Search the archive

DOODAD

A tool that stylishly reduces image file size using old-school dithering, which mimics missing shades with dots for faster web loading.

FICTIONAL BRANDS ARCHIVE

Curated collection of fictional brands from films, series, and video games, presented with real-world brand design principles and contextualized within their original works.

COMPONENT CLONER (FIGMA PLUGIN)

Select component instances you want to copy, and they'll be assigned to a new copy of their original master component. Keep the text, images, and other variations in your instances without having to repeat yourself.

HOW TO PICK YOUR BATTLES AS A DESIGNER

Designers should choose battles wisely in companies that claim to be design-led but sideline design in decisions. Despite evidence of better performance, many still see designers as service providers, leading to burnout. Spot chances to influence, like leadership interest or design debt work, but know when to walk away. In interviews, ask about design's role in strategy, reporting, impact, and past challenges.

FROM WHY TO HOW: THE DIAMOND CIRCLE FOR THE AI ERA

The Diamond Circle is a new framework for the AI era inspired by Simon Sinek's Golden Circle. As AI and automation reshape work, adaptive processes and continuous learning are becoming essential. This shift addresses younger professionals' concerns about unstable careers, emphasizing that flexible skills and learning offer more control than fixed roles.

YOU NEED A LIVING BRAND SYSTEM (NOT JUST ANOTHER REBRAND)

Forward-thinking firms are creating modular, flexible brand frameworks that maintain consistency while adapting to specific needs, with research showing this approach can increase revenue by 10-15% while reducing costs.

NO COUNTRY FOR JUNIOR DESIGNERS

Lean startup environments, the evolution of product design into a strategic role, AI automation of junior tasks, and remote work have collectively eliminated traditional pathways for new designers.

RUNNING UX AS A BUSINESS (LIKE WE SHOULD HAVE ALL ALONG)

UX teams should operate as strategic business units by aligning with executive goals, focusing on measurable outcomes, managing risk, and proving business impact to gain influence and resources.

A new episode drops every Tuesday. Don't miss the next one!

MILLIONS AT RISK AFTER ATTACKERS STEAL UK LEGAL AID DATA DATING BACK 15 YEARS

The UK's Ministry of Justice confirmed that cybercriminals stole extensive personal data from legal aid applicants dating back to 2010. The April attack exposed contact details, addresses, financial information, and criminal histories. Since 2010, all applicants have been advised to be vigilant against suspicious activity following the breach.

480,000 CATHOLIC HEALTH PATIENTS IMPACTED BY SERVICEAIDE DATA LEAK

Serviceaide disclosed to HHS that 483,000 Catholic Health patients' personal and medical data were potentially exposed due to an unsecured Elasticsearch database between September and November 2024. While no confirmed data theft occurred, affected individuals will receive free credit monitoring and identity protection services.

210K AMERICAN CLINICS‘ PATIENTS HAD THEIR FINANCIAL DATA LEAKED

Georgia's Harbin Clinic reported over 210,000 patients affected by a July 2024 cyberattack on its debt collection vendor, Nationwide Recovery Services. The breach exposed names, addresses, SSNs, birth dates, and financial information.

EXTRACTING MEMORY OBJECTS WITH MEMPROCFS/VOLATITILITY3/BSTRINGS: A PRACTICAL GUIDE

RAM can be a goldmine of real-time data for forensics experts. MemProcFS is a tool that organizes memory data in a virtual file structure that can be browsed and extracted. Volatility is another memory forensics tool that provides advanced capabilities such as advanced memory carving techniques, more detailed malware analysis, and reconstructing deleted or hidden processes. Tools like grep, strings, and bstrings can be used to identify artifacts in memory dumps.

BUILDING OWN MCP - AUGMENTED LLM FOR THREAT HUNTING

When developing MCP servers, it is essential to understand the use case and identify the potential risks before delving into the design. This post provides a checklist of security considerations for designing and utilizing an MCP server and client. It walks through a lab environment testing an augmented LLM for threat detection, which uses VirusTotal and Alien Vault for threat intel, the ELK stack, and a series of Windows hosts, and tests the MCP Server in three threat scenarios.

CLOUD INCIDENT READINESS: CRITICAL INFRASTRUCTURE FOR CLOUD INCIDENT RESPONSE

On Azure, security teams can utilize log analytics and storage accounts to analyze logs and subscription groups and Entra ID for containment and conditional access. In AWS, CloudTrail and Athena can be used for log analysis, and separate accounts with cross-org access can be used for containment and conditional access. In GCP, logs explorer can be used for log analysis.

app. Get your free genAI inventory today.

