Search the archive

CZ'S OPINION ON AI AGENTS

Crypto can be the currency for AI, but not every agent needs its own token.

CRYPTO ETPS SEE $1.7B IN OUTFLOWS, LONGEST STREAK SINCE 2015

Crypto ETPs have logged five straight weeks of outflows totaling $6.4B, marking the longest negative streak since 2015, though year-to-date inflows still sit at $912M.

WALLETCONNECT TRANSFERABILITY

WalletConnect's WCT Transferability Proposal vote starts on March 19.

APPLE'S "UGLY AND EMBARRASSING" AI DEBACLE IS CAUSING TENSION IN THE COMPANY

Apple is facing internal tension over delays in its AI-powered Siri upgrades, with a senior director calling the situation "ugly and embarrassing." Reports suggest the marketing team pushed to showcase features at WWDC before they were ready, adding to the frustration. With Apple pulling an ad promoting the new Siri, doubts are growing over whether the promised improvements will arrive soon.

GOOGLE IS TESTING A NEW CARD-STYLE DESIGN FOR THE ANDROID SETTINGS APP

Google is testing a new card-style design for the Android Settings app in Android 16, aiming to improve navigation and visual clarity. The update introduces distinct cards for each menu item, redesigned toggle switches, and arrows for submenus, making finding and adjusting settings easier. While not yet stable, these changes are expected in future Android updates.

AMAZON DESIGN VET CAN'T SHAKE DESIRE TO CREATE ART AND MUSIC, SO HE LEFT TO BUILD A NEW VR EXPERIENCE

After nearly nine years at Amazon, Grant Hinkson left his design engineering role to pursue his passion for art, music, and game development. His first project, Connectome, is a VR experience that blends gameplay, mystery, and an ambient musical score he composed himself. Now working independently, Hinkson sees VR as the perfect medium for storytelling and is testing whether he can turn his creative passion into a sustainable career.

6 TIMES APPLE NAILED UI DESIGN

Apple's UI design mirrors its sleek hardware, blending sophistication with fun, as seen in features like Safari's Distraction Control, Tap to Cash animations, and Dynamic Island multitasking. Subtle yet effective design touches, from priority notifications and bounces to expressive iMessage text animations, enhance user experience. Future updates are rumored to bring even more refinements.

LESSONS I'VE LEARNED AS A UX/UI DESIGNER IN A FAILED STARTUP

Keeping things simple with a minimum viable product (MVP) is key when building a startup. Instead of adding unnecessary features based on guesswork, it's better to focus on what users need and refine them based on their feedback. Using existing tools can speed development, and strong teamwork with clear communication keeps things moving smoothly. Flexibility is also necessary—learning from mistakes and adjusting helps improve the product and your work.

AI + UX: DESIGN FOR INTELLIGENT INTERFACES

AI-powered products, especially those utilizing large language models, bring unique challenges for tech designers. The design of intelligent interfaces is crucial for making AI systems accessible, usable, and trustworthy. Designers should prioritize explainable AI, error management, usability, and iterative collaboration with engineers to create compelling, user-friendly AI experiences.

RENAME YOUR FILES WITH AI

Automatically rename your files based on their content using AI.

ALL-IN-ONE AI DESIGN PLATFORM

Generate and edit in one place with AI-powered design workflow.

WHY STAKEHOLDERS DON'T VIBE WITH USER RESEARCH

User research in organizations can be challenging when stakeholders resist due to uncertainty, a lack of incentives, or a misunderstanding of its value. Overcoming this requires clear explanations, strategic advocacy, and selective prioritization to demonstrate its impact on creating better products.

THE MODULAR DESIGN ADVANTAGE: WHY FLEXIBILITY IS THE FUTURE OF PRODUCT DESIGN

Modular design provides flexibility, scalability, and cost-effective manufacturing. It enhances customization, simplifies repairs, and promotes sustainability. Widely used in industries such as furniture, housing, and technology, it enables easy upgrades, reduces waste, and improves product longevity, making it perfect for adapting to market needs.

DESIGN SYSTEMS REPORT 2025 – AN OVERVIEW

Design systems are essential in product development. More organizations are forming dedicated teams. However, scaling and governance remain challenges. Measuring impact is critical, with teams focusing on adoption, efficiency, and system health. The future includes better integration, AI-powered systems, and increased collaboration across design, development, and product teams.

GALNOY FONT: A MODERN TAKE ON SERIF TYPOGRAPHY

Galnoy, a serif typeface by bydani, blends Gothic, Art Nouveau, and modern influences for a striking yet minimal design.

GRAPHIC DESIGNERS NEED TO KNOW ABOUT THESE TYPOGRAPHICAL OPTICAL ILLUSIONS

Seven optical illusions in type design that affect letter spacing, stroke thickness, and shape perception.

ECO-FRIENDLY LOGO DESIGN: THE AESTHETIC OF SUSTAINABILITY

Brands embracing eco-friendly logos with natural colors, organic shapes, and minimalist designs to reflect sustainability.

