary claims (without proof) and unrealistic stock imagery leave visitors questioning rather than trusting. Avoid asking for information in forms that isn't actually necessary.

9 QUESTIONS WE ANSWERED TO GO FROM IDEA TO REVENUE IN 30 DAYS

This piece covers how the author validated their service idea by engaging with potential customers on Twitter and launching on Product Hunt. Utilizing no-code tools, they developed a quick solution to solve a specific problem — submitting Black Friday deals across multiple platforms. Their strategy included targeted outreach to founders, offering early bird discounts, and focusing on over-delivering to secure testimonials and feedback.

10+ SURPRISINGLY USEFUL CHATGPT APPS

Sketchy instantly creates black-and-white drawings of any object, place, or scene. Whimsical is ideal for detailed flowcharts, mind maps, or sequence diagrams. Data Analyst cleans, analyzes, and visualizes uploaded data from CSV, Excel, or Zip files. Podcast Search finds specific podcast episodes or helps discover new podcasts. Canva lets you describe the social media post, graphic, or design you want in a few sentences, and generates an editable draft.

PERFECTING YOUR INFLUENCER IQ (VIRTUAL EVENT)

Marketing Brew is hosting a half-day event on June 25th that'll uncover how to adapt your influencer marketing strategy in today's creator economy. A virtual ticket costs $99.

SPOTIFY QUIETLY LETS ALL PODCASTERS UPLOAD VIDEOS, SURPASSES 250K SHOWS

Spotify introduced a new feature that allows all podcasters to upload videos directly to its platform. Creators previously had to use Spotify for Podcasters or a hosting partner for video uploads, but now any creator can upload videos alongside their audio podcasts using their preferred hosting service.

INSTAGRAM USERS ARE GETTING WORRIED ABOUT AI SCRAPING THEIR PHOTOS

Instagram users are worried about AI scraping their photos for Meta's AI systems, leading to posts claiming copyright over their content. Legal experts state these posts have no effect, as Meta's terms grant it a license to use user content. US users have limited privacy protections and cannot opt out, while European users can due to stricter laws. Options include setting accounts to private or deleting data with specific commands. The only surefire way to prevent content use in AI training is not to post it.

REDDIT IS MY SURPRISING SECRET TO MARKETING SUCCESS

A PPC agency grew its brand by leveraging Reddit for marketing, engaging in subreddit discussions and offering expert advice without direct selling. This approach led to new clients, industry collaborations, and speaking opportunities. It showcases Reddit's potential for organic growth and thought leadership. Reddit's forum format unexpectedly boosted SEO, enhancing the agency's online presence.

MY FAVORITE DEFINITIONS OF GROWTH

Having a shared definition of Growth helps everyone to stay on the same page.

HOW CETAPHIL IS TAPPING “DADFLUENCERS” TO MARKET SKINCARE TO MEN

Cetaphil's "Made for Phil" campaign targets male consumers with humorous videos, unique packaging, and partnerships with over 100 male influencers, including NFL player Xavier Legette.

THE SAN DIEGO ZOO GOT 48M VIEWS ON ONE TIKTOK

An interview with Taylor Moore, Senior Social Media Manager for San Diego Zoo Wildlife Alliance, where she discusses which animals get the most engagement, the zoo's Twitch strategy, and a story of a post that reached 48M views.

🆓 Get the guide here

APPLE INTELLIGENCE AND THE RACE TO WIN PERSONAL AI

Apple is poised to excel in the personal AI race due to its focus on powerful and integrated AI experiences that prioritize user privacy and personal context. With its vast access to user data on iPhones and Macbooks, coupled with a trusted brand, Apple could redefine AI utility where others like Google, Meta, and OpenAI currently lead.

STATE OF THE CLOUD 2024

The five trends defining AI Cloud in 2024: Big Tech's competition over AI foundation models, AI significantly enhancing developer productivity, the rise of multimodal models and AI agents, Vertical AI surpassing legacy vertical SaaS, and the revival of Consumer Cloud, affirming AI's substantial and growing impact beyond the initial hype.

THE PACE GOAL FRAMEWORK, PRIORITIZING SIMPLICITY AT META, AND MORE

The PACE framework is used for setting clear, impactful, and ambitious goals. It advocates for simplicity in product design, focusing on user-friendly experiences without unnecessary complexity.

DEEP-DIVE: MAKING MORE INFORMED DECISIONS

Making better product decisions involves nurturing a mindset and capability that values evidence over intuition and avoids HiPPO-driven decisions. This requires mastering customer insights, rigorous experimentation, and inclusive decision-making processes. Though challenging, this approach leads to products that resonate with customers, teams aligned on success, and a culture of continuous learning.

FROM EARLY ADOPTER TO PRODUCT GROWTH

Product managers can ensure a smooth transition to the broader market through clear communication, comprehensive training, and organizational alignment. They can gauge when to expand the product's reach by staying attuned to early adopters. Once the product is stable and operations are scalable, they can initiate broader sales enablement by training the sales team and lifting early adopter restrictions.

