Outcome-based pricing represents a significant shift in the software industry, moving away from traditional subscription or usage-based models to charging customers based on measurable outcomes. This approach aligns vendor revenue with customer success, reducing waste and improving accountability. AI is playing a critical role in enabling this model by automating processes and tracking performance metrics, but clear definitions of success are essential to avoid disputes and ensure a collaborative relationship between vendors and customers.
Platus makes legal workflows astonishingly simple. It offers everything from a powerful no-code experience to a robust API.
Postiz offers everything you need to manage your social media posts, build an audience, capture leads, and grow your business.
Generate performance reviews, track productivity, and get alerts about PR bottlenecks in real-time.
AI is driving a major unbundling in creative work, empowering independent creators with tools that rival the capabilities of large organizations while simultaneously reducing the need for traditional creative roles within those organizations. This shift rewards versatile, multidisciplinary creators who can integrate AI across domains and combine insights in innovative ways, blurring the lines between individuals and institutions. As the creative landscape evolves, success will hinge on leveraging AI to complement human creativity and adapt to this new paradigm.
Substack has evolved from a niche platform for intellectual newsletters into a broader marketplace for creators, blending traditional media with social media elements. It positions itself as a cultural and intellectual hub, offering creators monetization opportunities while fostering aspirational identities for readers. However, its shift toward viral formats and multimedia risks diluting its original high-brow appeal and raises questions about whether intellectualism can scale without losing authenticity or quality.
Advancements in generative AI are transforming non-player characters (NPCs) in games, enabling them to evolve from rigid, script-based systems to more dynamic, interactive companions. Developers like Inworld AI and nunu.ai are leveraging LLMs to create NPCs with distinct personalities, autonomy, and the ability to surprise players with unique behaviors. These innovations also extend to generalizable AI agents capable of learning and adapting across various games, opening new possibilities for both gaming and robotics.
A common startup mistake is to over-rely on executives to solve scaling issues without first understanding the company's dynamics.
While average salaries have remained relatively stable since November 2022, equity packages have seen a significant decline, dropping nearly 38%.
Venture capitalists may be reluctant to invest in bridge rounds for companies outside their portfolio due to a lack of insight into the company's past milestones, reliance on potentially revised narratives, and the binary nature of such funding situations.
Sponsored
With Kubernetes clusters running on various platforms and in different configurations, organizations often face challenges in gaining visibility — leaving them vulnerable to potential security threats.
that drives Cloud Native Transformation across distributed clouds – on-premises, AI or at the edge. With centralized cluster management and streamlined deployments, Rancher Prime offers robust features to secure your clusters and applications.
A threat actor has leaked data belonging to 44K Ford customers. The breached data includes full names, physical locations, purchase details, dealer information, and record timestamps. Ford has responded to the allegations by stating that internal investigations have shown no evidence of breach and that the data comes from a third-party supplier as well as publicly available dealer information.
A threat actor has allegedly breached Mediboard, a software by Software Medical Records for managing Electronic Patient Records. Software Medical Records stated that upon investigation it determined that the breach affected one client's privileged Mediboard account which they used according to its standard function and that the attacks had not compromised any of Software Medical Records' infrastructure. The breached data may include full names, dates of birth, gender information, home addresses, phone numbers, email addresses, physician history, prescription information, and health card history.
Satellite company Maxar has confirmed a data breach affecting employee personal information, including names, addresses, and Social Security numbers. The hacker had access to the files for approximately one week before detection.
Test-Driven Development is a software engineering philosophy that often uses an Arrange-Act-Assert design pattern where a state is set up, an action is taken, and then it is determined whether the results were what was expected. In detection engineering, the Arrange step can be modeled by deploying detection logic and setting up a test system. The Act step would then involve executing a test/tool/malware sample. The Assert step would evaluate what response was taken. Depending on the maturity and precision of the alert, the Assert step may make sure that the logs which observe the action are collected, a detection is fired off, or preventative action is taken.
2024.11.22·links.tldrnewsletter.com·12 min read·TLDR InfoSec Resource Control Policies is a new AWS feature that allows users to define a data perimeter in AWS Organizations by centrally restricting external access to AWS resources. RCPs complement SCPs, which offer central control over the maximum permissions of IAM users and roles by offering central control over the maximum resources on AWS resources. At launch, RCPs can apply to resources of the following AWS services: S3, STS, KMS, SQS, and Secrets Manager.
Google's AI-powered fuzzing project, OSS-Fuzz, found 26 new vulnerabilities in open source projects, including a critical one in OpenSSL. The team increased code coverage and automated the process of vulnerability discovery and patching by using AI-generated fuzz targets. They aim to make this technology widely available for defenders to find and fix vulnerabilities more efficiently.
Sponsored
Find and fix broken authentication, logic bugs, outdated dependencies, and more. Set up ZeroPath [11] in minutes and get continuous, human-level application security, PR reviews, and much more - with no human involvement required. Book a demo here [12] and
Abstract is an AI-powered assistant for centralized management of analytics. The platform correlates data to provide organizations with actionable insights for both compliance and data security.
A fast, customizable service detection tool powered by a flexible fingerprint system. It helps users identify services, APIs, and network configurations across infrastructure.
Nudge is an application that reminds users to apply macOS updates.
Microsoft has launched Zero Day Quest, a massive hacking event with $4 million in bounties. Researchers can win spots at Microsoft's HQ, collaborate with AI engineers, and help improve cloud and AI security through vulnerability research and disclosure.