TWYN

Twyn is a security tool that compares the names of your dependencies against a set of the most popular ones to determine if they are similar, preventing you from using a potentially illegitimate one.

HAVE I BEEN PWNED 2.0

The new Have I Been Pwned 2.0 website has launched with many improvements and new features. It includes a better search function, a dedicated breach information page, and a user-friendly dashboard. The site focuses on maintaining its helpful services while enhancing overall professionalism.

L1B3RT45

A collection of jailbreaks for all AI flagship models.

NHS ENGLAND LAUNCHES CYBER CHARTER TO SHORE UP VENDOR SECURITY PRACTICES

NHS England launched a cybersecurity charter asking suppliers to implement eight security commitments to combat increasing ransomware threats. Requirements include patch management, multi-factor authentication, 24/7 monitoring, immutable backups, and following the software code of practice. The NHS will support compliance through tools and contractual frameworks.

OPENAI PLEDGES TO PUBLISH AI SAFETY TEST RESULTS MORE OFTEN

OpenAI published a new Safety Evaluations Hub, a web page showing how the company's models score on various tests for harmful content generation, jailbreaks, and hallucinations. OpenAI has stated that it may add additional evaluations in the future.

PWN2OWN BERLIN 2025: DAY THREE RESULTS

White hat hackers have been awarded $1,078,750 for 28 previously unknown vulnerabilities across operating systems, AI products, container software, browsers, virtualization software, and servers.

FAKE KEEPASS PASSWORD MANAGER LEADS TO ESXI RANSOMWARE ATTACK

Hackers created a fake version of the KeePass password manager to steal data and install ransomware and spread it using ads and fake websites resembling real software pages.

MOZILLA FIXED ZERO-DAYS RECENTLY DEMONSTRATED AT PWN2OWN BERLIN 2025

Mozilla has addressed two critical vulnerabilities in Firefox discovered during the Pwn2Own Berlin 2025 contest, which could allow attackers to access data or execute malicious code, urging users to update immediately for safety.

GEN AI CREATIVE IS JUST ABOUT TO CHANGE THE FACE OF OUT-OF-HOME ADVERTISING

Gen AI is set to transform digital out-of-home by enabling personalized creatives that adjust in real time to external signals like location, sentiment, and environmental conditions. Nike is exploring AI-powered campaigns that tailor messaging by geography and event context, while WPP and Nvidia are working on systems to automate production across thousands of formats.

74% OF NEW WEB PAGES INCLUDE AI CONTENT (STUDY OF 900K PAGES)

Ahrefs analyzed 900K new web pages and found that 74% contained AI-generated content. Only 25.8% were purely human-written, while 71.7% had a mix of AI and human input. Among the mixed pages, 25.9% had moderate AI use, 20.5% substantial use, and 15.5% dominant AI presence. The study highlights that AI is now the default tool for content creation, with 87% of surveyed content marketers using it.

HOW TO TURN LOW TRAFFIC A/B TEST IDEAS INTO ONES YOU CAN ACTUALLY RUN

To run A/B tests with low traffic, use higher-frequency goals like add-to-cart actions instead of orders, or micro-conversions such as clicks to key pages. Limit your test to a single variation to reduce the traffic needed for statistically significant results, and test additional variations iteratively. Increase the minimum detectable effect to 30% to lower the required traffic, but only if your variation is bold enough to produce a noticeable impact. Avoid unreliable metrics like time on page or scroll depth, which can lead to false positives.

FLASH SALES WITHOUT BRAND DAMAGE

Flash sales work best when urgency is built through dynamic low-stock alerts, tiered discounts for early buyers, and personalized timers based on user behavior. Segment audiences to re-engage lapsed customers, clear seasonal overstock, and revive inactive lists with one-day events. Coordinate messaging across email, SMS, and ads to prevent fatigue and protect ongoing campaigns. Limit exposure for recent buyers and promo-only shoppers to maintain list quality. Use a warm-up phase to tease offers, a short focused launch, and a cool-down to retarget non-buyers.

GOOGLE MERCHANT CENTER NOW RECOMMENDS PRODUCT'S BRAND NAME IN TITLE

Google Merchant Center recommends adding the product's brand name at the beginning of titles when the brand is a key differentiator. This update aims to help shoppers quickly identify products and build trust by showing who makes them. While not yet mandatory, prepping titles now can improve click-through and conversion rates, ensure better search matching, and keep you ahead of potential enforcement. Avoid using your store name unless you manufacture the product. Brand names should only reflect the actual maker.

