Search the archive

TOP 30 PROTOCOLS BASED ON 30D FEES

Tether and Tron continue to dominate fee generation, raking in over $430M and $347M in the past 30 days.

STABLECOINS WIN AS THE LEGACY SYSTEM FAILS

Stablecoins aren't viral because they're trendy, they're viral because the legacy system keeps breaking.

KRAKEN THESIS

Kraken has veteran leadership, a tight-knit team, and a customer-centric culture.

FIGMA IS ROLLING OUT CODE LAYERS FOR INTERACTIVE DESIGN

Figma has introduced “code layers” in Figma Sites, enabling designers to build fully interactive, production-ready web elements directly within the design interface using AI-powered assistance and a built-in code editor. This feature allows for rich customization—such as animations, real-time data, and interactive tools—without requiring deep coding skills, bridging the gap between design and development.

META'S ADVANTAGE+ ADDS GEN AI TOOLS FOR ADVERTISERS AND AGENCIES

Meta announced new generative AI features for its Advantage+ advertising platform at Cannes Lions, including tools that transform still images into dynamic videos and enable consistent branding at scale. The updates include video highlights that extract key scenes, Virtual Try-On expansion, and Creative Sticker call-to-action buttons for Facebook and Instagram content. Meta reports that existing Advantage+ campaigns already boost return on ad spend by an average of 22%, with backend AI improvements increasing conversions by up to 5%.

YOUTUBE LAUNCHES NEW SHOPPING PRODUCT STICKERS FOR SHORTS

YouTube has introduced new Shopping product stickers for Shorts to help creators better monetize their content by making products more easily shoppable. In testing, Shorts with these stickers saw over 40% more product clicks than those using the older Shopping button format. The feature allows creators to customize sticker placement and display multiple products. It is rolling out globally this week.

DESIGN IS CARE (AND SENSING CARELESSNESS)

The 2012 London Olympics' celebration of the NHS served as a powerful symbol of national pride and the importance of care in public service. Today, as technology—especially AI—increasingly shapes public systems, there is a growing need to prioritize thoughtful, human-centered design that resists carelessness and ensures equity, trust, and meaningful impact in people's lives.

THERE'S TIME TO STOP THE APPLE-INSPIRED OBSESSION WITH GLASS UI BEFORE IT STARTS

Apple's new “Liquid Glass” design language, introduced with iOS 26 and macOS Tahoe, has sparked a resurgence of glossy, translucent UI elements reminiscent of past trends, raising questions about aesthetics versus usability. While visually striking, the return to glass-like interfaces may be less about improving user experience and more about preparing users for future technologies like XR, where layered, semi-transparent UI could make practical sense.

THE RISKS OF LETTING AI DICTATE YOUR DESIGN

AI-powered "vibe coding" tools like Stitch quickly generate app designs from simple prompts but produce generic solutions based on assumptions rather than genuine user needs. AI should assist designers as "eager apprentices" rather than dictate design decisions, since effective design requires human questioning, problem-solving, and understanding of user needs that AI currently cannot provide.

DESIGN BEYOND BARRIERS

Design Beyond Barriers is an accessibility guide made by designers, for designers, with a clear goal: to prove that accessibility does not limit design.

AUTOMATED IMAGE GENERATION FOR MARKETING AND CONTENT

Scale your brand with automated, on-brand marketing images using AI-generated templates via API and integrations.

YOUR AI DESIGN ASSISTANT

Chat with Flowstep to create UI designs, wireframes, and user flows in seconds. Collaborate effortlessly and iterate rapidly using AI.

A GUIDE TO CREATING EFFECTIVE PRODUCT FEEDBACK SURVEYS

Effective product feedback surveys capture valuable user insights to improve products and user experiences. Key steps include defining specific objectives, writing clear questions, choosing appropriate formats and distribution channels, timing surveys strategically, and using proper tools for delivery and analysis. Best practices emphasize keeping surveys short, mixing qualitative and quantitative questions, and following up with respondents to close the feedback loop and show that their input drives meaningful product improvements.

PROTOTYPES, TURF WARS, AND VIBE CODING: WHO DOES WHAT NOW?

Vibe coding tools will intensify tensions between product managers and UX designers as prototyping becomes where interaction design decisions are made. UX designers should use vibe coding platforms for prototyping while collaborating on whiteboards, freeing PMs to focus on business value like monetization and market strategy rather than micromanaging product details. Teams should leverage each member's unique strengths, communicate effectively, and work collaboratively rather than stepping on each other's toes in overlapping responsibilities.

