Search the archive

AAVE FOUNDER SAYS DAOS NEED TO EVOLVE, NOT DISAPPEAR

Aave founder Stani Kulechov argues DAOs must separate treasury oversight from execution to increase speed.

HYPERLIQUID DOMINATES DEFI PERPS REVENUE

Crypto is trending towards having category leaders capture most revenue.

ARTEMIS MAPS THE AGENTIC COMMERCE STACK

Artemis published an “Agentic Commerce Market Map” that organizes 152 companies across the stack, showing how quickly the tooling around AI agents and onchain commerce is filling out into a full ecosystem.

DEFI'S QUIET BREAKOUT: RWAS, STABLECOINS, AND PERPS

Onchain RWA market cap is climbing to fresh highs into 2026.

APPLE'S IMAC COULD GET FUN NEO-LIKE COLORS THIS YEAR

Apple is reportedly planning to launch a new iMac later this year with a refreshed color palette similar to the MacBook Neo's Silver, Blush, Citrus, and Indigo options. The new iMac would likely feature Apple's M5 chip, following the current M4 iMac lineup that comes in seven colors. It remains unclear whether Apple will use the same Neo colors or maintain its current $1,299 starting price.

PHOTOSHOP'S NEW AI ASSISTANT HELPS YOU EDIT IMAGES WITH SIMPLE PROMPTS

Adobe has launched a beta AI assistant for Photoshop on the web and mobile, enabling users to edit images through natural language commands instead of navigating menus. The assistant can modify backgrounds, adjust lighting, remove objects, and guide users through complex workflows via text or voice. It's part of Adobe's broader AI push across its creative suite, which recently expanded to include conversational PDF editing and AI tools in Acrobat and Premiere.

NEW IPHONE 18 PRO LEAKS EXPLORE DESIGN DETAILS, DIMENSIONS, MORE

Rumors suggest the iPhone 18 Pro may be slightly thicker (8.8 mm) to accommodate a larger 5,000mAh+ battery and the new 2 nm A20 Pro chip, while Apple may reuse some iPhone 17 Pro molds. If that happens, expected changes like a much smaller Dynamic Island and under-display Face ID could be reduced or delayed.

THE MOST UNDERUTILIZED COMPETITIVE ADVANTAGE: BRAND CULTURE

The Seattle Seahawks' Super Bowl victory demonstrates how a brand culture that contemporizes heritage can be a powerful competitive advantage. Brand provenance - a company's authentic history and origin story - serves as a foundational strength when it preserves the best of the past while staying relevant for present and future performance. Successful brands maximize the paradox between heritage and relevance rather than simply balancing them, creating distinctive value propositions that don't compromise on contradictory benefits.

WHY YOU SHOULD DESIGN LAYOUT CONTENT BLOCKS INSTEAD OF FULL TEMPLATES

Designing layout content blocks instead of full templates offers a more adaptable approach for modern digital products, unlike rigid page templates that break when content shifts. Modular blocks are self-contained units built on consistent grid systems, allowing pages to scale naturally. This approach speeds up iteration, simplifies developer handoffs, and embeds brand consistency directly into the system.

LEADING DESIGN TEAMS IS EASY, BUT WE MADE IT COMPLICATED

Design teams often struggle to show impact because they join companies late—after products are already built with little UX—and are sometimes treated as visual executors rather than strategic contributors. To increase their influence, designers must broaden their skills beyond visuals by understanding business, data, leadership, and new technologies like AI and code.

→

AI THAT UNDERSTANDS YOUR BRAND

BrandingStudio.ai is an AI platform that creates complete brand identities in 50-70 minutes through seven integrated modules, including strategy, visual design, and launch assets.

AI-POWERED PPT GENERATOR

GenPPT AI is an AI-powered presentation generator that uses Claude Opus 4.6 to create professional PowerPoint slides from text descriptions in minutes.

PRODUCT DEMO VIDEO MAKER WITH AI

Storyship offers AI tools for creating demo videos, audiobooks, and lip-sync content from existing materials such as screen recordings, manuscripts, or videos.

DESIGNING THEIR OWN PATHS: WOMEN IN THE DRIBBBLE COMMUNITY SHARE THEIR STORIES

Women designers in the Dribbble community share diverse stories of building creative careers on their own terms, from freelance illustrator Irene Neyman, who reformatted her career after becoming a mother to prioritize intentional project choices. Miné Day, co-founder of MUTI Studio, emphasizes creating collaborative work cultures where people feel valued rather than having to prove their worth. Their experiences highlight that being a woman in design means choosing visibility over safety and defining success through personal values rather than traditional paths.

DESIGN INSPIRATION VIDEOS FOR CREATIVE ESCAPE

Curation of Curations is a website by Sulaimaan Durrani that gathers high-quality design inspiration videos, documentaries, interviews, and talks into one dark-mode destination, free of algorithmic noise. The site features carefully selected content from sources like Google Design, Apple, and Vox, focusing on quality over quantity with videos that require attention rather than passive consumption. It serves as an antidote to creative fatigue by providing designers with curated content worth watching, organized like a cinema lobby with thoughtful editorial judgment.

