Search the archive

GOOGLE'S GEMINI ROBOTICS AI MODEL REACHES INTO THE PHYSICAL WORLD

Google DeepMind has unveiled Gemini Robotics, which enhances AI with language, vision, and physical action capabilities.

MICROSOFT IDENTIFIES STILACHIRAT, A TROJAN TARGETING CRYPTO WALLETS

A new trojan named StilachiRAT is infecting PCs to steal crypto wallet data by scanning for wallet extensions, saved credentials, and clipboard contents. Microsoft researchers recommend running antivirus scans, downloading software only from trusted sources, and using hardware wallets for extra security.

XRP ZOOMS 10% AS GARLINGHOUSE SAYS SEC IS DROPPING CASE AGAINST RIPPLE

Ripple CEO Brad Garlinghouse announced the SEC is dropping its appeal in the ongoing lawsuit alleging Ripple Labs performed unregistered securities sales of XRP tokens. The case has been a focal point of the industry's legal battles since 2025 and previously resulted in a $125 million fine for Ripple. With the legal hurdle cleared, the path is now open for XRP ETF.

COINBASE VERIFIED POOLS – A TRUSTED WAY TO SEAMLESSLY TRADE ONCHAIN

Coinbase's Verified Pools are KYC-integrated liquidity pools built on Uniswap v4 and its Base L2. It's designed to provide trusted, efficient onchain trading for both institutional and retail users. Utilizing Coinbase's verifications and Gauntlet's optimization, it offers concentrated liquidity and controlled access, reducing counterparty risks while maintaining non-custodial autonomy. It aims to bridge traditional finance and DeFi to accelerate onchain adoption with greater transparency and security.

RAZER AND SAM ALTMAN'S WORLD ADD ID VERIFICATION TO VIDEO GAMES

Razer has partnered with Tools for Humanity, the company behind the World L2, to launch Razer ID, a KYC-integrated solution using ZK to prevent bots in video games. Aimed at ensuring fair play in blockchain games with NFTs and reward pools, it addresses a bot encounter issue faced by 59% of surveyed gamers. The initiative is being debuted in Tokyo Beast, a game on the gaming-centric Immutable blockchain.

LIST OF USEFUL CRYPTO RESOURCES

These dashboards and tools offer a view of on-chain activity and network health across various blockchain ecosystems. Some of the resources include data visualization for Ethereum metrics (Grow The Pie), detailed staking and node analytics (Rated Network), real-time validator performance on Solana (Validators App), multi-chain on-chain activity tracking (Blockworks), and gas management tools (Gaz Zip and Smol Refuel). These tools provide valuable insights for developers and users to monitor, analyze, and make informed decisions in the crypto space.

BEST BTC YIELD OPPORTUNITIES

Bitcoin DeFi products offer APRs ranging from 5-10% to over 100%, each with a unique risk profile. Notable yields include BOB's 34-67% APR on LBTC markets, Morpho's 23.1% APR on Pendle PTs with 9.27x leverage expiring May 29th, and Kamino's cbBTC loop yielding 12.5% net LTV. Liquidity and leverage remain the primary risk factors.

FULL RECAP OF THE CRYPTO NARRATIVES OF 2024

This post recounts 2024's biggest crypto narratives, from ETF approvals and AI coin surges to memecoin mania and real-world asset (RWA) trends. Key moments include Bitcoin's all-time high, Trump's election rally, Solana's memecoin season, and the rise of AI agents in December.

YOUR TOKEN SUCKS (AND EVERYBODY CARES)

Current token designs suffer from unsustainable liquidity mining, ineffective airdrops, high FDV/low supply problems, and lack of value accrual, leading to sell pressure and investor disinterest. Demand-based token unlocks and discounted sales to active users is one option to align supply with real demand. The lack of strong tokenomics has been a leading factor in why this cycle has favored memecoins over utility-driven projects.

STABLECOIN USERS GREW 53% IN ONE YEAR

Stablecoin users grew by 53% in 2025, reflecting increased adoption as digital assets become increasingly integrated into mainstream financial services.

SOUTH KOREA'S CENTRAL BANK RULES OUT BITCOIN RESERVE POSSIBILITY

The Bank of Korea will not be incorporating Bitcoin into its foreign exchange reserves, citing its high volatility and incompatibility with IMF guidelines for reserve asset management.

ACCTUAL ALLOWS YOU TO GET PAID GLOBALLY

Acctual now lets customers invoice globally and receive same-day payments directly to their wallet or bank account, whether paid in stablecoins or fiat, with a clear 1% fee and no hidden charges.

HOW SCAMMERS USE HYPERLIQUID TO LAUNDER MONEY

Scammers exploited HyperLiquid's high leverage by intentionally liquidating stolen funds through a leveraged short while profiting from a corresponding long position on another exchange.