KIT STUDIO CRAFTS A VIBRANT IDENTITY FOR RAISE THE ROOF, A MUSIC-LED MOVEMENT TACKLING YOUTH HOMELESSNESS

“Raise the Roof” is a music-led campaign by Centrepoint that blends high-energy performances with a powerful mission to raise awareness and funds for youth homelessness. Designed by Kit Studio, the visual identity strikes a balance between joy and urgency. It uses a hand-raise symbol with a house motif to unify the branding across digital and physical platforms, aiming to create a lasting and meaningful movement.

HOW TO DRAW A PUNK ART STYLE LIKE GORILLAZ ARTIST JAMIE HEWLETT

15 techniques for achieving Hewlett's distinctive punk art style.

THE HAMBURGER-MENU ICON TODAY: IS IT RECOGNIZABLE?

Hamburger menu icons are now widely recognizable, unlike a decade ago when they caused usability issues, including reduced engagement and task success rates.

ALYSON PETRUNCIO REIMAGINES THE EXISTENTIAL DREAD OF CHILDHOOD THROUGH SPLENDID COLOURED PENCILS

Alyson Petruncio revives the eerie charm of kidcore horror through surreal, soft-toned illustrations that transform suburban unease and childhood discomfort into haunting yet cathartic visual narratives.

DON'T MISS THIS SESSION — LEARN HOW TO TRANSFORM YOUR SECURITY PROGRAM INTO A TRUE BUSINESS ENABLER. 👉🏼Register now

ANUBIS RANSOMWARE ADDS WIPER TO DESTROY FILES BEYOND RECOVERY

The Anubis ransomware-as-a-service operation added a new wiper module to its malware that destroys targeted files, making recovery impossible even if the ransom is paid. The new /WIPEMODE command requires key-based authentication and then erases all file contents, reducing the file size to 0 KB. This functionality presumably increased Anubis' pressure on victims during negotiations.

'STARGAZERS' USE FAKE MINECRAFT MODS TO STEAL PLAYER PASSWORDS

Check Point Research discovered a campaign conducted by the Stargazers Ghost Network that leverages approximately 500 different GitHub repositories to target Minecraft players with trojanized and malicious mods. The mods contain a JAR loader which downloads the Java-based stealer from Pastebin. The stealer attempts to steal Minecraft account tokens, data from popular third-party launchers, and Discord and Telegram account tokens before acting as a loader for a traditional info stealer which attempts to steal information from web browsers, VPN account data, cryptocurrency wallets, etc.

AGENTSMITH FLAW IN LANGSMITH'S PROMPT HUB EXPOSED USER API KEYS, DATA

Noma Security researchers discovered the "AgentSmith" vulnerability (CVE score 8.8) in LangChain's LangSmith platform, allowing malicious AI agents in the public Prompt Hub to steal sensitive user data, including OpenAI API keys, through hidden proxy configurations. When users adopted and ran these compromised agents, all their communications and private data would be secretly intercepted through the attacker's server in a man-in-the-middle attack, potentially leading to unauthorized account access, data theft, and financial losses. LangChain fixed the vulnerability on November 6, 2024, after responsible disclosure and implemented new safety measures, including warning messages and banners for agents with custom proxy settings.

IMPLEMENTING SIEM AND SOAR PLATFORMS

A 3-part guide to implementing SIEM and SOAR platforms for security professionals and executives. The first part is designed for executives and introduces the concept of SIEM and SOAR, explains how they function, provides guidance for choosing a SIEM, and cautions organizations on attempting to implement a SOAR before properly implementing and testing a SIEM. The second and third parts are for implementers.

GODFATHER ANDROID MALWARE RUNS REAL APPS IN A SANDBOX TO STEAL DATA

Researchers from Zimperium zLabs unveiled a new variant of the GodFather Android malware that uses on-device virtualization to deploy real banking and cryptocurrency apps in a controlled sandbox. This method allows attackers to monitor and steal user credentials stealthily, as the malware disguises itself by installing a hidden host app that redirects users to virtualized versions of these applications. Primarily targeting 12 Turkish financial institutions, the malware affects 484 applications globally and employs overlays and Android accessibility services to enhance control over devices.

THE ROLE OF AI AND COMPLIANCE IN MODERN RISK MANAGEMENT: SHOWMECON 2025

At ShowMeCon 2025 in St. Charles, cybersecurity experts noted that while compliance frameworks like PCI DSS provide necessary structure, they are often treated as mere formalities rather than integral to operational security. They stressed the importance of human oversight in AI-driven policy creation and threat detection, acknowledging that adversaries also use AI for more sophisticated attacks. The key takeaway was that compliance should be a foundational step.