STAIRWAYS TO NOWHERE: WHY AI MAKES BLUEPRINTS MATTER MORE THAN EVER

Many software products are built like the Winchester Mystery House—features added without a coherent plan—because teams ship in silos without designing the overall user journey first. Companies need a “blueprint” approach to design that maps how users move through systems and how components connect, especially with AI accelerating development, or they risk creating fast but fragmented experiences that drive customers away.

ARE CREATIVES REALLY LEAVING THE UK IN DROVES, AND IF SO, WHY?

Many UK creatives are leaving or considering leaving due to economic pressures, as work slows, budgets shrink, and clients become more cautious about spending.

ADOBE FIREFLY VS. MIDJOURNEY 2026 COMPARISON: WHICH WINS?

Firefly is designed for seamless integration into Adobe's creative workflow and commercial safety, while Midjourney excels at visual exploration and artistic outputs.

LINDA MERAD DIVES INTO AN UPSIDE-DOWN OCEAN FOR HERMÈS

French illustrator Linda Merad created a surreal lithography-inspired animated campaign for Hermès' “Venture Beyond” theme, turning a small Instagram commission into a broader digital project featuring a whimsical seahorse journey through a fantastical world.

Schedule a demo to learn more

TEMPORAL: THE 9-YEAR JOURNEY TO FIX TIME IN JAVASCRIPT

Temporal is a newly standardized JavaScript API that finally fixes the numerous pain points associated with the legacy `Date` object. The `Date` object's issues, including mutability, inconsistent arithmetic, and ambiguous parsing, led devs to rely on large third-party libraries. Its development involved multi-company collaboration, notably using the unique `temporal_rs` shared Rust library for implementation across JavaScript engines.

YOUR DOCS DIRECTORY IS DOOMED

The common practice of managing context for LLMs through simple Markdown `/docs` directories is a failing, temporary solution. This approach leads to problems like discoverability issues, ownership ambiguity, "doc rot," and a lack of hierarchy. A “Context-Driven Development" (CDD) approach might be better, where context is strategically owned by the organization, and is made navigable, composable, and tightly linked to the codebase.

THE REASON MOST PEOPLE ARE TERRIBLE COMMUNICATORS (AND HOW TO FIX IT)

Many people struggle with communication because they explain complex topics bottom-up, starting with details and gradually building to a conclusion. A top-down communication approach, beginning with the main point and then providing context as needed.

TAMING CHAOS IS A LEARNABLE SKILL

Taming the inherent chaos of software engineering is a learnable skill. Engineers must adopt a proactive attitude, own their systems, and focus on finding solutions by cutting scope rather than corners within budget constraints.

EVERY MINUTE YOU AREN'T RUNNING 69 AGENTS, YOU ARE FALLING BEHIND

The prevalent social media rhetoric that uses fear and anxiety to push new AI tools is all nonsense. AI is not a magical force, but rather a continuation of exponential progress, primarily functioning as advanced search and optimization, with inherent limitations. Avoid zero-sum games, and instead focus on creating genuine value for others.

AGENT BROWSER PROTOCOL

Agent Browser Protocol (ABP) is a specialized Chromium build designed to facilitate AI agent interaction with web browsers. It transforms continuous web browsing into discrete, stable steps, allowing AI agents to reason effectively without racing against a live browser. ABP does this by pausing JavaScript and virtual time between actions.

PLANNOTATOR

Plannotator is an interactive, visual tool for reviewing and refining plans generated by AI coding agents. It provides features like plan diffs, code review, and the ability to annotate any markdown file, streamlining the agent's development workflow. The tool integrates seamlessly with AI coding agents such as Claude Code, OpenCode, Pi, and Codex.

MANY SWE-BENCH-PASSING PRS WOULD NOT BE MERGED INTO MAIN

A METR study found a gap between AI-generated code passing automated benchmarks and its acceptance by human maintainers. Roughly half of the AI-generated PRs that passed SWE-bench automated tests were rejected by repository maintainers, even after adjusting for review noise. Maintainers cited issues like poor code quality, breaking other code, or core functionality failures as reasons for rejection.

HOW WE HACKED MCKINSEY'S AI PLATFORM

CodeWall's autonomous AI agent successfully exploited an unauthenticated SQL injection vulnerability in McKinsey's internal AI platform, Lilli, gaining full read and write access to its production database within two hours. This compromise exposed over 46.5 million chat messages, 728,000 sensitive files, and McKinsey's entire proprietary RAG knowledge base.

WHY IS WEBASSEMBLY A SECOND-CLASS LANGUAGE ON THE WEB?

Despite advancements since 2017, WebAssembly is still a second-class language on the web, primarily due to cumbersome code loading and a lack of direct access to Web APIs. This limitation creates a difficult developer experience. The WebAssembly Component Model is proposed as a solution to provide first-class integration into the web.

