Search the archive

PERFORMANCE HINTS

It is important to cultivate performance intuition from the start.

WHAT WE LEARNED FROM LEADERS BUILDING AGENTIC AI AT SCALE

Research with AI engineering leaders shows that the biggest challenges are experiential rather than model-related.

AFTER TWO YEARS OF VIBECODING, I'M BACK TO WRITING BY HAND

AI-generated code for complex projects has no integrity and leads to unmanageable "slop.”

👉 Download the report

impact. Sublime Security's 2026 EMAIL THREAT RESEARCH REPORT

analyzes real-world email attacks across organizations of all sizes to reveal what actually changed and why it matters.

PALO ALTO NETWORKS PATCHES FIREWALLS AFTER DISCOVERY OF A NEW DENIAL-OF-SERVICE FLAW

Palo Alto Networks has patched CVE-2026-0227 (CVSS 7.7), a high-severity DoS vulnerability in PAN-OS affecting firewalls with GlobalProtect gateway or portal enabled that allows unauthenticated attackers to force devices into maintenance mode. A PoC already exists, and the flaw mirrors CVE-2024-3393 from late 2024, which was exploited as a zero-day before patches were available. Organizations running PAN-OS versions 10.2 through 12.1 with GlobalProtect enabled should apply patches immediately, while most Prisma Access customers have already been automatically updated.

SYNOLOGY DSM 7.3.2

A local privilege escalation vulnerability chain in Synology DSM 7.3.2-86009 allows any authenticated user with shell access to gain root when DownloadStation with BitTorrent is enabled. The exploit chains three misconfigurations: a world-writable Transmission RPC socket running as root, a world-writable /volume1/@eaDir/ system directory, and a missing nosuid mount flag on /volume1, enabling attackers to configure Transmission's script-torrent-done-filename to execute arbitrary payloads as root upon torrent completion. A full PoC is available, and the vulnerability has been reported to Synology PSIRT.

KONNI HACKERS TARGET BLOCKCHAIN ENGINEERS WITH AI-BUILT MALWARE

Researchers from CheckPoint have discovered a new malicious campaign from the North Korean Konni hackers. The attack begins with a Discord link that downloads a zip archive containing a lure document and two batch files which downloads a PowerShell backdoor and then deletes other signs of infection. Notably, the malware contains signs of it being AI-generated, such as comments with variable placeholders.

ORGANIZED TRAFFER GANG ON THE RISE TARGETING WEB3 EMPLOYEES AND CRYPTO HOLDERS

Hybrid Analysis uncovered a sophisticated Russian-speaking Traffer operation targeting cryptocurrency users and Web3 employees through fake Electron applications disguised as AI productivity tools, meeting software, and gaming platforms, with documented earnings of at least $2.4 million. The campaign uses 80+ domains, elaborate fake company ecosystems with purchased social media accounts, and abused code-signing certificates to deliver second-stage payloads, with shared infrastructure suggesting links to the Marko Polo, CrazyEvil, and Wagmi Traffer groups. Security teams should monitor for the provided IOCs and exercise caution with unsolicited software downloads from Web3-themed applications, particularly those requiring invitation codes or tokens for access.

EXPLOITING KEYSPACE REDUCTION AND RELAY ATTACKS IN 3DES AND AES-PROTECTED NFC TECHNOLOGIES

Modern NFC cards used in hotel keys, tickets, and access systems can be attacked not by breaking 3DES or AES, but by abusing how keys and memory are handled after authentication. By relaying the legit reader–card handshake and then partially overwriting key bytes, attackers can shrink the effective keyspace from astronomically large to something brute‑forceable with modest hardware. Weak or missing integrity checks, non‑atomic key writes, and flawed non‑NXP clone cards make it possible to recover full keys from one or a few tags, sometimes in under a minute. Proper key diversification, locking key pages, enabling CMAC/secure messaging, and migrating to stronger platforms like DESFire EV3 sharply reduce these risks.