TRACECAT

Tracecat is an open-source automation platform built for security and IT engineers that uses YAML-based templates for integrations with a no-code UI for workflows. It is designed to be a free, open-source alternative to tools like Tines or Splunk SOAR.

CROSS CLOUD IDENTITIES IN ZERO TRUST POC

This repository provides Terraform code that demonstrates how multi-cloud federated user and workload authentication can be utilized.

DARK-KILL

A user-mode code and its rootkit that will kill EDR processes permanently by leveraging the power of Process Creation Blocking Kernel Callback Routine registering and ZwTerminateProcess.

TURKEY BUSTS CHINESE SPYING RING USING FAKE CELL TOWERS

Turkish intelligence announced that it caught seven suspects who belonged to a Chinese espionage ring eavesdropping on Uyghurs and Turkish officials. The attackers used IMSI-catcher devices to mimic legitimate mobile phone tower signals to collect data, phone logs, conversations, and other information from nearby phones. The attackers funded their operations by hacking into and draining the bank accounts of Turkish civilians.

A PEEK INTO AN IN-GAME AD CLIENT

Jordan Whitehead delves into reversing the Anzu in-game ad client's usage in the Trackmania racing game. First, Whitehead built a DLL harness to enumerate the functions that Trackmania called from the anzu.dll and iterated on it to uncover further debug information and arguments. He then used mitmproxy to intercept network traffic and was able to utilize this to view the JavaScript functionality that managed targeted ads and replace ad campaigns with his own custom campaigns, serving images from localhost.

GERRIT MISCONFIGURATION EXPOSED GOOGLE PROJECTS TO MALICIOUS CODE INJECTION

Tenable researchers discovered a misconfiguration in Google's Gerrit code collaboration platform that could have allowed attackers to inject malicious code into popular Google projects like ChromiumOS, Bazel, and Dart through supply chain attacks. The vulnerability, dubbed "GerriScary" (CVE-2025-1568), exploited improper permissions for the addPatchSet feature and a race condition in the automated merge process, allowing attackers to modify approved code changes without triggering new reviews. Google fixed the issue across all Chrome/ChromeOS-related projects after Tenable's October 2024 report, awarded a $5,000 bug bounty, and found no evidence of prior exploitation.

RANSOMWARE GANG BUSTED IN THAILAND HOTEL RAID

Thai police raided the Antai Holiday Hotel in Pattaya, arresting at least 20 foreigners, including six Chinese nationals involved in a ransomware operation targeting Chinese companies, and apprehending around 20 individuals running an illegal gambling ring while seizing laptops, mobile devices, and gambling equipment.

LINUX SECURITY: NEW FLAWS ALLOW ROOT ACCESS, CISA WARNS OF OLD BUG EXPLOITATION

Qualys disclosed two new Linux vulnerabilities (CVE-2025-6018 and CVE-2025-6019) that can be chained together to allow unprivileged attackers to gain full root access, while CISA separately warned that an older Linux kernel flaw (CVE-2023-0386) is being actively exploited in the wild.

BLUESKY'S DECENTRALIZED DREAM AND HOW IT'S RESHAPING THE SOCIAL MEDIA ECOSYSTEM

Decentralized social media platform Bluesky reached 36 million users in just 16 months. Offering creators true ownership of their content and audience, Bluesky challenges traditional platforms that control algorithms and extract most of the revenue from creators' work. Its customizable “feeds” system allows users to control how content is distributed, driving more traffic to publishers without penalizing outbound links. Safety and community growth are core to its design, with early viral moments and invite-only access helping form strong, diverse user groups. COO Rose Wang envisions Bluesky as the last platform that creators will need.

A.I. MIGHT TAKE YOUR JOB. HERE ARE 22 NEW ONES IT COULD GIVE YOU

AI is creating new human jobs in the areas of trust, integration, and taste. Roles like AI auditors, ethicists, translators, and escalation officers will ensure systems are accountable and fair. On the technical side, jobs such as AI integrators, assessors, plumbers, and personality directors will help embed AI meaningfully into organizations. Creative and strategic roles like product designers, story designers, and world builders will grow in importance as companies rely on people with strong judgment and vision to guide AI toward outcomes that connect with human preferences.

DUAL CTAS

GitHub uses both an embedded email capture form and a secondary call-to-action button on its homepage, a combination not commonly seen together on other brand sites.

