Search the archive

Management Summit 2025

HEALTHCARE SAAS FIRM SAYS DATA BREACH IMPACTS 5.4M PATIENTS

Episource, a healthcare services company that provides risk adjustment, medical coding, data analytics, and technology solutions to health plans and providers, is warning impacted patients of a data breach that it suffered in January. The breached data may have included full names, physical addresses, email addresses, phone numbers, insurance plan and Medicaid information, medical records, dates of birth, and SSNs. Episource has stated that no banking or payment card information was stolen.

NORTH KOREA TARGETING INDIAN CRYPTO JOB APPLICANTS WITH MALWARE

Cisco Talos is warning potential crypto job seekers in India of a malware campaign by the North Korean Famous Chollima group. Fake employers are approaching software engineers, marketing employees, and designers with skill-testing pages to apply for positions at cryptocurrency companies like Coinbase, Archblock, and Robinhood. These pages feature ClickFix attacks, which prompt victims to run malicious code to fix errors. The code eventually downloads infostealer malware to steal browser credentials and session tokens.

CHINA-LINKED GROUP SALT TYPHOON BREACHED SATELLITE FIRM VIASAT

The China-linked hacking group Salt Typhoon breached the satellite company Viasat and other global telecom providers. They exploited security flaws in network devices to conduct espionage across multiple countries. Officials confirmed that customer data remained secure and the vulnerabilities were addressed.

DANGEROUS BY DEFAULT: INSECURE GITHUB ACTIONS FOUND IN MITRE, SPLUNK, AND OTHER OPEN SOURCE REPOSITORIES

The `pull_request_target` event is infamous because it opens up room for abuse by running in the context of the base repo with full secrets access and write permissions to the GITHUB_TOKEN. Sysdig found repositories belonging to MITRE, Splunk, and a popular open-source Spotify client that could be hijacked via `pull_request_target` abuse. Sysdig recommends using the `pull_request` event instead, along with workflow splitting and restricting GITHUB_TOKEN permissions to avoid these issues.

DIGGING TUNNELS: HUNTING ADVERSARIAL CLOUDFLARED INSTANCES

Cloudflared is a popular tunneling service offered by Cloudflare that legitimate organizations or adversaries can utilize to establish persistence. Cloudflared authenticates using tokens that contain the account ID, tunnel ID, and a secret. Ransomware groups often do not vary their Cloudflare accounts, so detecting anomalous tokens or renamed processes can be effective for threat hunting.

Drata's Trust Management Platform today. Get started

LORIS

Loris is a stateful fuzz testing framework designed to explore and analyze baseband firmware.

FRIDA 17.2.0 RELEASED

Frida is a dynamic toolkit for reverse engineering, security research, and runtime analysis across various platforms and languages. Version 17.2.0 focuses on simplifying package discovery with the `frida-pm` CLI tool. The release features a streamlined package manager for easily searching and installing Frida-specific packages using `frida-pm search` and `frida-pm install`, even without Node.js.

PYCTI-MCP

This is an MCP (Model Context Protocol) server for pycti that provides a front-end interface to OpenCTI threat intelligence data. The server condenses and normalizes OpenCTI data into JSON format for LLMs, making field names more verbose and resolving GraphQL-linked entities to provide better response context. It includes three main tools for looking up observables, adversaries, and reports in OpenCTI, and can run either as a TCP server or STDIO server.

5 LESSONS LEARNED AS INCIDENT COMMANDER OF THE BIGGEST SECURITY INCIDENT OF MY CAREER

Ryan Cox shares lessons from leading the incident response for a high-stakes incident that stretched about a month. Cox stresses the importance of proactively establishing interdepartmental relationships so that during an incident, you have SMEs that you can rely upon. Cox also reminds incident commanders to avoid diving too deeply into tasks and losing the big picture. Lastly, Cox stresses the importance of having scalable processes around documentation and other often forgotten topics and conducting post-mortem root-cause analysis.