AMAZON CLOUDFRONT MTLS WITH OPEN-SOURCE SERVERLESS CA

AWS added support for CloudFront to use mTLS to require client certificates in requests at re:Invent 2025. This article walks through setting up CloudFront to use mTLS via an open-source serverless CA that the author developed. AWS should offer a standardized Trust Store, possibly in ACM, rather than having all services that support mTLS implement it separately.

SEC-CONTEXT

Comprehensive security anti-pattern reference distilled from 150+ sources designed for LLM consumption, addressing the 86% XSS failure rate and other critical vulnerabilities in AI-generated code. Provides two reference documents covering 25+ anti-patterns with pseudocode examples, Common Weakness Enumeration (CWE) references, and mitigation strategies optimized for use as system prompts, Retrieval-Augmented Generation (RAG) references, or dedicated security review agents.

WINDOWS-PENETRATION-TOOLS

A comprehensive Windows security toolkit written in C++ using MFC, designed for security researchers, penetration testers, and developers interested in Windows internals. This project demonstrates various security techniques, including DLL injection, process manipulation, privilege escalation, and system monitoring capabilities.

UPWIND (PRODUCT LAUNCH)

Upwind provides a runtime-native CNAPP platform that gives deep visibility into cloud networks, APIs, and data flows, reducing alert noise and helping prioritize real risk.

149M LOGINS FROM ROBLOX, TIKTOK, NETFLIX, CRYPTO WALLETS FOUND ONLINE

A security researcher discovered a 96GB database containing 149 million stolen credentials for services including Facebook (17M), Netflix (3.4M), Binance (420K), Gmail (48M), and government domains from multiple countries, exposed online without authentication. The data appeared to be collected via infostealer malware through an organized system with reversed labeling to sort by device and website. The database was actively growing during the month it took to get the hosting provider to take it offline. Users should enable MFA, use unique passwords via password managers, and monitor for credential exposure on services like Have I Been Pwned.

MALICIOUS VS CODE AI EXTENSIONS WITH 1.5 MILLION INSTALLS STEAL DEVELOPER SOURCE CODE

Security firm Koi Security uncovered two popular AI-branded VS Code extensions that quietly exfiltrate every opened and edited file to China-based servers, while still functioning as legitimate coding assistants. They also support remote-triggered bulk exfiltration of up to 50 workspace files, fingerprint devices via embedded analytics SDKs, and are linked to a broader “MaliciousCorgi” campaign alongside new PackageGate flaws in JavaScript package managers that weaken common supply chain defenses.

TIKTOK USERS FREAK OUT OVER APP'S “IMMIGRATION STATUS” COLLECTION - HERE'S WHAT IT MEANS

TikTok updated its privacy policy as part of its new ownership agreement, which triggered user notifications. Many users noted concerning amounts of sensitive data the app collects, such as precise location data and immigration status. TikTok has noted that this disclosure is required by laws such as California's CCPA.

CHATGPT TEMPORARY CHAT FEATURE IS GETTING A MUCH-NEEDED UPGRADE

OpenAI is testing an upgrade to ChatGPT's temporary chat feature that allows users to retain personalization while still preventing the conversation from being saved to chat history or used for model training.

DATA THIEVES BORROW NIKE'S 'JUST DO IT' MANTRA, CLAIM THEY RAN OFF WITH 1.4TB .

WorldLeaks claims to have stolen 1.4TB of internal Nike data, mainly design and manufacturing files rather than customer records.

APPLE C-SERIES MODEM ENABLES NEW PRIVACY-FOCUSED LIMIT PRECISE LOCATION FEATURE

iOS 26.3 introduces a new "limit precise location" setting for devices with Apple's C-series modem that obfuscates user location data from cellular carriers, reducing both third-party tracking and government surveillance capabilities.

a leader in work & project management. Try Asana for free >>

THE SLOP INVASION

Low-cost AI ads now overwhelm social feeds and reshape digital advertising around speed and volume instead of brand quality. Performance marketers use AI to produce and test hundreds or thousands of ad variations in minutes and for cents. This rewards strange visuals and cheap clicks over coherence. This strategy benefits dropshippers and fast fashion firms but degrades user experience and erodes trust in ads. Meta is struggling to control the flood since Chinese advertisers spend billions on it, and most ads do not violate clear rules. Human creative work is losing value as automation outperforms it on cost and scale.

