Cloud software valuations have cratered to 10-year lows, with the median NTM revenue multiple hitting 4.1x. Investor confidence in the SaaS business model is fracturing as AI disruption risks threaten the retention rates and terminal value assumptions that powered the last decade of software investing. The path back requires companies to prove stable retention over multiple quarters.
2026.02.02·cloudedjudgement.substack.com·7 min read·TLDR Founders a16z surveyed 100 Global 2000 CIOs and found OpenAI still leads enterprise AI with 78% production usage, but Anthropic posted the largest share gain at +25% and now sits at 44% penetration. The surprise winner in enterprise apps is still Microsoft, not the startups dominating tech Twitter. Average enterprise AI spend rose from $4.5M to $7M and is expected to hit $11.6M this year.
The old model was to sell the software and let the customer figure it out. Businesses now need to do the work to make their AI great before they hand over the keys. AI agents will fail if improperly contained. It is up to the AI vendor to make it work. Customers shouldn't have to get agents to work.
Stop calculating “potential customers × potential price” and start with what the world currently spends solving your problem. That's your actual market today. Everything beyond that isn't market size, it's a thesis about growth. Most founders are stacking 3-5 speculative theses without realizing it, and since each compounds risk exponentially (30% × 30% × 30%), understanding this can dramatically improve how you allocate time and opportunity cost.
AI has collapsed the cost and time of building and testing products, which means feasibility, viability, and usability are no longer the hard parts: desirability is. The critical bottleneck in product discovery is now understanding what customers actually want. Teams need to shift investment toward deeper customer insight and research to answer the fundamental question before building anything.
Sponsored
connects equity, compliance, and stakeholder workflows in one platform - so you can issue shares with confidence, stay compliant by default,
Modern sales CRM designed for B2B startups.
Robynn is an AI marketing platform that helps founders create branded content.
AI agent for real frontend tasks: build UIs, refactor, and integrate.
Big Tech has figured out how to acqui-hire without the acquisition. License the IP, hire who you want, leave the rest behind. No regulatory review, no shared outcomes. Microsoft did it with Inflection, Amazon with Adept, and Google with Character AI. The unwritten oath between founders, employees, and investors is dead. When picking your next company, ask your VC who else they've backed in your category and what happened to employees at the founder's last company.
Microsoft, Oracle, NVIDIA, and Starbucks all started by selling something to a tiny, often invisible market before stumbling into bigger opportunities. The playbook isn't “envision a radically different future and build it,” it's figure out a real need by selling, learn by iterating on what doesn't work, avoid trying to predict the future or convince markets, and stay in the game long enough to catch a demand wave when it hits.
Slack faced issues with feature bloat and complexity by late 2019, as the product accumulated many additions without a cohesive structure.
Chase your passion with a blend of curiosity and practicality rather than as a blind directive.
Clarity of thought stands as a key differentiator for successful founders, influencing all aspects from hiring to sales.
AI could create a new form of advertising that may actually flourish.
2026.02.02·aspiringforintelligence.substack.com·12 min read·TLDR Founders We are now shifting into an 'agents as customers' era - companies need to be thinking about how to become the vendor that AI agents prefer.
MicroWorld Technologies confirmed unauthorized access to a regional eScan antivirus update server resulted in malicious updates distributed to customers during a two-hour window on January 20, deploying a modified "Reload.exe" file signed with what appears to be eScan's certificate. An analysis revealed the malware enabled persistence through scheduled tasks named "CorelDefrag", modified Windows HOSTS files to prevent legitimate updates, and connected to multiple C2 servers to download CONSCTLX.exe backdoor as the final payload. eScan isolated the compromised infrastructure within hours, rotated credentials, and released a remediation update for affected customers, though the company disputed claims about the discovery timeline and customer notification efforts.
A 2024 cyberattack on TriZetto Provider Solutions exposed protected health information and personal data for more than 700,000 patients across multiple US states, and the breach was not detected until nearly a year later. Oregon clinics are now notifying thousands of affected patients, while the owner, Cognizant, faces multiple class action lawsuits despite claiming the threat was swiftly contained and that no ransom was involved.
Aikido Security discovered a trojanized "ClawdBot Agent" VS Code extension impersonating the viral AI assistant Clawdbot, which deploys weaponized ConnectWise ScreenConnect software (Code.exe) configured to connect to attacker infrastructure. Microsoft quickly removed the extension after disclosure. The malware features a sophisticated multi-layered payload delivery. The attack demonstrates advanced evasion through functional AI features to avoid suspicion, process camouflage using legitimate VS Code executable names, DLL sideloading with anti-analysis timing checks, and quadruple impersonation layers that successfully weaponize trusted remote administration software.