PEOPLE ARE USING GOOGLE'S NEW AI MODEL TO REMOVE WATERMARKS FROM IMAGES

Google's Gemini 2.0 Flash AI can remove watermarks from images, raising copyright concerns. Unlike other models, Gemini lacks strict safeguards and can reconstruct deleted areas. Google labels the tool “experimental” and prohibits copyright infringement but faces scrutiny over its potential misuse and legal implications for content creators.

DESIGN SYSTEMS REPORT 2025

The Design Systems Report 2025 explores the state of design systems based on a survey of 294 respondents, highlighting trends like mass adoption, resource constraints, communication hurdles, and ongoing automation efforts. It reveals that 79% of teams have full-time design system staff, typically maxing out at 20-25 people, and offers insights to help teams overcome challenges.

ADOBE: GENERATIVE AI RESHAPING CONSUMER BEHAVIOR, DRIVING MASSIVE TRAFFIC SHIFTS IN ONLINE SHOPPING, TRAVEL, AND FINANCE

Generative AI has reshaped shopping, travel, and finance, increasing online traffic. While AI has helped with research and recommendations, conversions have lagged, but engagement is rising. This shift is disrupting traditional search, pushing businesses to adapt.

QUIT SAYING “NO”! SAY “YES” THROUGH OPTIONS…

Designers can move beyond saying "no" by offering multiple solutions, empowering stakeholders, and fostering collaboration. This shift positions them as problem-solvers rather than gatekeepers, creating a more positive and productive work environment.

REBRAND VS REFRESH: WHY BRANDS SHOULD HOLD FIRE ON LAUNCHING A WHOLE NEW IDENTITY

A brand refresh can modernize and revitalize a company more cost-effectively than a full rebrand, preserving heritage while updating its identity. Successful examples, like Lloyds and Herman Miller, show how this approach can boost relevance and sales without a complete overhaul.

STORYTELLING FOR MAKERS

Technical brilliance alone isn't enough—designers and engineers must master storytelling to convey their ideas effectively. Strong presentation skills help translate complex concepts into compelling narratives. A three-step process—planning, writing, and delivering—ensures clarity and impact. Understanding the audience, structuring a story, and capturing attention is key to persuasive communication.

SKEW OBJECTS (FIGMA PLUGIN)

Skew objects in Figma with precise control over horizontal and vertical skewing, plus an additional flattening transformation.

SPECIAL HTML SYMBOLS

Explore and copy various HTML symbols to enhance your designs, improve readability, and add unique characters to your projects.

RANDOM COLOR CYCLER

FarbVélo is a playful color-picking tool. It follows simple rules and uses lots of random numbers to help you find unique color combinations.

CHANNEL 5 WANTS VIEWERS TO “REAPPRAISE” ITS PROGRAMMES VIA REBRAND

Channel 5 is rebranding as "5" with a new visual identity, revamped streaming platform, and major ad campaign to showcase its content's breadth and depth. The refresh includes bold colors, updated typography, and a clearer tone to attract new viewers while keeping its loyal audience.

&WALSH DESIGNS A CINEMATIC IDENTITY FOR BATCH'S REVOLUTIONARY POST-PRODUCTION TECH

&Walsh has designed a cinematic brand identity for BATCH, a tech company revolutionizing post-production with automated matte generation. Blending nostalgia with modern efficiency, the dynamic visual system reflects the software's constant motion and positions BATCH as the future of filmmaking.

META'S MESSENGER LOGO U-TURN: A BRANDING DISASTER

Messenger's return to the blue logo sparked criticism, highlighting its branding inconsistencies. The reversal undermined its earlier bold rebranding, signaling uncertainty. Critics argue that the change reflects a broader identity crisis, eroding trust and consumer confidence. Consistent branding and strategic decision-making are crucial for long-term brand success.

THE 14 TYPES OF ONBOARDING UX/UI USED BY TOP APPS

This categorized list of 14 onboarding UX/UI design patterns features use cases, pros/cons, and UI components.

HAND-DRAWN AND ILLUSTRATED POSTERS: A RETURN TO ORGANIC DESIGN

Designers are embracing hand-drawn posters for their authenticity and uniqueness.

DON'T BECOME THE BUTTHEAD

Designers with fixed mindsets prioritize their goals over the greater good, making collaboration difficult.

Get the Guide

CALIFORNIA CRYOBANK CONFIRMA DATA BREACH

California Cryobank, one of the largest reproductive tissue banks in the world, has disclosed a data breach that affects an undisclosed number of Americans. The hackers potentially stole data that includes SSNs, driver's license numbers, financial account numbers, and health insurance information. No known threat actor has claimed responsibility for the attack.

CRITICAL AMI MEGARAC BUG CAN LET ATTACKERS HIJACK AND BRICK SERVERS

MegaRAC BMC software enables remote server management, allowing admins to troubleshoot as if present. Eclypsium researchers identified a CVSS 10 vulnerability permitting remote, unauthenticated attackers to control affected servers. AMI, the software's developer, has issued patches to OEM manufacturers for customer rollout.