CUSTOMER FEEDBACK STRATEGY

Implementing a robust customer feedback strategy that involves systematic collection, analysis, and action on user insights is essential for product success.

DATABRICKS' AI BUSINESS AND PRODUCT STRATEGY

Databricks is enhancing its product portfolio with new AI tools and acquisitions, like Mosaic ML, to transform into a full-fledged data and AI company. Its recent Data + AI Summit unveiled serverless AI development and compound systems integrated with its data platform. The company aims to empower customers to harness proprietary data for competitive advantage in AI applications.

LEAH'S LEADERSHIP GUIDE - PART 4: GROW

Acknowledge imperfection to connect with others and demonstrate your willingness to grow. Be mindful of how titles can impact how you're treated. Embrace discomfort to foster valuable feedback and personal development.

CAREER GROWTH EXPLAINED AS AN AMAZON LEADERSHIP PRINCIPLE FLYWHEEL

The career growth flywheel begins with delivering results to establish credibility and earn trust. You can innovate and find effective solutions by thinking big, taking ownership, and simplifying complex problems. Maintain a bias for action to continuously deliver results and propel your career forward.

HOW TO BALANCE SELF-PROMOTION AND HUMILITY IN PERFORMANCE REVIEWS

Err on the side of humility in self-reviews, promote achievements consistently throughout the year using factual statements, and ensure your contributions are noticed and appreciated to avoid contentious discussions and build a solid reputation.

THE ISSUE WITH HAVING A HIGH WORK-IN-PROGRESS

High WIP harms businesses by lowering quality and customer satisfaction while increasing employee stress and disengagement.

WHY IS META PROMOTING THREADS?

Meta's strategy to back an app that detracts from Instagram engagement underscores its commitment to sustaining a constant stream of training data for its AI models and defending its competitive edge against ChatGPT.

THE ULTIMATE LIST OF PRODUCT METRICS

Key product metrics to keep an eye on: acquisition, activation, engagement, retention, revenue, and referrals.

SO WE'VE GOT A MEMORY LEAK…

This developer tackled a memory leak in his high-traffic Rails app by analyzing heap dumps and using tools like rbtrace, heapy, and sheap. The root cause was traced to a combination of an issue in ActiveSupport::Subscriber and invalid URIs processed by the Bugsnag gem. He goes over his debugging process throughout the article.

CUSTOM ELEMENTS DON'T REQUIRE A HYPHEN AS A SEPARATOR

This author was initially confused about the rules for valid custom element tag names, as his Codepen tests with emojis failed due to a JavaScript error. After fixing the error, they realized that custom element tag names only need a hyphen, not necessarily as a separator. This means that tags like mytag- or h1- are valid, although using them might not be recommended.

OPTIMIZING AI INFERENCE AT CHARACTER.AI

Character.AI optimizes LLM inference by using memory-efficient architecture design with techniques like Multi-Query Attention, hybrid attention horizons, and cross-layer KV sharing. It also utilizes stateful caching to store attention KV on host memory between chat turns to get a 95% cache rate. Other optimizations, like integer quantization, added allowed the company to reduce serving costs by 33x compared to its initial state in late 2022.

WHY WE NO LONGER USE LANGCHAIN FOR BUILDING OUR AI AGENTS

Octomind decided to stop using LangChain for building AI agents despite initially finding it helpful. LangChain's high-level abstractions made its code more complex and difficult to maintain, especially as its requirements became more sophisticated. The company advocates for a "building blocks" approach using simple, low-level code with carefully selected external packages.

THOUGHTS ON CODE REVIEWS

Code reviews are necessary for maintaining code quality and sharing knowledge within a team, but they can be inefficient if not optimized. Principles, design docs, and static analysis should be used to reduce the scope of reviews. Implementing an Automate/Defer/Pair framework allows teams to handle code changes quickly based on complexity and risk.

ROOSTER

Rooster is a framework-independent JavaScript rich-text editor that operates within a single HTML div element. It uses a "Content Model" layer to manage editing operations and convert them into HTML. Rooster includes packages for core functionalities, API access, DOM manipulation, and plugins.

REASSURE

Reassure automates performance regression testing for React Native apps by measuring render times and function executions. It integrates with Jest and React Native Testing Library or React Testing Library to provide detailed reports on performance changes.

ANNOUNCING TYPESCRIPT 5.5

TypeScript 5.5 comes with inferred type predicates, RegEx syntax checking, a JSDoc @import tag, and more.

ZIG VS RUST AT WORK: THE CHOICE WE MADE

A company chose Zig over Rust for a critical library rewrite. It found that the Zig compiler and build system's ability to integrate easily with existing codebases and support multiple target platforms was a strong factor.