100 CAR DEALERSHIPS HIT BY SUPPLY CHAIN ATTACK

100 dealerships have been compromised through ClickFix code displaying fake reCAPTCHA prompts. When clicked, these prompts copied commands to users' clipboards and instructed them to execute these in Windows Run, ultimately installing SectopRAT malware.

APACHE TOMCAT VULNERABILITY ACTIVELY EXPLOITED JUST 30 HOURS AFTER PUBLIC DISCLOSURE

CVE-2025-24813 in Apache Tomcat is under active exploitation 30 hours post-disclosure. The vulnerability enables remote code execution through malicious serialized Java uploads via PUT requests, no authentication is required. It is critical to update to versions 9.0.99, 10.1.35, and 11.0.3 ASAP.

MALICIOUS ADOBE, DOCUSIGN OAUTH APPS TARGET MICROSOFT 365 ACCOUNTS

Proofpoint researchers uncovered a malware campaign using malicious OAuth apps posing as Adobe Drive, Adobe Drive X, Adobe Acrobat, and DocuSign. These apps request minimal benign permissions but redirect users to phishing pages or malware downloads.

DETECTING HOTKEY-BASED KEYLOGGERS USING AN UNDOCUMENTED KERNEL DATA STRUCTURE

Hotkey-based keyloggers register alphanumeric hotkeys that, on keypress, record the keystroke, unregister the hotkey, resend the keypress, and reregister the hotkey. These keyloggers are stealthy since the RegisterHotKey and UnregisterHotKey APIs are not monitored by ETW. In this post, Elastic researchers detail their detection method for hotkey-based keyloggers using an undocumented kernel data structure listing all registered keyloggers' hotkeys.

THE CAT FLAP - HOW TO REALLY PURRSIST IN AWS ACCOUNTS

This post describes a method for obtaining backdoor persistence in AWS by modifying the AWSControlTowerExecution role to allow an attacker-controlled account to assume it. The attack is effective because many tools will not flag violations against this role, which contains AdministratorAccess by default. There are likely other AWS service roles that this attack could utilize.

ANALYSIS AT SCALE WITH X64DBG AUTOMATE

The post covers how to use x64dbg Automate to automate repetitive x64dbg tasks like finding malware entrypoints, annotating payloads, and bypassing anti-debug checks. A malware sample is included for experimentation.

ongoing CVE management. Read the blog

AICEBERG (PRODUCT LAUNCH)

Aiceberg is designed to prevent unsanctioned, unsuitable, or illegal content and automatically redacts personal and other sensitive information. It can detect common cyberattack vectors such as prompt injection, prompt leaking, and jailbreaking and is capable of performing a security analysis of agentic workflows.

NODE VERSION AUDIT

Node Version Audit is a convenient tool to easily check a given Node.js version against a regularly updated list of CVE exploits, new releases, and end-of-life dates.

ANNOUNCING OSV-SCANNER V2: VULNERABILITY SCANNER AND REMEDIATION TOOL FOR OPEN SOURCE

Google's OSV-Scanner V2.0.0 is an open-source vulnerability scanner that now integrates with OSV-SCALIBR. It offers improved dependency extraction, layer-aware container scanning for Debian, Ubuntu, and Alpine images, interactive HTML output, and guided remediation for Maven pom.xml files. Future plans for the project include enhanced integration with OSV-SCALIBR, increased ecosystem support, full filesystem accountability, reachability analysis, and VEX support.

TIKTOK ROLLS OUT A ‘SECURITY CHECKUP' TOOL TO HELP USERS SECURE THEIR ACCOUNTS

TikTok's new "Security Checkup" tool offers users a centralized screen to review security settings, enabling two-factor authentication, backup logins, device management, and biometric options.

ATTACKERS USE CSS TO CREATE EVASIVE PHISHING MESSAGES

Threat actors are using CSS to create evasive phishing messages by hiding text and tracking user behavior. Cisco Talos has observed attackers exploiting CSS to evade detection and raise security concerns. Experts recommend using advanced filtering and privacy proxies to mitigate these risks.

UPDATE: STOPPING CYBERCRIMINALS FROM ABUSING COBALT STRIKE

Microsoft, Fortra, and Health ISAC are working together to stop cybercriminals from misusing Cobalt Strike and compromised Microsoft software to deploy ransomware. They have made significant progress in reducing the availability of unauthorized copies and seizing malicious domains. Ongoing efforts include sending takedown notices and collaborating with law enforcement to combat illicit usage of cyber intrusion tools.

JAGUAR LAND ROVER BREACHED BY HELLCAT RANSOMWARE GROUP USING ITS INFOSTEALER PLAYBOOK—THEN A SECOND HACKER STRIKES

The HELLCAT ransomware group breached Jaguar Land Rover (JLR) by leaking sensitive data through stolen Jira credentials obtained via infostealer malware, which were later exploited by another actor, "APTS," to exfiltrate additional data from JLR.