USE ONE VIRTUAL MACHINE TO OWN THEM ALL — ACTIVE EXPLOITATION OF VMWARE ESX HYPERVISOR ESCAPE ESXICAPE

VMware has released patches for three zero-day vulnerabilities in ESXi, which allowed threat actors to escape the hypervisor and access critical server data. The vulnerabilities are actively being exploited in the wild, posing a significant risk to organizations using VMware environments. It is crucial to patch affected systems promptly to prevent potential security breaches.

NEW VULNERABILITY IN GITHUB COPILOT AND CURSOR: HOW HACKERS CAN WEAPONIZE CODE AGENTS

Researchers from Pillar Security have discovered a new prompt injection technique on Cursor and GitHub Copilot. These systems use rules files to guide the prompting for the LLM, which is often distributed by open-source projects or from other untrusted locations. This attack involves utilizing invisible Unicode characters to hide malicious instructions for the LLM that can be used to instruct it to poison the generated code.

TURNING THE SECURITY FLYWHEEL

This post outlines seven security flywheels: reducing costs to raise security baselines, transitioning threat intelligence from push to pull, creating digital twins through asset inventory, enhancing detection via red teaming, identifying adjacent business benefits of security measures, implementing continuous control monitoring and forming federated teams that seek assistance instead of pushing initiatives. Each flywheel creates a cycle where initial investments yield benefits that can be reinvested, ultimately easing the burden on security teams while sustaining or improving security posture.

BYPASSING WINDOWS DEFENDER APPLICATION CONTROL WITH LOKI C2

Attackers can bypass Windows Defender Application Control with LOLBINs and Electron apps using tools like Loki C2. Modifying JavaScript in trusted Electron apps enables Node.js code injection to interact with the OS, allowing the execution of malicious payloads and the creation of advanced C2 agents like Dragon.

AWS IAM POLICY VISUALIZER (WEB APP)

AWS IAM Policy Visualizer is a web app that visualizes the relations in an IAM policy in graph format. The tool also provides a search function for large policies.

CVSS-BT

cvss-bt enriches the NVD CVSS scores to include Temporal/Threat Metrics.

STRINGREAPER

StringReaper extracts strings, such as JWT tokens and credentials, from remote process memory, saving time in engagements. It can filter memory regions and includes features like listing target sections and displaying remote environment strings.

NEW AKIRA RANSOMWARE DECRYPTOR CRACKS ENCRYPTION KEYS USING GPUS

A researcher has released an open-source decryptor for Akira ransomware that brute forces encryption keys. Akira generates unique keys for each file using four timestamp seeds, hashes them through 1,500 rounds, and encrypts them with another key, appending them at the end of each file. The researcher analyzed logs to estimate when the ransomware was active and used 16 4090s via RunPod & Vast.ai to decrypt a friend's files in 10 hours.

THE GREAT CNAPP RE-BUNDLE

With Check Point and Palo Alto exiting CNAPP, the field has consolidated around Wiz and a few leaders, losing much of its previous hype. CNAPP tools will revert to their components: CSPM for vulnerability management, ASPM for secure code development, and CADR for responding to cloud alerts.

MALWARE CAMPAIGN 'DOLLYWAY' BREACHED 20,000 WORDPRESS SITES

A malware campaign called 'DollyWay' has compromised over 20,000 WordPress sites globally, redirecting users to harmful sites since 2016. The campaign has evolved to include advanced evasion techniques and monetization strategies. GoDaddy researchers have linked this operation to a larger scam redirection system named 'DollyWay World Domination.'

CAPITAL ONE HACKER PAIGE THOMPSON GOT TOO LIGHT A SENTENCE, APPEALS COURT RULES

A federal appeals court has decided that Capital One hacker Paige Thompson's sentence was too lenient for stealing data from millions of customers - the case is now going back to the district court for resentencing.

RESEARCHERS USE AI JAILBREAK ON TOP LLMS TO CREATE CHROME INFOSTEALER

Researchers used AI tools to create malware that can steal login credentials from Google Chrome by manipulating generative AI platforms in a controlled narrative environment.

HACKERS HIDE VENOMRAT MALWARE INSIDE VIRTUAL HARD DISK IMAGE FILE

Hackers are hiding VenomRAT malware in virtual hard disk image files to infect devices.

Save your seat →

MANY DISCOVER PRODUCTS ON SOCIAL MEDIA BUT FEW PURCHASE

While 73% of shoppers discover products on social media, only 10% buy directly on the platforms. Most customers opt for marketplaces or retailer websites instead. Despite the trend, 37% of customers say they are open to purchasing through social media which suggests the hesitation may be due to trust and checkout friction.

INFLUENCER MARKETING INSIGHTS FROM 50 CMOS AND INFLUENCERS

The majority of CMOs agree that consumers prefer influencers who stay true to themselves, even if it's polarizing. 78% of CMOs feel that influencers who present their true selves resonate more with audiences. There's also a growing focus on qualitative insights beyond vanity metrics. 76.5% of brands are shifting budgets toward influencer marketing, especially micro-influencers.