BANANA SQUAD HIDES DATA-STEALING MALWARE IN FAKE GITHUB REPOSITORIES

A hacker group called Banana Squad hid malware in fake GitHub projects that looked like real tools. Their attacks stole sensitive data from thousands of computers before being discovered. Even though malware in open-source software dropped in 2024, attacks are getting smarter, so users need to be careful.

NO, THE 16 BILLION CREDENTIALS LEAK IS NOT A NEW DATA BREACH

A huge leak of 16 billion credentials was reported, but it is just a collection of old stolen data, not a new breach. These credentials were taken by malware or past hacks and have been shared online for years.

FACEBOOK ROLLS OUT PASSKEY SUPPORT TO FIGHT PHISHING ATTACKS

Meta has announced plans to roll out passkey support to its Facebook apps “soon” with Messenger and other apps to follow.

PREDATORY SPARROW BURNS $90 MILLION ON IRANIAN CRYPTO EXCHANGE IN CYBER SHADOW WAR

Hackers linked to Israel's Predatory Sparrow group stole and destroyed over $90 million in cryptocurrency from Iran's largest exchange, Nobitex.

SCAMMERS INSERT FAKE SUPPORT NUMBERS ON REAL APPLE, NETFLIX, PAYPAL PAGES

Scammers are placing fraudulent customer support numbers on legitimate websites such as Apple, Netflix, and PayPal, using deceptive web addresses to make them look like they're part of the official help pages.

STOP BETTING AGAINST GOOGLE, HERE'S WHY

Each wave of “Google killers” fails not due to a lack of innovation, but because Google's defenses are structural, spanning user habits, product integration, data scale, and capital deployment. The company continues to evolve with AI while anchoring itself in personalized search quality, global infrastructure, and unmatched platform reach. Consumer behavior, not just product performance, remains the driving force behind Google's enduring search leadership.

THE FUTURE OF THE CREATOR ECONOMY REPORT

95% of creators engage audiences through direct-to-fan models, with 25% using personal storytelling as their preferred strategy. For revenue, 27% rely on fan subscriptions and 23% on merchandise sales. This shift reflects platform saturation and algorithm changes disrupting traditional ad income. The creator economy is maturing, with 61% working full-time and 94% diversifying platforms like YouTube and TikTok to reduce risk. AI adoption has reached 91%, mainly for creative inspiration and faster workflows. Music remains vital, with 94% citing it as key to engagement.

THE ABCS OF NOTION'S B2C2B INFLUENCER STRATEGY

Notion's B2C2B influencer strategy focuses on creator-led storytelling to drive adoption from individuals to teams. The Notion team uses tools like Archive to identify creators who already use the product, making campaigns feel authentic and relevant. Briefs are designed to highlight clear a-ha moments that showcase utility and ease of use. LinkedIn plays a key role by encouraging discussion and extending reach while also serving as a channel for community engagement and social listening.

LINKEDIN VIDEO STRATEGY: BECOMING A RESPECTED INDUSTRY LEADER

Native video on LinkedIn is outperforming text posts in reach and engagement as users seek content that feels authentic and personal. Marketers are using video to demonstrate expertise, build trust, and highlight team knowledge across key topics. A structured approach that includes thoughtful planning, quality recording, strategic editing, and repurposing helps scale impact while reinforcing brand credibility.

THE AI SEARCH CONTENT OPTIMIZATION CHECKLIST (GOOGLE SHEET)

Optimizing content for AI search requires focusing on chunk-level retrieval by making sections independently clear and well-structured. Content with concise summaries and a factual tone should be easy to synthesize. Earning citations demands accurate, up-to-date claims and clear authority signals like authorship and sources. Covering topics broadly and deeply through clusters improves relevance. Supporting multimodal content and ensuring crawlability for AI bots is also essential.

23 SOCIAL MEDIA CONTENT TYPES TO BREAK THE BORING CONTENT CYCLE

This guide covers different types of social media content beyond typical memes and videos. It includes AI-enhanced formats and immersive experiences. The guide explains what works best on each platform, when and why to use each format, how AI tools can speed up content creation, and offers examples, tips, and ideas.