EMAIL SECURITY NOW AVAILABLE FOR FREE FOR POLITICAL PARTIES AND CAMPAIGNS THROUGH CLOUDFLARE FOR CAMPAIGNS

Cloudflare is offering free Email Security to protect political campaigns from cyber attacks.

WHITE HOUSE EXEMPTS CYBER PROS FROM MASS LAYOFFS; JUDGE REINSTATES CISA FIRINGS

The White House has exempted cybersecurity professionals from layoffs, offering hope during CISA job cuts, and a judge has reinstated fired federal employees, underscoring management incompetence in the DOGE project.

making the trip count twice by attending Uptempo's Plans Uncorked

– where clued-in pros will elevate their planning approach through fresh perspectives, meaningful connections, bold insights (and an open bar 🍷).

Get your all-access pass

TARIFFS TRIGGER ‘HORRIFIC' PLUNGE IN CONSUMER SENTIMENT

Concerns over tariffs and economic uncertainty have weakened outlooks on personal finances, labor markets, and business conditions. The Federal Reserve is expected to keep interest rates steady while monitoring inflation expectations. Analysts warn that declining sentiment could slow consumer spending, with rising savings rates and cautious retailer forecasts signaling a potential downturn.

SOBERING REVENUE STATS OF 70K MOBILE APPS SHOW WHY DEVS BEG FOR SUBSCRIPTIONS

Most mobile apps struggle to generate revenue, with fewer than 20% making $1K per month within two years. The top 5% of apps now earn 500X more than the rest, widening the revenue gap. Developers increasingly push subscriptions, as most trial sign-ups happen on the first day, and retention rates are low. Apps are expected to introduce more paywalls, upsells, and alternative pricing models to stay afloat.

GUIDE TO SIGNAL-BASED CAMPAIGNS

Signal-based campaigns rely on behavioral and data-driven intent signals to determine when a potential buyer is ready to engage. Setting them up involves structuring a CRM with tiered accounts and enriched contact data, defining account engagement stages to track progress, setting clear rules for sales and marketing handoffs, and implementing workflows to act on signals efficiently. These campaigns improve conversion rates by reaching the right people at the right time, but they require careful execution.

FIVE PLG TACTICS EVERY SALES-LED COMPANY SHOULD DO

Interactive demos help sales teams qualify leads faster, with companies like Amplitude attributing 30% of their pipeline to them. Time-based trials create urgency, accelerate deal cycles, and increase conversions by letting prospects experience the product firsthand. Self-serve activation reduces churn and improves retention by ensuring new users engage with the product without relying on high-touch onboarding. Tracking product signals enables proactive expansion efforts, improving Net Dollar Retention by identifying upgrade opportunities early. UGC builds trust and drives growth for companies like Salesforce and ServiceNow, which leverage customer contributions to enhance engagement.

blog

👉 Improve your marketing & grow your business. Track and analyze

leads with CallRail's AI platform.

INSIGHTS FROM 20,000 A/B TESTS WITH CONVERSION (WEBINAR)

Stephen Pavlovich and Steph Le Prevost from experimentation agency Conversion will present key takeaways from analyzing 20K+ A/B tests and their results. The online webinar takes place on March 19 at 8 AM PT.

AI NOTETAKERS: BRAND BREAKDOWN

Fathom emphasizes speed, Fellow focuses on teams and security, and Fireflies positions itself as an AI-powered search tool. Grain offers video recaps, Granola prioritizes simplicity, and Otter serves as an all-in-one solution. Tactiq provides a browser extension for transcription, while tl;dv uses witty branding and AI-powered call summaries.

HOW MORE TOOLS AND TACTICS HURT MARKETING PERFORMANCE

Marketing teams often overload their tech stacks, leading to wasted effort. Mid-market companies use an average of 255 apps, many for marketing. To stay effective, companies should focus on high-impact tools, prioritize valuable channels, and streamline processes. Automation adds complexity if it doesn't truly reduce effort.

HOW AND WHEN "WORK–LIFE" MESSAGING IN MARKETING CAN BACKFIRE

Work-life messaging increases engagement for simple products like personal care and planners, but backfires for resource-heavy ones like education and travel. Research shows consumers often perceive these messages as reminders of conflicting demands, reducing interest in complex purchases. The findings challenge the common assumption that positioning a product for both work and personal life is always effective.

WILL PEOPLE BUY CARS ON TIKTOK?

TikTok is expanding into automotive advertising with two new ad formats. Inventory ads target buyers ready to purchase, while model ads focus on those still considering options. With 37% of adult users shopping for cars and 56% watching reviews, TikTok aims to move consumers from discovery to action. Early results show increased engagement and lower acquisition costs, with Peugeot (a French car brand) reporting a 95% improvement in cost-per-engage session, a 40% decrease in CPA, a 78% increase in CTR, and a 40% boost in engagement.