Fireblocks' latest Stablecoin Signals highlights that monthly crypto card spend surpassed $115M in January 2025, up from roughly $25M a year earlier, with new players like Ether.fi gaining traction alongside established providers. The data challenges the narrative that crypto cards are confined to developing regions, showing accelerating adoption across EEA countries and rapid growth in Asia, Europe, and Latin America as providers like Gnosis Pay, RedotPay, and Avici Money scale programs.
Coinbase CEO Brian Armstrong publicly acknowledged that Base App's SocialFi features "didn't quite work," marking an admission of failure for the L2's consumer social push and signaling a potential strategic pivot for Base's onchain social ambitions.
Apple introduced a new Preview app in iOS 26 and iPadOS 26, bringing the Mac's PDF and image viewer/editor to iPhone and iPad. The app provides a dedicated place to view, edit, sign, annotate, and manage PDFs and images, improving multitasking and document handling compared to using the Files app alone.
Config 2026 speakers are sharing where they see the biggest opportunities with AI as it speeds up work and unlocks new creative possibilities. From Holly Herndon reimagining AI models as collective human endeavors to Danit Peleg bridging digital and physical manufacturing, each speaker is pushing the boundaries of what AI-powered creativity can achieve. Grant Sanderson adds that as software implementation becomes commoditized, design and user agency will matter more than ever.
Apple briefly published and removed a regulatory listing for a device called MacBook Neo, suggesting a cheaper MacBook may launch soon. The rumored laptop could cost $599–$799, feature a 12.9-inch display and an iPhone-class A-series chip, and target students and budget buyers to compete with Chromebooks and mid-range Windows laptops.
LLMs fabricate design token values, lose context between sessions, and make inconsistent micro-decisions when building prototypes, resulting in designs that feel "off" despite individual choices appearing reasonable. The solution involves restructuring design systems into LLM-readable spec files, a closed token layer, and automated auditing to catch violations. This approach ensures consistent visual quality across multiple AI coding sessions by preventing LLMs from guessing design values.
Brad Frost introduces "Real-time UI," a concept that uses AI and design systems to generate user interfaces instantly during conversations without traditional design tools. This approach aims to make design more collaborative and democratic by allowing teams to visualize and prototype ideas in real-time as they discuss them. The technology could reduce barriers to participation in the design process and enable a wider range of perspectives to contribute to digital product development.
AI now handles much of the early design work—like generating layouts, flows, and components—leaving designers to focus on the final refinement, judgment, and strategic decisions. As a result, the role is shifting from creating UI to curating AI outputs, collaborating with engineers, and deciding what should actually be built and why it matters.
Colorflow is an advanced mesh gradient generator and editor designed for creating sophisticated gradient designs. It offers professional-grade features for generating and customizing complex mesh gradients.
Grainrad is a browser-based visual playground that transforms your images and videos into live, GPU-accelerated effects like ASCII art, halftone, pixel sorting, VHS, matrix rain, and more — all in real time, right inside your browser.
Wall Street repriced SaaS stocks after Anthropic launched Claude Code Security, with Figma dropping 70% from its peak amid the $285 billion "SaaSpocalypse." Figma recently partnered with Anthropic to launch "Code to Canvas," allowing developers to push rendered interfaces directly into Figma's design canvas as editable objects via the MCP protocol. This positions Figma not as a traditional SaaS tool but as a dense orchestration node in AI workflows, where defensibility comes from routing density rather than feature velocity.
AI image generation has advanced with Google's Nano Banana Pro, which integrates reasoning capabilities to understand user intent better and produce more accurate outputs. Current AI models struggle with causality and physics, failing to accurately depict sequences like a falling wine glass breaking and spilling. Future breakthroughs may involve world models that understand physical laws and temporal reasoning, as demonstrated by NVIDIA's experimental ChronoEdit model.
While collaboration and flatter hierarchies have improved creative industries, strong creative direction is still essential for producing great work. Bold ideas often face resistance early, so creative leaders must have the courage to defend them, make decisions, and risk being unpopular rather than diluting ideas to keep everyone comfortable.
Rather than replacing traditional design tools, AI complements canvas-based workflows by automating repetitive tasks, allowing designers to focus on visual refinement and creative exploration.
Semantic search improves agent performance, but indexing large codebases traditionally takes hours. Cursor addresses this by reusing existing codebase indexes from teammates, using the high similarity often found within an organization's repositories. This secure reuse is enabled by similarity hashes to identify the best index to copy, and Merkle tree-based "content proofs" which make sure users only access code they already possess.
Firefox's default right-click context menu has 26 options, which can feel cluttered. However, editing the `about:config` settings allows one to disable a large number of these unwanted buttons, such as "Ask an AI Chatbot" or "Copy Text From Image." While these changes reduce the menu to 15 items, several buttons are not removable, like "Bookmark Link" and "Email Image".
The common problem of React frontend types drifting out of sync with backend APIs can be fixed by a "contract-first" approach. This means making the OpenAPI specification the single source of truth for generating TypeScript types, API clients, and validation schemas automatically using tools like Hey API.
Company goals should primarily serve as a communication tool to create clarity. There are six rules for designing effective goals, including limiting the number of goals to three, ensuring one "wins in a fight" for prioritization, making them easily understandable, and explicitly defining non-goals.
Atlassian's free webinar [14] shows how modern leaders are using Loom to communicate with their distributed teams more authentically and consistently. Learn how async video helps reinforce strategy, build trust, and reduce turnover by keeping people aligned and informed between live touch points. Covers leadership updates, cross-timezone communication, and change management, plus a free leadership guide for
The Google Workspace CLI provides a unified tool for interacting with all Google Workspace APIs, including Drive, Gmail, and Calendar. Designed for both human users and AI agents, it dynamically builds its command surface by reading Google's Discovery Service, automatically incorporating new API endpoints and methods. For humans, it has features like tab-completion and easy API calls, while for AI agents, it provides structured JSON output and over 100 pre-built agent skills.