WHAT NEW MARKETING LEADERS GET WRONG—AND HOW TO FIX THESE MANAGEMENT MISTAKES

First-time marketing leaders often derail their credibility by either clinging too tightly to the work or detaching too quickly from their team. Four major mistakes are common: defaulting to random acts of marketing instead of high-impact work, failing to delegate effectively, neglecting coaching and mentoring, and ignoring internal marketing. Leaders should model prioritization using frameworks like KPO (Key Performance, Projects, and Ops) goals and delegate clearly using review tiers and project briefs. Coaching requires intentional time and tools like traffic light frameworks to focus energy where it matters most. Marketing leaders must regularly educate the rest of the company on what marketing does and why it matters.

SCENES FROM THE MOMA: PIVOTAL MOMENTS AND TAKEAWAYS FROM VISIONS NYC

Brands today are being challenged to balance cultural timing with emotional resonance. Creators like Andrew Huang and Dami Lee are using data and digital tools while staying grounded in human connection. Platforms such as Roblox and Apple Vision Pro offer immersive, community-driven storytelling opportunities. Others are turning inward to shape reality itself. Meditation expert Luca Del Deo introduced tulpamancy, the practice of creating vivid imaginary companions with agency, as a lens for internal worldbuilding.

WHY IS OUR ADVERTISING TO THE ELDERLY JUST SO OLD-FASHIONED?

Advertising aimed at older audiences continues to rely on outdated stereotypes, often portraying aging through extremes such as frailty or exaggerated vitality. This approach ignores the complexity and diversity of how people experience life beyond 55. While some are planning retirement or managing health changes, many are still building careers, caring for family members, staying physically active, and pursuing new passions. These consumers express frustration at being reduced to ads for stairlifts, wills, or funeral services that do not reflect their lifestyle or self-image. Instead, they want to see relatable depictions that mirror the full spectrum of later life.

RESULTS FROM A 3-MONTH LINKEDIN EXPERIMENT

Formats and topics have a greater impact on LinkedIn posts than post length or the use of short sentences.

BACK-TO-SCHOOL MARKETING IDEAS THAT START BEFORE SUMMER ENDS

People build lists, save inspiration, and make shoppable back-to-school plans in June on Pinterest.

Read the playbook

THE BEST PRODUCT WORK YOU'LL DO MIGHT NEVER BE ON THE ROADMAP

Quiet pilots let product managers quickly test ideas with less risk and clearer direction. To stay strategic, they should focus on outcomes, share insights tied to business goals, and plan clear exits to avoid lingering in unofficial work.

SHOULD WE ROOT FOR AI?

Rapid AI adoption can reveal a professional's replaceability as tools automate strategic tasks. To stay essential, they must use AI to elevate judgment, empathy, and creativity - not replace them.

HOW SMART PMS SCALE THEIR CAREERS IN ANY ORG

Successful product managers shift from control to influence as they move from startups to enterprises, using visibility and strategic storytelling to drive impact. Adaptability is their core strength.

SOMETIMES HARD UI CAN BE A BLESSING

Intentionally complex interfaces can improve user outcomes by adding cognitive friction, particularly when users are highly motivated. This approach is most effective in certain B2C scenarios, but skilled B2B users may also benefit from targeted complexity.

MAKING AI FEEL LIKE A HUMAN PARTNER: 5 BEHAVIORAL PRINCIPLES

Effective AI integration depends on thoughtful UX: involve users as collaborators, personalize early interactions, and make AI processes transparent. The best products reveal AI features gradually, use social proof, and apply labor illusions to build trust and human connection.

BUILD A STUNNING PERSONAL WEBSITE WITH AI IN 15 MINUTES

You can build a great-looking personal website using Bolt and a detailed AI prompt - no coding needed. Just customize the design, add content and motion, then deploy with one click.