MITRE released a list of the top 25 vulnerabilities of the year after analyzing over 31K CVE records with a stronger focus on those in CISA's KEV. Cross Site Scripting, Out-of-bounds write, and SQL Injection lead the group while Uncontrolled Resource Consumption and Code Injections all had large increases this year. MITRE encourages users to review the list and update security practices and priorities accordingly.
Unredacted court documents revealed that NSO Group used Pegasus spyware to infect 1,400 WhatsApp users' phones in 2019, violating laws. WhatsApp's security team successfully blocked Pegasus intrusions targeting journalists, activists, and officials. NSO Group developed exploits to infiltrate devices without user interaction. This has led to a lawsuit and ongoing accountability efforts.
Federal prosecutors have charged five men in Los Angeles for hacking major U.S. tech companies using SMS phishing attacks.
Microsoft has formed a new Windows Resiliency Initiative to keep security vendors out of the kernel mode coming from the CrowdStrike fiasco.
Microsoft will soon allow Teams users to clone their voices for meetings in different languages.
Apple has begun selling advertising inventory directly within Apple News. It is giving publishers a 70% revenue share and targeting curated content sponsorships like the Met Gala. The move aligns with Apple's growing advertising ambitions, as its global ad revenue is projected to reach $11 billion in 2024, up from $8.9 billion last year. This expansion follows slowing hardware sales and signals a broader strategy to boost revenue streams through its highly engaged audience.
Business spending on generative AI rose 500% this year, reaching $13.8 billion, up from $2.3 billion in 2023. OpenAI's market share in enterprise AI dropped from 50% to 34%, while Anthropic doubled its share to 24%. Large language models received $6.5 billion in investments, with code generation cited as the top use case. AI agents are emerging as a key trend, with companies like Google and OpenAI advancing technology to handle complex, multi-step tasks.
Segmentation based on occasions, rather than people, is more effective because behavior is often shaped by context. For example, dinner or travel choices vary depending on the situation or companions. Focusing on these contextual factors provides more consistent insights, while people-based segmentation often leads to inconsistencies.
A structured content copywriting process helps to avoid blank page syndrome and create engaging, action-driven copy. The 4-step method covered in this article involves audience research, content structuring, writing with clear frameworks, and editing for conciseness and readability.
Total watch time for B2B video content increased by 44% in 2023. 93% of businesses now consider video essential to their marketing strategies. Videos with embedded email sign-up forms see a 23% conversion rate, nearly double that of traditional CTAs. The growth in popularity is enabled by the rise of AI in video creation, which allows marketers to produce personalized, high-quality content at scale.
A swipe file of 150 BFCM email examples for last-minute creative inspiration.
20 curated templates that include themes like "Implied Expertise," "Resource Curation," and "Radical Candor," to inspire impactful content. The collection highlights actionable formats like “What To Do vs. What To Avoid” and “Imagine This Scenario” for engaging posts.
Brands often overlook Black culture-focused tentpole events, missing opportunities to connect with influential Black consumers despite their proven economic power and cultural influence. These events offer unique access to key audiences, yet brands often prioritize mainstream events like Coachella, leaving them out of vital conversations.
Beauty brands are turning to podcasts to build trust with audiences, especially Hispanics, who spend 37% more annually on beauty than the general market. Sonoro Global Media, which caters to multicultural listeners, sees brands like Ulta and Estée Lauder spending $200K on podcast ads. Podcasts influence 60% of men and 62% of listeners aged 18–34, driving US ad spend to $2.28 billion in 2024, up 15.9% YoY.
A Fortune 100 CEO redefines ROI as "risk on marketing investment" to emphasize the importance of managing uncertainties and opportunity costs in marketing spend. Traditional ROI metrics are ineffective, he believes, with up to 30% of billion-dollar marketing budgets getting wasted. The CEO advocates reallocating funds to initiatives like talent acquisition and market expansion. He stresses the importance of reputation and brand trust, noting that demand generation often fails to demonstrate tangible results. C-suites increasingly demand precise, data-driven accountability in marketing and other functions, driven by external pressures like economic volatility and shareholder scrutiny.
Marketing will center on micro trends in 2025, combating anti-algorithm culture and AI content fatigue.
A thread that debunks the myths of LTV:CAC.
Tips include treating marketing like an elevated brand resume, staying consistent across touchpoints, and being honest about your business.
with you.
Sponsored
Building an AI copilot product or feature?
There's a significant opportunity in automating the internal operational tasks that keep organizations running. Unlike traditional RPA solutions, modern AI agents can more effectively automate routine-but-essential operations work, transforming operational headcount into intelligent automation and allowing employees to focus on strategic work.
The DOJ may require Google to sell Chrome, separate Android from Search and Play, share ad data, let websites block AI use of their content, and ban exclusive contracts to address its illegal search monopoly.
Transformations to the product model requires addressing organizational politics thoughtfully. Product leaders play a critical role in navigating relationships, building trust, and ensuring teams are well-prepared and competent. Success hinges on demonstrating meaningful business outcomes early, maintaining stakeholder trust through collaboration, and sustaining momentum with consistent updates that emphasize real results over activities.
"Mushroom management" (keeping people in the dark) frustrates PMs through lack of information and exclusion. Fighting it directly isn't effective. Instead, PMs should leverage mushroom managers' existing strengths - like cross-functional communication and rapid decision-making - while gradually introducing transparency through data-driven insights, regular updates, and structured decision-making processes.
2024.11.22·amycmitchell.substack.com·6 min read·TLDR Product