2026.02.02·links.tldrnewsletter.com·18 min read·TLDR InfoSec AISLE's AI system discovered all 12 zero-day vulnerabilities in OpenSSL's January 2026 security release, marking the first real-world demonstration of AI-based vulnerability discovery at industrial scale. The findings span multiple subsystems and include vulnerabilities that remained undetected for up to 27 years, bringing AISLE's total to 13 of 14 CVE-2025-* vulnerabilities discovered in OpenSSL plus 5 genuine CVEs in curl. This achievement contrasts sharply with curl's cancellation of its bug bounty program due to overwhelming AI-generated spam, illustrating how AI simultaneously collapses median submission quality while raising the ceiling for sophisticated vulnerability discovery in critical infrastructure.
Russia's exclusion from the 2026 Winter Olympics removes critical geopolitical deterrents. The threat model has shifted from espionage to disruption, with potential attacks including destructive malware targeting operational technology, exploitation of Smart Road SS51 Alemagna's V2X infrastructure to hijack Variable Message Signs, and AI-amplified hybrid attacks combining cyber disruptions with high-fidelity deepfakes to transform technical outages into public safety crises. Defenders should prioritize zero-trust visibility with anomaly detection for IoT devices, implement micro-segmentation to prevent lateral movement from compromised edge devices, and deploy content provenance measures to verify legitimate communications against AI-generated content.
2026.02.02·unit42.paloaltonetworks.com·6 min read·TLDR InfoSec Kubernetes vulnerabilities can be divided into four key categories: pod weaknesses, identity and access mechanisms, cluster configuration components, and control plane entry points. This post provides a deep dive into several specific attack areas, including overly permissive RBAC, service account token abuse, malicious admissions controllers, writable volume mounts, unauthorized access to ETCD, and Kubernetes golden tickets. Each section includes an explanation of the attack vector, possible defenses, and a Falco rule to detect the attack.
Aisy provides an AI-assisted vulnerability management platform that maps infrastructure like an attacker, ingests tickets from existing tools, and surfaces chained, high-impact vulnerabilities so security teams can prioritize and remediate the most critical risks first.
SecObserve is an open source vulnerability management system for software development teams that supports a variety of open source vulnerability scanners. It integrates easily into CI/CD pipelines.
SysmonConfigPusher v2 is a web-based tool for managing Sysmon configurations across Windows endpoints using agentless or agent-based deployment.
At least 100 victims filed a class action lawsuit against xAI, alleging that Grok generated 4.4 million images over nine days, including at least 1.8 million non-consensual sexualized deepfakes of women, men, and children, posted publicly on X. The lawsuit claims that xAI executives knowingly failed to implement industry-standard safeguards and instead encouraged users to create "nudified" content through features such as tagging handles to manipulate photos and a "spicy" option for generating controversial content. The case adds to mounting legal pressure on xAI and Musk: 35 State Attorneys General have expressed "deep concern," and formal investigations have been opened by the EU, UK, South Korea, Canada, and Brazil, while US federal agencies remain silent.
Former Google software engineer Linwei Ding was convicted on seven counts of economic espionage and seven counts of trade secret theft for stealing over 2,000 pages of confidential AI materials between May 2022 and April 2023, including Google's AI supercomputing infrastructure, proprietary TPU/GPU systems, orchestration software, and SmartNIC networking technology. Ding is secretly affiliated with two China-based technology companies. He had a colleague scan his badge to falsely indicate his presence while traveling to China. The case highlights insider threat risks, as Ding stated his goal was to help China achieve computing infrastructure capabilities on par with international levels. Each conviction carries a maximum sentence of 10-15 years.
OpenClaw, a widely popular open-source AI agent, is rapidly gaining adoption across enterprises, integrating with email, messaging, and system tools, creating powerful non-human identities with broad access. Experts warn that its “vibe-coded” development, supply chain exposure, and susceptibility to prompt injection form a “lethal trifecta” of risk.
A 2017 confidential source told the FBI that Jeffrey Epstein employed an Italian hacker from Calabria who specialized in finding vulnerabilities in iOS, BlackBerry, and Firefox, developing and selling zero-day exploits and offensive cyber tools to multiple governments.