HOW TO FIGHT BACK AGAINST AI TOURISTS

SaaS businesses face increasing churn, especially with AI-related customers, making revenue harder to predict. This guide offers 14 smart tactics to drive adoption - like default pricing, exclusive perks, and usage-based nudges.

AI AND THE FUTURE OF PRODUCT TEAMS (7 MINUTE VIDEO)

AI's impact on the workplace is often underestimated, especially for product teams. As roles evolve, success will depend less on using AI tools and more on developing clear thinking, imagination, and critical judgment.

PROMPTING IS MANAGEMENT IN DISGUISE

Effective prompting mirrors skilled management - clearly setting direction, defining priorities, and guiding AI behavior.

EXAMPLE OF A KPI TREE

A clear KPI tree outlines the overall goal, its components, the measurable metrics, and the ideas to drive those metrics.

THE FUTURE OF REACT NATIVE GRAPHICS: WEBGPU, SKIA, AND BEYOND

React Native is embracing WebGPU and improving Skia for improved graphics capabilities. WebGPU has a unified backend, giving access to general-purpose GPU computing for tasks like machine learning with TensorFlow.js. This integration allows easy use of libraries like Three.js and React Three Fiber and makes shader development through TSL easier.

FINDING DEAD WEBSITES

Marginalia Search implemented a system to detect website availability and big changes, including ownership transfers and domain parking, using primarily HTTP HEAD requests and DNS queries. The system maintains live data, such as website status and security posture, and historical event data, storing changes as immutable JSON records. The challenges of implementing this system included scheduling tasks efficiently, handling per-domain request limits, and dealing with the complexities of HTTPS certificate validation.

IN PRAISE OF “NORMAL” ENGINEERS

Team productivity matters more than individual brilliance. Good teams have environments where "normal" engineers can thrive and consistently deliver value. This means shrinking deploy cycles, facilitating easy rollbacks, providing guardrails, and investing in observability and internal tooling.

OPEN SOURCE CAN'T COORDINATE

There's a lack of a unified API for Linux desktop programs, leading to fragmentation and difficulty in maintaining a consistent experience across different distributions like NixOS. This lack of coordination is due to the decentralized nature of open-source development, which is unlike the centralized control of Windows and macOS.

WE CAN JUST MEASURE THINGS

Agents should be used to objectively measure code quality and developer experience. This means subjecting agents to tasks and quantifying their struggles to identify issues with test coverage, error reporting, ecosystem stability, and development environments.

CLAUDE CODE USAGE MONITOR

The Claude Code Usage Monitor is a real-time terminal tool for tracking token usage with Claude AI. It has progress bars, smart predictions, and auto-detection of limits. The tool supports different usage plans (Pro, Max5, and Max20) and allows customization of reset times and timezones for accurate monitoring.

ENRICHMCP

EnrichMCP is a Python framework that serves as an ORM for AI agents. It automatically generates typed tools from data models, handles relationships between entities, provides schema discovery, and validates inputs/outputs with Pydantic models.

HOW OPENELECTIONS USES LLMS

OpenElections uses Google Gemini to convert image-based PDF election results into CSV files. Gemini's accuracy and large context window are great for processing complex and large PDFs. While Gemini is good at extracting data, it still sometimes needs adjustments for formatting inconsistencies, large documents, and complex layouts.

AI SYSTEM DEVELOPMENT: LLM → RAG → AI WORKFLOW → AI AGENT

AI systems have progressed from basic LLMs to RAG, then to AI Workflows, and finally to more complex AI Agents. AI Workflows automate business processes through tool use and predefined paths, and AI Agents are autonomous systems that independently reason, make decisions, and initiate workflows.

WHAT WOULD A KUBERNETES 2.0 LOOK LIKE

A hypothetical "Kubernetes 2.0" would replace YAML with HCL for configuration, allow for alternative backends to etcd, and create a native package manager to address the issues with Helm. IPv6 would be the default networking protocol.