Full-text search across article titles and summaries. Refine with sector, year, content type, and reading-time filters.
Being a founder is hard — harder than almost every non-founder realizes. All founders have moments when they want to throw in the towel. However, if you have conviction in what you’re building, keep pushing. If you don’t: figure out how to quit.
The BlackCat/ALPHV ransomware gang has claimed responsibility for a cyberattack on Optum, a subsidiary of UnitedHealth Group. The attack caused an ongoing outage affecting the Change Healthcare platform, a large payment exchange platform used by more than 70,000 pharmacies across the United States. The gang claims to have stolen 6TB of data from Change Healthcare's network, including sensitive personal information.
Security flaws have been discovered in several internet-connected doorbell cameras, including ones made by EKEN. The most serious issue allows hackers to take full control of a camera by holding down a button and scanning a QR code. Retailers have been alerted, but only some have removed the vulnerable cameras from sale.
Pepco, a European discount retailer, lost €15 million in a phishing attack targeting its Hungarian business. Whether the funds are recoverable is uncertain. The company is financially stable and currently conducting a security review. No customer or employee data was compromised.
This post breaks down 10 security features that can be used to enhance your Okta security posture. Highlighted features include ThreatInsight, behavior profiling, admin and user session management, and password and MFA policies.
A tutorial from AWS on how to utilize the newly added `STRIPE_CREDENTIALS` managed data identifier in Amazon Macie to identify Stripe API keys in S3 Buckets. It walks through setting up the Macie job and includes sample data.
Cloudflare made the decision to abandon its usage of Nginx in favor of building its own proxy. This article goes through the issues Cloudflare faced with Nginx and the design decisions that went into Pingora's design. It concludes with an in-depth review of the performance gains that were achieved.
Scanme is a Go package for network scanning. It can scan single IP addresses for open ports.
Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes interfaces for alerting, dashboards, hunting, PCAP, and case management.
Infisical is an open-source secrets management platform that features a dashboard, client SDKs for fetching secrets, an API, and integrations with several platforms, like Kubernetes and Terraform.
An invitation to a wine-tasting event was discovered to be part of a targeted spearphishing campaign that distributed a new stealthy backdoor called WINELOADER to European diplomats. The invitation included a malicious link to a fake questionnaire - targets were told that the questionnaire must be filled out in order to participate in the event. The link redirected to a compromised site that downloaded a file containing obfuscated JavaScript code to execute the attack.
Researchers discovered a malicious AI model on Hugging Face that could enable attackers to gain full control of users' machines. The model executes code after loading a pickle file, leaving victims unaware that their systems were compromised.
Ubiquiti EdgeRouters are being used by the Russian-backed APT28 group to collect information and proxy malicious traffic. The FBI revealed that it accessed routers belonging to businesses and homes to remove APT28’s malware and add firewall rules to prevent reinfection. The operation did not patch any vulnerabilities - owners are urged to check their equipment for signs of compromise.
Each year, PortSwigger accepts nominations for the top novel web hacking techniques of the year. Users then vote on finalists and panelists choose the winners. This list contains links and summaries for each chosen attack.
GitHub has enabled push protection by default for all public repositories to prevent accidental exposure of secrets such as access tokens and API keys when pushing new code.
Synopsys reported a 54% increase in high-risk vulnerabilities in commercial codebases compared to the year before.
Following criticism from an Adalytics report about ads being displayed on unsuitable websites via its Search Partner Network, Google has introduced updates to provide advertisers with more oversight and control, including impression-level placement reporting and the ability to exclude placements at the account level. The changes will be effective March 4th.
Meta's transition to replace account team members with AI is causing concern among advertisers. Reports indicate that entire teams have been downsized, leading to frustrations about the perceived lack of premium service despite significant ad spend on the platform. These reports contradict Meta's assertions that AI is being used to improve efficiency and streamline operations with benefits to its customers.
A/B testing minor changes like CTA button color won’t move the needle. Instead, A/B test sign-up form offers, abandoned cart flow content, and campaign content in your marketing email flows.