CodebuffAI is an open-source AI coding assistant that edits codebases with AI. It operates through a multi-agent system, coordinating specialized agents for tasks like file picking, planning, editing, and reviewing to achieve better context understanding and accuracy.
Alibaba's Qwen AI team is experiencing turmoil following the unexpected resignation of its lead researcher, Junyang Lin, reportedly due to an internal reorganization. This departure triggered a wave of resignations from several other key Qwen team members, including core leaders responsible for various model developments. Alibaba's CEO held an emergency meeting as a result.
Vercel has dedicated the past year to improving Next.js's support for AI agents, as these agents previously struggled to "see" browser-side errors and internal framework state. They initially experimented with Vector, an in-browser agent, but sunset it, integrating its core insights on structured visibility and framework-specific knowledge directly into Next.js. This led to the Next.js MCP server instead, which turned out to be a better way for AI agent integration.
Apple today unveiled the all-new MacBook Neo, an accessible laptop that delivers the Mac experience with the 13-inch Liquid Retina display, Apple Silicon, and all-day battery life, at a price of $599, much lower than other MacBooks.
Locutus is a project that provides 606 TypeScript implementations of standard library functions from 18 different programming languages, making them individually available for use in JavaScript/TypeScript projects.
CVE-2026-21902 (CVSS 9.8) is a pre-authentication RCE in Juniper Junos OS Evolved on PTX Series routers caused by the On-Box Anomaly Detection Framework's Python REST API binding to 0.0.0.0:8160 instead of an internal-only interface, exposing unauthenticated shell command execution running as root. Exploitation requires four unauthenticated HTTP POST requests: register a RE-SHELL command, wrap it in a DAG, schedule a DAG instance, then commit, after which the schedule enforcer passes the attacker-controlled syntax field directly into subprocess.run(). Affected versions are Junos OS Evolved 25.4 before 25.4R1-S1-EVO and 25.4R2-EVO. Operators should patch immediately and audit exposure of port 8160/TCP at network boundaries.
CVE-2017-7529, a now-patched integer overflow in nginx's Range header parser, affected versions 0.5.6 through 1.13.2 and allowed attackers to read out-of-bounds memory from nginx's cache files by crafting two negative byte ranges that caused a signed 64-bit integer overflow in the size accumulator, bypassing the content-length bounds check. When nginx operated as a caching proxy, the exploit leaked the raw cache file contents, including internal request headers, backend server identity, and potentially backend IP addresses. The vulnerability carried limited direct impact but demonstrated how information disclosure primitives can serve as links in a broader attack chain.
LexisNexis confirmed that attackers accessed legacy servers, exposing customer identifiers, business contact data, survey respondents' IPs, and support tickets, while denying any impact on current products and services. Hackers claim React2Shell and misconfigured AWS led to theft of over 2 GB of data, including 400,000 personal records and sensitive enterprise, employee, and development information.
Coruna is a sophisticated iOS exploit kit containing five full exploit chains and 23 total exploits targeting iOS 13.0 through 17.2.1. It proliferated from a commercial surveillance vendor customer to a Russian espionage group, UNC6353, which conducted watering hole attacks against Ukrainian users, and ultimately to a Chinese financially motivated actor, UNC6691, that deployed it via fake crypto exchange sites to steal cryptocurrency wallet credentials. The kit's final payload, PLASMAGRID, hooks into 18 crypto wallet apps, scans for BIP39 seed phrases, and uses a DGA seeded with "lazarus" to generate fallback C2 domains. iPhone users should update to the latest iOS immediately. Where updates aren't possible, enabling Lockdown Mode is recommended, and defenders should review the published YARA rules and IOCs for hunting activity.
DNS-01 is a standard for validating ACME certificate issuance by publishing a DNS record to verify the domain ownership. The mechanism can lead to operational complexity because it requires a new TXT record for each issuance, which may need DNS API credentials to be embedded in automation scripts. It also makes the renewal process vulnerable to DMS propagation delays. Let's Encrypt has proposed a new standard called DNS-PERSIST-01, which enables a persistent DNS record to pin an ACME request and specific CA that can issue records.
Gitleaks has traditionally built its secrets scanner using a combination of regexes, entropy, and rule-based filters. This post details how the team adapted the scanner to use token efficiency, which tests how frequently a piece of text appears in a model's training data by dividing it into tokens, instead of entropy, to boost performance. Using this method and a few other tweaks, the author created a tool called BetterLeaks, which outperforms other scanners, such as CredSweeper, on secret detection in the CredData dataset.
2026.03.05·
lookingatcomputer.substack.com·6 min read·TLDR InfoSec
The launch of Claude Code Security validates what you already know: AI coding risks require AI-native, agentic app security [12]. But enterprise security isn't redundant. Real risk extends beyond AI-generated code. Agentic AppSec delivers end-to-end coverage across development, build, and runtime. Read the Checmarx blog to see why.
CStrike v2 is an autonomous offensive security platform built on a containerized Docker stack with a real-time web dashboard and AI-driven scan orchestration across 35+ integrated tools.
JetStream provides an AI governance platform that builds dynamic “AI Blueprints” to map AI agents, models, data, tools, and identities, giving enterprises real-time visibility, risk control, and cost tracking for production AI deployments.
TrustTunnel is an open-source VPN protocol originally developed by AdGuard VPN that delivers fast, secure, and reliable VPN connections that are indistinguishable from regular HTTPS traffic.