This report stages a Red Team vs Blue Team experiment between two autonomous agents to probe three key risks - Access, Exposure, and Agency - to understand how the agents work and think.
Automated data extortion attacks compromised approximately 1,400 misconfigured MongoDB instances accessible without authentication.
Sponsored
Each week, millions of buyers use AI to search for products, making decisions long before they talk to a salesman.
playbook to rank high across ChatGPT, Perplexity, and Google results.
Card payment data shows consumers are still spending in early 2026, but behavior is more selective and deal-driven. Visa and Mastercard report a gap between weak sentiment surveys and stronger actual spending. Higher-income shoppers drove the most growth, with the top-spend band rising fastest in Q4 2025 while lower-spend bands remained flat. Travel and e-commerce stay strong, and cross-border volume rose 15% as holiday shopping moved online.
Super Bowl ads now drive digital campaigns as much as TV exposure. Brands tease campaigns early, create meme-friendly content, and extend the story before and after the game. They link content to product drops or e-commerce to turn attention into sales. Mentions, shares, and watch time help push content to the top of feeds. The Super Bowl spot acts as a launchpad for online visibility and influence across social and streaming platforms.
The best B2B events feel like great parties rather than nonstop sales pitches. Keep leadership relaxed so they can connect with guests. Invite clusters of attendees who know each other and overbook strategically to account for no-shows. Encourage movement with standing areas, food, and drinks spread out. Train your team to host and introduce, not sell. Treat events as a service to the community. People remember the experience and make connections that pay off later.
This BuzzStream podcast breaks down how Revver's Rage Cage campaign turned accountant frustration with paper into a live activation that drove 90 deals and major organic growth. Great ideas start with audience research, not channels. Takeaways include calling customers to uncover repeat pain points and using Reddit tools like Gummy Search to spot patterns. Build campaigns around one clear insight and tie creative directly to revenue through email nurture and sales follow-up. Strengthen your mid funnel first, and then take informed creative swings.
Moltbook is a new social network where AI agents post, argue, and collaborate while humans watch. Built by Matt Schlicht, the platform is largely run by an AI that moderates posts and manages users. Thousands of agents are already participating, sharing ideas and even flagging bugs. The project explores what happens when autonomous systems interact in public, without direct human control.
The panel will discuss how marketers can build exactly what they need, test ideas fast, and improve workflows without waiting on budgets or developers. They'll walk through an example of turning YouTube comments into real influencer signals via its API. The free event will take place on February 3 at 7 AM PT.
Ro's CEO breaks down why a Super Bowl ad can make economic sense despite a $233K per second price tag. His argument centers on attention density, with more than 100M viewers actively watching ads, compressing years of brand awareness into one night. He frames the risk as capped within a large marketing portfolio, while upside comes from improved CAC and downstream efficiency across search, social, TV, and OOH. The math shows that even a 1% to 3% lift in future marketing efficiency can justify an eight-figure spend over 12 months.
In today's attention-driven market, a single viral post can outperform traditional ads. Startups like Cluely used extreme storytelling and armies of micro-creators to generate billions of views at minimal cost. Social engagement is now a form of due diligence. VCs now chase mindshare, talent flows into content-first roles, and marketing standards rise. Product quality matters, but attention drives funding and growth.
Negative GEO is possible because some AI models will surface false negative claims if that content appears on discoverable third-party websites. In a controlled test using a fake persona and 10 established sites, only 2 of 11 models cited the planted content after several weeks. Perplexity included the negative allegations and treated site citations as enough support, even without mainstream sources. ChatGPT referenced the same sites but flagged credibility issues and noted the lack of corroboration from trusted outlets. Results show that model trust checks and source authority strongly affect whether damaging claims appear in AI answers. This tactic does not scale easily across most models.
Longer wait times can lead customers to spend more time receiving a service, which can worsen congestion.
A framework used by Ross Simmonds for his own clients.
Sponsored
Vibe coding lowered the barrier to entry for prototypes, but can you vibe code production features? With v0 by Vercel [4], you can.
built in.
SpaceX may potentially merge with Tesla and xAI. Some investors are pushing the idea, saying it could attract sizable interest from infrastructure funds and Middle Eastern sovereign investors. No final decisions have been made, and details could change - the companies may decide to remain separate. SpaceX is considering an IPO in June around Elon Musk's birthday.
2026.01.30·links.tldrnewsletter.com·3 min read·TLDR