VOTERS SEE A MIDDLE-CLASS LIFESTYLE AS DRIFTING OUT OF REACH

Most Americans feel a middle-class life is slipping out of reach. This is driven by rising costs for housing, education, health care, and retirement. While many can still cover basics, nearly 60% worry about affording essentials. Only 14% feel they are getting ahead financially. Younger adults feel the strain most. Many say they are worse off than their parents, while older Americans report far less stress. The result is widespread economic pessimism, even as consumer spending holds up and markets remain strong.

WIN REPORT: SIX WORDS, SEVEN PERCENT MORE LEADS

Adding six risk reduction words and a proof element increased sign-ups for Mobbin's free plan by 7%. The test targeted hidden objections about free trials, such as fear of credit card requirements and difficulty canceling. The variation added the line “No credit card required. Cancel anytime.” before the call to action and replaced client logos with a claim of supporting 870,000+ designers worldwide. These changes reduced perceived risk at the moment of commitment and improved conversion even though the offer already looked strong.

THE PROFIT-TO-ACQUISITION RATIO: HOW TO SET REALISTIC TARGETS WHEN STAKEHOLDERS HAVE UNREALISTIC EXPECTATIONS

The Profit-to-Acquisition Ratio helps set realistic targets based on real unit economics and clear tradeoffs. It starts by calculating breakeven ROAS or CPA from profit margin. The stakeholder or client can then choose how much profit to reinvest, which is a business decision more than a PPC decision. A 50% profit reinvestment is a good starting place for balanced growth.

CLAUDE AND FIGJAM

Teams can now turn AI conversations with Claude into editable FigJam diagrams from text, PDFs, or images. This makes it easier to visualize user journeys and project timelines while reducing back-and-forth. Diagrams become shared artifacts that help teams align, spot issues early, and refine ideas together.

HOW TO TRACK AI OVERVIEWS: MENTIONS, CITATIONS, CLICK LOSS, AND THE TRAFFIC GOOGLE WON'T SHOW YOU

AI Overviews are hard to measure because Google hides direct data. Performance must be inferred through citations, keyword ownership, brand mentions, and indirect traffic signals. Teams can estimate click loss and visibility shifts by tracking where pages appear, spotting new and missed AIO keywords, and analyzing CTR drops without ranking changes. Combining Search Console workarounds with tools or lightweight trackers helps reveal which content still drives ROI.

BETTER MARKET INTELLIGENCE USING AI

AI can mislead market intelligence by inventing facts and using outdated information. The right approach is to treat AI as a grounded research assistant that works only from trusted sources and ties every claim to evidence you can inspect. Better results come from precise prompts that require sources and explicit rules against guessing. Strong workflows verify key claims and avoid decisions based on a single source.

NEW FRAMEWORK ON REVENUE MOTIONS

Most companies confuse GTM tactics with growth strategy. Inbound or outbound explain how leads arrive, not how revenue flows. Early growth works by accident, but scale exposes the gaps as products and teams multiply. Revenue motions solve this by intentionally connecting a specific customer, product, GTM approach, and team ownership. Funnels assume one buyer path, which breaks in modern B2B. Without clear revenue motions, activity rises while efficiency falls. Defining them helps leaders drive intentional growth.

WEBFLOW MARKETING STRATEGY: HOW WEBFLOW BUILT THE MOST POWERFUL NO-CODE WEBSITE BUILDER

Webflow owned the middle ground between simple site builders and full custom development. It gave non-coders real control without developer dependency. It targeted professional designers, agencies, and fast-moving marketing teams by using technical language made visual, which reinforced a sense of craft and pricing power. Growth came from education-driven content like Webflow University, a community ecosystem of 85,000+ members, and agency-led distribution that turned partners into a scalable sales force.

REMARKETING DOESN'T MAKE SENSE ANYMORE

Meta already prioritizes high-intent users automatically, making isolated remarketing audiences mostly redundant.

THE “PINTEREST PANTRY” VS. REALITY

Storage trends dominating social include “The Sunday Reset Phenomenon", fridgescaping, and the side hustle stockroom.