RUST IS SLOWLY BUT SURELY EATING POSTGRESQL: DEEP DIVE INTO NEON, PARADEDB, PGDOG, AND MORE

Rust is improving the PostgreSQL ecosystem by enabling the creation of safer, more performant, and scalable extensions and infrastructure.

THE MACBOOK NEO

The MacBook Neo is a $600 laptop using powerful A-series chips to deliver great performance and quality, which is unprecedented for Apple compared to its past history of high performance for a high price.

IT'S OFFICIAL: WIZ JOINS GOOGLE!

Wiz, a cloud and AI security company, has officially joined Google through a $32 billion acquisition.

AN ENGINEER'S GUIDE TO PRODUCT MANAGEMENT

As product and engineering roles converge, engineers must adopt core product management skills, like gathering context, tracking success, and communicating actionably, to make better product decisions and improve overall product outcomes.

with code CUA1.5K. Claim your offer here

UNCOVERING A NEW DEVICE CODE PHISHING CAMPAIGN

A phishing campaign exploited Microsoft's OAuth 2.0 device code flow by tricking victims into visiting Cloudflare Workers-hosted pages that imitate Adobe Acrobat Sign, using BEC-compromised sender domains. It automatically copied an attacker-generated device code to the clipboard and redirected victims to the legitimate microsoft.com/devicelogin portal to collect tokens. The attacker's backend polls Microsoft's device code endpoint every 3 seconds, exchanges the completed code for OAuth access and refresh tokens scoped to Microsoft Graph, and then silently redirects victims to adobe.com—leaving no signs of compromise. Indicators of compromise (IOCs) from 23 workers.dev subdomains, along with suspected sender addresses embedded in account names, are published. Defenders should look for device code authentication events in Entra SigninLogs by filtering for `AuthenticationProtocol == "deviceCode"`. They should also flag first-time device code authentications with no prior 30-day history (`ResultType == 0`) and alert on workers.dev URLs in inbound email that are linked to the same-user authentication events.

MICHELIN CONFIRMS DATA BREACH LINKED TO ORACLE EBS ATTACK

Tire maker Michelin has confirmed that attackers exploited an Oracle E-Business Suite zero-day as part of a wider Cl0p-led campaign tied to FIN11, accessing a small volume of non-sensitive data from its environment. Cl0p claims to have leaked over 315GB of Michelin files.

235,000 AFFECTED BY CYBERATTACK ON LARGEST AMBULANCE PROVIDER IN WISCONSIN

Hackers hit Bell Ambulance in Wisconsin and stole sensitive data for about 238,000 people, including Social Security numbers, IDs, financial details, medical, and insurance information. The breach was detected in February 2025, with notifications rolling out from April as more victims were identified. The Medusa ransomware gang claimed the attack and tied it to a $400,000 ransom demand for 219 GB of data.

HOW "STRENGTHENING CRYPTO" BROKE AUTHENTICATION: FRESHRSS AND BCRYPT'S 72-BYTE LIMIT

CVE-2025-68402 is an authentication bypass in the FreshRSS edge branch caused by changing the login nonce from a 40-character SHA-1 hex string to a 64-character SHA-256 hex string, which, combined with bcrypt's 72‑byte input limit, results in a vulnerability. The longer nonce pushed all password‑dependent bcrypt data past the truncation boundary, so password_verify() returned true for any password until the concatenation order was fixed.

YOUR AI COPILOT IS THE NEWEST ATTACK SURFACE

Four 2026 incidents involving Excel Copilot, Chrome Gemini, Microsoft Copilot Personal, and Perplexity Comet revealed a common architectural issue: AI agents inherit extensive permissions (such as file access, network egress, credential autofill, and camera/microphone access) and cannot reliably distinguish legitimate user instructions from attacker-injected content, enabling zero-click exfiltration, session hijacking, and full credential vault takeover through indirect prompt injection (OWASP LLM01:2025). While all four vulnerabilities have been patched, the structural gap persists: 83% of organizations plan to deploy agentic AI, yet only 29% feel prepared to secure it. Security teams should enforce outbound network restrictions on AI-enabled applications, audit agent permission scopes to ensure least privilege, and treat untrusted data sources (documents, calendar invites, and URLs) as potential injection vectors in any agentic workflow.

PRODUCT SECURITY SCORECARDS: COUPLING SECURITY ISSUES WITH PREVENTATIVE CONTROLS TO DRIVE SECURITY MATURITY

Postman's application security team leveraged embedded security engineers to create a custom product security scorecard that teams and management can use to quickly surface security issues and their fixes across projects. The scorecards pair detected security issues with preventive controls, such as repo scanning, and can also incorporate more free-form “security asks” from Jira tickets. The security scorecard allowed teams to roll PR blocking out to their repos and use commit pre-checks to block noncompliant commits.

JAZZ SECURITY (PRODUCT LAUNCH)

Jazz provides an AI-native data loss prevention platform that monitors how sensitive data is used across systems, infers user intent and context, and surfaces only high-risk incidents instead of noisy rule-based alerts.