UPPERCASE FEELS COMPETENT, LOWERCASE FEELS WARM

Uppercase brand names are seen as more competent and distant, while lowercase ones are viewed as warmer and friendlier. In experiments, unfamiliar brands appeared 52% more competent in uppercase and 68.8% warmer in lowercase. Cultural context matters: Americans rated lowercase brands as 16% warmer, while Chinese participants rated uppercase brands as 11.2% more competent. For B2B brands targeting professional, hierarchy-valuing markets, uppercase is more effective. Lowercase suits friendliness-focused strategies in egalitarian cultures.

GOOGLE AI MODE TRAFFIC DATA COMES TO SEARCH CONSOLE

Google Search Console now includes clicks, impressions, and position data from AI Mode. A click counts when a user clicks an external link. Impressions are counted when your content appears in AI responses. Positions are tracked individually for each element. Follow-up questions in AI Mode are treated as new searches. While this update brings more visibility into AI-powered results, Google still doesn't allow filtering specifically for AI Mode data.

SEO IN AN AI-FIRST WORLD (WEBINAR)

Dave Gerhardt, Founder of Exit Five, will join Andrei Țiț, Head of Product Marketing at Ahrefs, on June 24 to break down the current state of search, what strategies are no longer effective, and how to maintain visibility as earning clicks becomes more challenging.

TIKTOK SHOP DEBUTS LIVE PRICE MATCH AS IT READIES FOR SUMMER DEALS

Livestream purchases now account for the majority of user activity on TikTok Shop, with over 75% of users buying directly during events. The platform's summer campaign includes a price match guarantee and cashback incentives, adding transactional urgency to its entertainment-first model. This approach closes the gap between engagement and purchase, increasing the platform's utility for both brands and consumers.

THE DULL MEDIA TARIFF

Poor media formats are causing a decline in campaign ROI because 75% of ad inventory receives no active attention. Ads placed in low-attention environments waste billions of dollars, with brands losing 43 cents for every dollar spent. Strong creative cannot overcome dull media since attention levels set the limit for ad performance. Attention drops sharply in fast-decay formats like mobile and scroll-heavy placements, while slow-decay formats like premium video hold attention longer and perform better. Shifting focus to measuring actual viewer engagement through Attention Volume, which combines attentive reach and active attention time, can improve media planning by prioritizing where attention truly happens.

ESCAPE THE INBOUND VS. OUTBOUND TRAP

Most marketers treat inbound and outbound as separate or even competing strategies, often choosing one over the other based on preference rather than effectiveness. Both approaches should be interdependent components of a unified revenue system. Inbound builds trust and generates engagement, but without structured outbound follow-up, much of that interest goes unconverted. Conversely, outbound efforts that ignore buyer behavior underperform in isolation.

UNILEVER'S FIVE-PART FRAMEWORK FOR BUILDING BRANDS

Unilever embraces a five-part formula to build desire for its brands: science, aesthetics, sensorial experiences, sharing, and a youthful spirit.

BUILD YOUR “BRAND UNIVERSE”

Brands now build universes to meet consumer demand for connection and shared values, not just products.

HOW P.F. CHANG'S TURNED A 5-SECOND VIDEO INTO A VIRAL BRAND MOMENT

P.F. Chang's quickly jumped on a viral TikTok cake joke, turning the moment into a viral stunt.

THIS AI AGENT SHOULD HAVE BEEN A SQL QUERY

Building AI Agents as streaming SQL queries can be done using platforms like Apache Flink. This approach can offer consistency, scalability, and a better developer experience, similar to how microservices can be implemented as SQL queries. Flink's ability to interact with LLMs, its event-driven architecture, and its capacity to manage context through features like lookup joins and retrieval-augmented generation makes it great for building agentic systems.

REACTIVITY IS EASY

This post goes through a simple, elegant solution for fine-grained selector-based reactivity, achieving targeted re-renders using a simple store and `useSelector` hook. It avoids unnecessary re-renders of components by subscribing them to specific slices of state. Furthermore, `use-sync-external-store` can be used for React edge-cases, ergonomic store updates, and memoized selectors for derived state.

WRITING DOCUMENTATION FOR AI: BEST PRACTICES

AI systems process documentation in chunks, relying on content matching and explicit connections, so documentation should be self-contained and contextually complete. To optimize content for AI, use semantic HTML, prefer HTML or Markdown over PDFs, create crawler-friendly content, have semantic clarity with descriptive headings and URLs, and provide text equivalents for visuals.