Over 260 professionals gathered at BSides312, a cybersecurity conference at Chicago's Irish American Heritage Center, to discuss community, burnout, and human-centered security challenges. Key speakers highlighted identity misconfigurations and privilege escalation in cloud environments as major attack vectors, advocating for active defense strategies beyond traditional firewalls and antivirus solutions. The conference emphasized that effective security relies on strong human connections, psychological safety, and communication hygiene within teams, as technical vulnerabilities often arise from human and organizational failures rather than technical issues.
The Advanced Protection Program provides Google's strongest protections against targeted attacks on Android devices. Advanced Protection provides a one-click toggle that allows users to enable a comprehensive security suite that cannot be disabled. Some Advanced Protection features include intrusion logging, offline and theft detection lock, inactivity report, safe browsing, insecure WiFi network protections, and spam detection and protection.
Myth Stealer is a Rust-based infostealer malware marketed on Telegram since December. It targets gamers through fraudulent gaming sites, stealing passwords, cookies, and browser data. This post goes in depth on the techniques it uses, such as fake windows and advanced evasion techniques.
TheatSpike provides organizations with full visibility across endpoints, network, cloud assets, email services, and applications, leveraging AI for automation and continuous threat hunting.
This repository is intended for pentesters and red teamers using various offensive security tools during their assessments.
Intune RBAC provides a comprehensive PowerShell-based tool for managing and auditing Role-Based Access Control (RBAC) in Microsoft Intune.
US and Dutch authorities seized BidenCash, a marketplace for stolen credit card data, on June 4. They took 145 domains offline, along with cryptocurrency wallets and infrastructure. Operating openly since March 2022, it had over 117,000 users and sold over 15 million payment card records, generating an estimated $17 million in illicit revenue. Authorities collaborated with cybersecurity firms to map the infrastructure, leaving victims whose data was sold or leaked vulnerable and needing to monitor their accounts closely.
CEOs are now learning self-defense to stay safe from cyber threats. Cybercriminals are targeting company leaders more often. Training helps CEOs defend themselves and their businesses.
HMRC lost £47 million in a phishing scam that affected 100,000 taxpayers' accounts. Criminals used stolen identity data from external sources to create fake PAYE accounts and claim fraudulent repayments. HMRC emphasized this wasn't a cyber attack on its systems. Affected accounts were locked. Customers face no financial loss. Arrests have been made.
Lee Enterprises has disclosed a data breach that affects almost 40,000 individuals.
Germany fined Vodafone $51 million due to privacy and security breaches caused by fraudulent partner actions and weak security - the company has since rectified its systems and paid the fines.
Pinterest's midyear trends reveal a strong shift toward digital detox and nature connection, especially among Gen Z. Users are seeking rustic, farmhouse-inspired home décor with thrifted, natural materials and earthy tones, reflecting a desire for cozy, nature-driven spaces. Travel trends emphasize slow, mindful escapes like nature bathing, book retreats, and mountain trips to disconnect from technology. Beauty trends show rising interest in astrology-inspired makeup and cool-toned palettes that allow personal expression tied to zodiac signs.
95% of Gen Z and millennials want to turn online interests into real-world connections. Influencers like Danielle Pheloung are creating intimate fan experiences offline. In May, she hosted 25 women at a Tribeca workout studio, gifting items from brands like Smart Sweets, Lancôme, and Ouai. Influence today is about access rather than follower count. Brands and platforms such as dcdx's Offline are supporting creators by helping them host meaningful in-person events, connecting brands with communities ranging from small gatherings to larger meetups.
To write effective social media content, focus each post on one small, rewarding idea that offers a tip, insight, or moment of connection. Use a conversational tone with clear, punchy language, mimicking a casual chat in a noisy café. Add personality with metaphors, opinions, or mini-stories to stand out from bland content. Start with short, curiosity-driven opening lines and use plenty of white space to keep posts easy to read and engaging.