8 LESSONS BRAND MARKETERS SHOULD TAKE FROM HEATED RIVALRY

Lessons about virality, fandoms, and inclusion.

Build inference that holds at scale →

INSIDE APPLE'S AI SHAKE-UP AND ITS PLANS FOR TWO NEW VERSIONS OF SIRI

Apple's AI efforts have resulted in a Google partnership, management changes, and two new versions of Siri. The company had considered partnering with OpenAI or Anthropic, but Anthropic wanted too much money, and OpenAI was actively poaching Apple engineers. Google was willing to agree to a financial structure Apple deemed reasonable, and its technology had improved significantly in recent months. Apple is planning an announcement for the second half of February that will include demonstrations of the new Siri.

CHATGPT'S LEAD SHRINKS AS GEMINI SURGES IN AI TRAFFIC WAR

ChatGPT's worldwide traffic declined in January as Google's Gemini's traffic increased. The shift marks a significant acceleration of competitive pressure. ChatGPT had a commanding share last year, but its dominance eroded over the course of the year. Gemini's growth reflects Google's systematic integration across its services and devices, which creates a distribution advantage through existing userbases.

BLUE ORIGIN MAKES IMPRESSIVE STRIDES WITH REUSE—NEXT LAUNCH WILL REFLY BOOSTER

The next launch of Blue Origin's New Glenn rocket will carry an AST SpaceMobile large communications satellite into low-Earth orbit. The mission will use a refurbished booster from New Glenn's second mission. It will launch from Cape Canaveral Space Force Station no earlier than late February. Blue Origin's turnaround time for the rocket (less than four months) is impressive, even for a well-capitalized program.

HARMFUL CHOLESTEROL LEVELS CUT IN HALF WITH ONE-TIME GENE EDITING DRUG IN EARLY TRIAL

A new experimental drug uses CRISPR to manipulate a single gene in the liver that normally boosts cholesterol levels. The approach works after one dose, helping people lower their levels of cholesterol and other fats in the blood permanently. While a Phase 1 clinical trial showed that the treatment is effective, its long-term safety is unknown. There are already safe and effective medications that can control cholesterol and fats, but patients tend to stop using them within a year due to side effects.

GAS TOWN'S AGENT PATTERNS, DESIGN BOTTLENECKS, AND VIBECODING AT SCALE

Gas Town is a provocative piece of speculative design, but its design is too poorly thought through to persist. The problems with Gas Town will undoubtedly show up in the next generation of development tools. Thoughtful design, critical thinking, user research, and planning and coordination within teams will become more important as the pace of software development speeds up. The most valuable tools will help people think more clearly, plan more carefully, and keep the quality bar high.

CLAUDE CODE TEAMMATETOOL - SOURCE CODE ANALYSIS

THE WARNER BROS. BIDDING WAR IS OVER

Netflix has agreed to buy Warner Bros. Discovery's studio and streaming business in an all-cash deal for $27.75 a share. The deal has been unanimously approved by Warner Bros.' board, and shareholders will vote on it in the next couple of months. The deal could be blocked by regulators, and Paramount could still increase its offer, but it previously said that the last bid was final.

TESLA KILLS AUTOPILOT, LOCKS LANE-KEEPING BEHIND $99/MONTH FEE

Tesla will start to charge $99 per month for its Full Self-Driving (FSD) subscription starting on February 14. The capability can be bought for a one-time fee of $8,000 until then. The $99 per month price will rise as FSD's capabilities improve. Tesla's falling profit margins, declining sales, and loss of emissions credits may be pushing the company to find other sources of regular income.

FULLY REMOTE)

As the first engineer on TLDR's new Applied AI team, you'll build AI agents and composable Claude Skills to let non-technical teammates create their own AI workflows. Learn more [16].

LESSONS FROM BUILDING AI AGENTS FOR FINANCIAL SERVICES

Advice on building agents from someone with two years of experience building AI agents for financial services.

THE FUTURE OF SOFTWARE ENGINEERING IS SRE

Software engineering is about keeping code running over time as systems change.