Cognism increased its pipeline by 26% by adjusting LinkedIn Ads to target job functions instead of job titles. Its team started by refining their ICP and identifying exclusions based on industry, job title, and more. Based on this, they created specific segments from their ICP to pursue. This resulted in an increase in engagement rate, pipeline, and impression share among their targeted accounts.
Over 2.6K SMBs use AI for content marketing and/or SEO. 2 in 3 use AI tools for this purpose. The most common use cases are researching content ideas, rewriting and paraphrasing text, and writing content from scratch. 79% of businesses report an increase in content quality and 65% report an improvement in SEO performance when using AI. This report contains more data on AI usage as well as 70 AI prompts for SEO.
This report covers the overall key social media benchmarks for 14 industries including beauty, home decor, and tech. TikTok engagement rates dropped by about 50% this year, but the platform still has the best engagement rate overall. Engagement rates declined about 20% on X compared to last year. Almost every industry earned high engagement rates from holiday-hashtagged posts.
This post contains templated outlines for writing case studies, product update emails, landing pages, and ebooks/whitepapers. Zoom into the carousel for better legibility.
It’s a huge misconception that startups need to scale all channels available to have a fighting chance. In reality, you only need one growth channel to be successful. Dropbox grew from 100K to 33.9M users almost exclusively through referrals. NerdWallet dominated SEO by producing 500 pieces of content per month, resulting in $599M revenue in 2023. MVMT, a direct-to-consumer watchmaker, cracked influencer marketing early on and eventually sold to Movado for $100M.
GOAT's cofounders tried 3 different ventures before finally pivoting to creating an authenticated luxury sneaker marketplace. Shortly after launch, a poorly planned Black Friday promo crashed their site and oversold inventory. Their users were furious, but the silver lining was that this was a signal that they had finally achieved product-market fit. From growing and expanding since then, the cofounders have learned to prioritize reducing friction for users and to go slow with expansion into new markets or products.
This post shares an example of competitive vs. contextual positioning for Chrome vs. Arc Browser.
European media groups, including Axel Springer and Schibsted, filed a €2.1bn ($2.3bn) lawsuit against Google, alleging digital ad losses and antitrust violations. They are claiming that Google's dominance in ad-tech led to less competitive markets and reduced revenues for publishers.
Sponsored
As a product manager, your days are filled with nonstop meetings. You need every meeting to drive progress, but too often they drift with no clear outcome. Fellow ensures every meeting stays focused and impactful by creating agendas, taking notes, and following up on action items.
There is a culture within some tech companies where ideas are promoted based on salesmanship rather than critical thinking and evidence. A shift towards evidence-guided development that emphasizes strategic context, clear goals, research-based ideas, and product discovery would create a healthier work culture and improve business results.
Both public and private markets prioritize revenue growth over product quality or human welfare, leading to layoffs and mismanagement in tech and media industries. Executives prioritize investor satisfaction over user needs, resulting in the decay of creativity, innovation, and journalistic integrity. Tech's obsession with AI reflects a broader trend of prioritizing symbolic value creation over genuine customer benefit, exacerbating societal issues like spam advertising and deceptive subscription practices.
PM leaders empower their teams to maintain focus and make tough decisions. The language of money and high-level trade-offs can be used as strategies to justify and support PMs in declining urgent but non-essential requests.
Great products start with a compelling premise that reshapes user behaviors and norms. A strong foundational belief can empower users to embrace actions they might have hesitated to take before.
Google's search algorithms have shaped the internet, leading to widespread search engine optimization practices that prioritize visibility over content quality. The consequences of this optimization include homogenized website designs and the proliferation of low-quality AI-generated content. Generative AI may cause a shift away from Google-centric strategies.
AI PM work can be categorized into two main vectors: source and level of implementation. These distinguish core vs. growth vs. AI PMs based on their focus and how AI is utilized - either to enhance features, create new features, or develop entirely new products. There are unique challenges and rewards in each area.
It is important for companies to adopt a product and platform operating model to thrive in the digital age. There is a correlation between operating model maturity and business performance outcomes. The piece provides insights into how companies can improve their operations in key areas like "ways of working," culture and talent management, and tooling to achieve greater innovation, customer engagement, and overall success.