Offering products or services for free can lead to undervaluation and make it difficult to charge later. Even a small fee encourages consumers to treat something with more care and recognize its value. Companies can preserve long-term pricing power by clearly communicating what their offering is worth through strategies like bundling, strikethrough pricing, and time-limited trials.
Pingo AI, a language learning app launched in late 2024, gained 50,000 users and $25,000 in monthly recurring revenue within five months through aggressive TikTok marketing. The founder scaled 12 social media accounts to nearly 10 million views, with the most viral video (1.6 million views) featuring Korean language practice. The highest engagement rates came from ambassador-run accounts, with one faceless content account reaching 19.09%. The team boosted reach by referencing non-competing apps to create more authentic content.
Cliff Worley from Kapor Capital led a no-fluff AI tools workshop focused on practical use cases across branding, GTM, UGC, outbound, ads, and comms. He shared his go-to tools like Looka for brand kits, Gamma for decks, Supergrow for authentic LinkedIn posts, and AdCreative.ai for scalable ad creation.
Grindr's Pride strategy focuses on authentic year-round engagement by centering queer voices, culture, and connection. Instead of rainbow washing, they invest in meaningful experiences like the Grindr Rides Tour and educational content like Daddy Lessons that bridge generational gaps. They advise listening to queer voices, engaging with culture before launching campaigns, and tailoring efforts to each region. Real success means showing up beyond June, offering genuine value, and building a lasting community. Brands that do this earn loyalty and relevance. Grindr calls this ongoing commitment the Global Gayborhood.
Emails under 300 words achieve the highest open and reply rates, with reply rates more than doubling compared to longer pitches. Including full press releases or excessive intro text reduces effectiveness, so it's better to link to supporting material like datasets via Dropbox or Google Drive. Pitches must be relevant to the journalist's specific beat and personalized authentically without using insincere flattery. Cutting fluff and getting to the story immediately helps keep the email concise and impactful. Shorter emails are not lower quality, they are simply more focused and easier for journalists to process quickly.
Even with large budgets and strong brands, many mature SaaS companies are losing ground by focusing on defending their position instead of winning new customers. One example is a $10 billion firm with polished messaging and regular updates that still fell behind faster startups. Google also missed the moment with generative AI while Zoom outpaced Skype by responding directly to what users needed. Defensive marketing talks at customers instead of helping them, and in fast-moving markets, that leads to decline over time.
Over half of TikTok shoppers cite discounts as their main motivation, while only a minority are influenced by creators or celebrities.
Great events come down to picking the right format, setting goals, aligning teams, creating memorable moments, and nailing the follow-up.
A photo of Vector's swag that includes a Lego version of its ghost mascot and a witty spin on Cards Against Humanity.
Sponsored
When NVIDIA needs to manage industry-changing product launches, they turn to Wrike. The result? Streamlined workflows that help them build AI infrastructure at light speed while keeping every stakeholder aligned in real time.
AI-native research startups are transforming market research by replacing slow, human-driven methods with real-time, generative agent simulations that model realistic consumer behavior. These tools deliver faster, scalable insights across teams, redefining customer understanding as a dynamic, always-on advantage.
Product managers in 2025 are evolving into systems orchestrators, balancing AI collaboration, personalization, and ethics with growing precision. New trends like quiet pilots, modular platforms, and TTFS (time to first success) metrics are rapidly reshaping how products are tested, built, and scaled.
2025.06.06·amycmitchell.substack.com·6 min read·TLDR Product Shadow processes like outdated spreadsheets and manual workarounds quietly erode team productivity, consuming valuable time from top talent. By surfacing and replacing these hidden inefficiencies, organizations unlock focus, innovation, and sustainable growth.
In tough situations with strong disagreements and no clear answers, take a structured approach: assess where you are in the problem-solving process, clarify facts and goals, communicate consistently, and share a clear, well-reasoned recommendation. This method builds alignment and helps teams move forward.
Clear, testable acceptance criteria are key to building features that meet expectations and pass QA without friction. By aligning teams through structured formats and real-world examples, product managers can eliminate ambiguity, prevent rework, and drive smoother, faster product delivery.