GOOGLE AI MAX FOR SEARCH CAMPAIGNS: NEW INSIGHTS FROM GOOGLE'S AD LIAISON

AI Max for Search campaigns will begin rolling out globally at the end of May. The feature introduces keywordless targeting based on landing page content and ad assets, while still supporting traditional keyword match types. Enhanced controls, geo-targeting options, and detailed reporting will also be part of the rollout. Early results show up to 27% more conversions for campaigns using exact and phrase match.

WEBSITE PERFORMANCE BUDGETS ARE KEY TO A MORE SUSTAINABLE INTERNET

Modern websites are often bloated, with the average page size more than doubling in the past decade. This increases energy use and slows performance. A performance budget sets limits on factors like page weight and load time to reduce digital carbon footprints and improve user experience. These budgets must be integrated early in the design process and included in client briefs to guide sustainable decision-making.

TWO WAYS TO CROSS THE CHASM

The “chasm” describes the gap startups face when shifting from early adopters to mainstream users who expect more than just a product. To cross it, most companies focus on one niche and deliver a complete solution, including support, training, and integrations. Others like Notion, Slack, and OpenAI succeed by gaining massive adoption through a product-led approach where individual users quickly find value and share it widely. This large user base builds credibility and often creates the ecosystem needed for broader market adoption.

24 CREATIVE MARKETING CHEAT SHEETS

Cheat sheets for writing headlines, taglines, briefs, B2B ads, and AI prompts.

7 LEARNINGS FROM 12 MONTHS OF ABM CAMPAIGNS

Key strategies for account-based marketing campaigns that consistently drive pipeline.

Read the step-by-step tutorial here →

WHY AI IS DANGEROUS FOR MOST TEAMS

Generative AI amplifies whatever product culture it enters - good or bad - making broken processes more dangerous. To truly benefit, teams must rethink roadmaps, highlight risks, and use AI to drive smart, strategic action.

WHEN CUSTOMERS BUY YOUR COMPETITOR'S PRODUCT… AND THEN BUY YOURS

Enterprises often buy both expensive and cheap tools for the same job because the cheaper one offers unique value, is easy to buy, and bypasses red tape. Startups can win by building focused tools, simplifying purchasing, and growing small wins into larger deals through trust and utility.

THE SILENT STRAIN OF SOLO PRODUCT MANAGERS

Strong product managers thrive in ambiguity, but unchecked solo work breeds misalignment, rework, and team strain. Balancing independent progress with lightweight collaboration ensures speed doesn't sacrifice trust or outcomes.

THE NASTY SIDE EFFECTS OF BAD PLG

Romanticizing PLG ignores its limitations, like capped revenue potential, hidden costs, and missed insights from real customer conversations. Scalable success demands blending PLG's efficiency with sales-driven depth and strategy.

HOW APPLE AND NOTION USE JAKOB'S LAW, A PSYCHOLOGY HACK, TO WIN

Users expect your app to work like others they know, so great design leverages familiar patterns and mental models to create intuitive, seamless experiences rather than reinventing the wheel.

HOW TO IDENTIFY HIGH-LEVERAGE IMPACTS

An Impact is a specific lagging metric tied to company or team goals that helps focus Product Discovery with clear starting points. Grounding Discovery in strategic Impacts, often from OKRs, guides targeting, reduces ambiguity, and drives meaningful outcomes.

THE CXO GUIDE TO BUILDING AN AI-FORWARD TEAM

Leading companies embed AI into their culture by pairing strong leadership with focused funding and high-impact use cases. They build momentum through experimentation, cross-functional hackathons, targeted training, and by weaving AI into hiring, performance, and core operations for scalable transformation.

HOW TO STOP HOLDING YOURSELF BACK

Power means influence, and too often, people quietly give it away through hesitation, silence, or outdated self-protection. Reclaiming it begins by recognizing the stories that hold us back and choosing to show up boldly.

THE GENIUS OF SVPG

The book 'Transformed' helps product leaders embrace change without ego, making it a powerful tool for internal transformation. It shows that real change requires more than knowledge - timing, structure, legitimacy, and context-specific approaches all matter.

HOW TO ASK BETTER QUESTIONS

Ask only what leads to action or insight - everything else is just noise.

BILLIONS ARE UP FOR GRABS WITH THIS AI WAVE

The AI wave is like the early App Store gold rush - a brief chance to build fast, focus deep, and ship relentlessly.