Eddy Lu's entrepreneurial journey from failed ventures to founding GOAT, a successful sneaker and luxury apparel platform, showcases the unpredictable path to product-market fit. Despite numerous setbacks and pivots, including a cream puff franchise and a social dining app, Lu and his co-founder, Daishin Sugano, persevered, demonstrating the importance of passion, problem-solving, and resilience in the startup world.
Data-driven approaches are crucial in VC investment, particularly from the perspective of LPs. Data analysis can enhance various aspects of the investment process for LPs, including sourcing, underwriting, and accessing funds. Combining data-driven methods with experience and expertise in evaluating fund performance can lead to gaining access to top-performing funds.
The work we do shapes us over time. We go from actively choosing our work to being fundamentally changed by it. The evolution from focusing on tangible outputs to prioritizing "managing optics" for career advancement can profoundly alter one's values and decision-making.
This article provides insights into delivering specific and actionable work feedback. It outlines several strategies to enhance its effectiveness, including seeking "permission" to give feedback while highlighting its benefits, explaining the reasons behind the feedback, offering genuine positive feedback without resorting to the "sandwich" method, and fostering a common language to facilitate clear communication.
Different types of "theater" are seen in corporate efforts when changing product-building practices. These behaviors often mimic transformation without achieving real change. This needs to be tackled early on when shifting to product-focused models.
Reddit's upcoming IPO reveals mixed financials: positive net income and adjusted EBITDA in Q4 2023 but overall cash burn. While diversification potential exists through data licensing, heavy reliance on advertising and concentrated user metrics raise sustainability concerns.
3 essential components of a PM’s job: identify the customer problem, turn a general problem into a tangible solution, and step in as needed to ensure the solution is effectively executed.
Software systems that don't properly account for Leap Days have a tendency to glitch or fail on February 29th. This year is no exception, with reports of failures in supermarket payment systems, airline ticketing, gas station payment terminals, smartwatches, and even a major video game. To prevent this from happening, software engineers should use framework-level date libraries wherever possible, be wary of edge cases, and not assume fixed durations for months and years.
Apple's iCloud and CloudKit were built using a combination of Cassandra and FoundationDB. Cassandra, which is being actively improved by Apple engineers, handles exabytes of data and millions of queries. FoundationDB powers CloudKit, Apple’s cloud backend service. It provides key features like transactional guarantees and solves scalability issues that Cassandra alone could not address. Each iCloud user gets their own database, resulting in billions of databases. This is made possible by the Record Layer's stateless architecture and resource allocation using a “record store” abstraction.
Together To Do is an iMessage extension designed to replace comma-separated text messages with a checkable list. Its developer found it challenging to integrate SwiftUI into iMessage extensions as Apple doesn’t use SwiftUI by default yet. Adding to this, iMessage functionality in the iOS 17 simulator was broken, making testing difficult and necessitating workarounds with older simulators or physical devices. While the potential audience within the iMessage App Store is smaller than the regular App Store, Together To Do has achieved notable rankings and consistent organic downloads, suggesting that iMessage extensions may be a viable niche.
When first starting work on a legacy C++ codebase, you should prioritize making the codebase manageable in terms of security, development experience, correctness, and performance by focusing on small, incremental changes. Aim for a passing test suite, remove dead code, enforce linters and code formatters, set up automated builds, and clearly document how to build and test the project. It’s also important to obtain buy-in from management by explaining the issues with the codebase and proposing solutions in non-technical terms.
The founder of the CSS-Tricks website sold the website in March 2022 to DigitalOcean, who promptly fired the content team and stopped publishing new content. He tried to regain control of CSS-Tricks and proposed running the site himself, but DigitalOcean ultimately declined the proposal due to a lack of internal support. Today, CSS-Tricks remains in a somewhat abandoned state.
It’s important to be “scale appropriate” when architecting software. Complexity multiplies with factors like supported browsers, platforms, and screen sizes. The tools that worked previously may no longer be suitable as you scale. Embrace the need to rebuild with new tools to manage the increased complexity.