The PM interview landscape has shifted - companies like Meta now prioritize clear, confident decisions over cautious “it depends” answers. Success hinges on showing structured judgment in binary tradeoffs, where speed, clarity, and evidence-backed conviction reveal true product thinking.
In the AI era, creativity is no longer about full control - it's about conscious co-creation. True creators embrace tools like AI without surrendering their voice, refining ideas through empathy, discipline, and a devotion to meaningful growth.
Claude delivers top-tier writing and coding, ChatGPT excels at personal assistance with memory and voice, and Gemini offers powerful multimodal tools at a low cost. Use Claude for quality, ChatGPT for everyday tasks, and Gemini for creative projects on a budget.
Smart people fail not by being wrong, but by being convincingly wrong.
Leaders may try to reassure teams by denying negative outcomes, but even mentioning them can make fears feel more real.
This document reverse-engineers Linear's Sync Engine (LSE). LSE uses models defined with JavaScript classes and decorators, using MobX for observability and a sophisticated bootstrapping and lazy loading system. Client-side changes are sent as transactions to the server and are managed using a transaction queue, with conflict resolution handled using a "last-writer-wins" strategy.
Navigating to a new page should ideally involve a single request to fetch the necessary data. Client-side logic and component-based architectures, while offering colocation of UI and data fetching, often lead to inefficient multiple requests and client-server waterfalls. Server Loaders centralize data fetching but sacrifice colocation, while GraphQL and React Server Components (RSC) attempt to achieve both colocation and single-round trip efficiency by composing data dependencies or rendering components on the server.
SCIM (System for Cross-domain Identity Management) is a standard used by identity providers to communicate user changes (additions, updates, and removals) to other software. It makes integration easier by standardizing JSON formats for CRUD operations between the identity provider and the software application.
Error tracking is the most valuable signal in observability, but is often overshadowed by logs, metrics, and traces. Exceptions show that programmer assumptions have failed, making them the most informative events to track with detailed context. Errors should never be treated as generic events.
The discourse around generative AI often avoids serious criticisms, such as the demoralizing impact of it on software development. However, because the technology is evolving so quickly, having a consistent negative opinion on it is hard to maintain.
HyperDX is an open-source observability platform built on ClickHouse and OpenTelemetry. It helps engineers quickly diagnose production issues by unifying logs, metrics, traces, session replays, and errors into a single searchable and visualizable interface.
ElevenLabs' Eleven v3 (alpha) is a text-to-speech model that offers world-class expressiveness and control through audio tags. This new version supports dynamic conversations between multiple speakers with shared context and emotions across over 70 languages. Users can now control the emotion, delivery, and direction of the generated audio.
Anthropic cut Windsurf's access to its Claude AI models due to rumors of OpenAI acquiring the AI coding assistant. According to Anthropic co-founder Jared Kaplan, it would be "odd" to essentially sell Claude to its main competitor.
The SignalFire 2025 Talent Report shows large shifts in the tech talent landscape, such as a sharp decline in new grad hiring and a growing geographic distribution of tech talent. Entry-level hiring has dropped a lot as companies prioritize experienced talent and high-leverage technical roles. Elite AI labs like Anthropic are dominating the talent race through high retention rates and strategic poaching from competitors.
Google's increasing restrictions on Android sideloading, framed as security measures, are raising concerns about user autonomy, innovation, and competition.
OpenAI is contesting a court order to preserve all ChatGPT user logs, including deleted chats, arguing it violates user privacy and contractual obligations.
The Elixir community should embrace large language models (LLMs) as a potential force multiplier by investing in tools and documentation that allow LLMs to effectively work with Elixir.
The Screen Time Network API allows users to access current and historical screen time data and subscribe to screen time-related events for themselves or public users.
Sponsored
Plaid's biggest virtual event of the year is almost here. Join top builders, operators, and product leaders for a front-row seat to what's next in financial services.