Search the archive

MARVEL'S MINIMALIST NEW FANTASTIC FOUR ARTWORK IS RETRO PERFECTION

Fantastic Four: First Steps' posters impressed fans despite AI art controversy.

WHO IS BEING EXCLUDED BY MUSEUMS' WHOLESALE ADOPTION OF DIGITAL TECHNOLOGY?

Digital museum tools improve access but exclude vulnerable groups.

INFORMATION OF 120,000 STOLEN IN RANSOMWARE ATTACK ON GEORGIA HOSPITAL

Memorial Hospital in Georgia suffered a ransomware attack in November that affected 120,000 patients' personal and medical data. The Embargo group has claimed responsibility and leaked 1.15TB of data online. The hospital has offered affected individuals free identity protection and credit monitoring services.

APPLE FIXES ZERO-DAY EXPLOITED IN ‘EXTREMELY SOPHISTICATED' ATTACKS

Apple has pushed out security updates for iOS, iPadOS, and macOS. Specifically called out was an attack that could allow sophisticated attackers with access to a device to disable USB Restricted mode on a locked device. This vulnerability was reported by Citizen Lab and is being actively exploited.

OVER 12,000 KERIOCONTROL FIREWALLS EXPOSED TO EXPLOITED RCE

KerioControl firewalls provide a network security suite for small and medium sized businesses. The ShadowServer Foundation reports that over 12K devices are currently exposed to attacks leveraging a 1-click RCE vulnerability. The vulnerability was caused by improper sanitization of a GET parameter which led to Reflected XSS and resulted in a 1-click RCE.

JOOKI - TAKING CONTROL OF A FORGOTTEN DEVICE

This post explores how to revive the abandoned Jooki children's audio players through firmware analysis and discovering exploits after the company's bankruptcy left devices non-functional. The solution uses Mender for software updates and can be controlled through a web interface, enabling customization and potential security risks. The author notes that by understanding its firmware, access points, and potential vulnerabilities, users can interact with Jooki more effectively and securely.

YOU'RE THINKING ABOUT PASSKEYS WRONG

Some in the security community have argued that passkeys have failed at their promise of passwordless authentication and should instead be used as a second factor due to complexities such as account recovery on a new device. The author of this post argues that this reflects an improper way of thinking about passkeys and presents a login/registration flow that uses magic links for new device/registration and then uses passkeys for subsequent access.

FOUNDATIONS FOR MODERN DEFENSIBLE ARCHITECTURE

The Australian Signals Directorate (ASD) has published a modern defensible architecture framework based on zero trust principles ("never trust, always verify," "assume breach," and "verify explicitly") and five key pillars (Identity, Devices, Networks, Applications/Workloads, and Data), emphasizing that organizations should prepare for "when" not "if" a cyber incident occurs. These principles, based on zero trust and secure-by-design practices, aim to enhance cyber resilience and protect critical assets. Organizations can use the Foundations to build a strong security framework adaptable to evolving technologies and threats.

MINIJAIL

Minijail is a sandboxing and containment tool used in ChromeOS and Android. It provides an executable that can be used to launch and sandbox other programs and a library that can be used by code to sandbox itself.

FRIDA-CODESHARE-SCRIPTS

This repository contains a curated collection of useful FRIDA scripts and resources for dynamic instrumentation and reverse engineering.

RAINK

Raink is a tool that solves general ranking problems using LLMs. It can be used to have an LLM answer questions such as determining which fix might best address a given security advisory.

UK'S SECRET APPLE ICLOUD BACKDOOR ORDER IS A GLOBAL EMERGENCY, SAY CRITICS

The UK government allegedly secretly ordered Apple to create a backdoor in its encrypted iCloud storage, potentially affecting users worldwide. Critics and privacy advocates warn this sets a dangerous precedent as Apple may respond by discontinuing its Advanced Data Protection feature in the UK rather than compromise global security.

THE RISKS OF USER IMPERSONATION

This article dives deep into user impersonation risks and mitigations, which is a common way to allow logging in as another user. This feature is often implemented by changing the sub property of a JWT but is inherently problematic as it requires maintaining an admin list and securing the feature, is insecure by design, and also muddies audit trails. One possible solution is to add a new claim to the JWT but this is error prone and instead advocates for using DOM recording to collect as much sanitized data about a user's session as possible instead.

AMAZON REDSHIFT ENHANCES SECURITY BY CHANGING DEFAULT BEHAVIOR

The Amazon Redshift team has announced changes to the default settings for new Redshift clusters and those restored from snapshots. These clusters will now block public access and encrypt data at rest and in transit by default. Existing clusters will not be affected but Amazon recommends users implement the changes regardless.

EXCITING UPDATES TO THE COPILOT (AI) BOUNTY PROGRAM: ENHANCING SECURITY AND INCENTIVIZING INNOVATION

Microsoft has expanded its Copilot AI Bounty Program by integrating online services vulnerability classifications, offering up to $5,000 for moderate severity cases.

HACKER PLEADS GUILTY TO SIM SWAP ATTACK ON US SEC X ACCOUNT

A man in Alabama admitted to hacking the SEC's account to post a fake Bitcoin ETF approval announcement - he now faces 5 years in prison for identity theft and fraud.

TOLL BOOTH BANDITS CONTINUE TO SCAM VIA SMS MESSAGES

Scammers are successfully tricking North American drivers into paying fake toll fees through SMS phishing attacks.

AI-DRIVEN ADS TAKE THE FIELD DURING THE 2025 SUPER BOWL

AI was a major theme in the 2025 Super Bowl ads. OpenAI debuted its first-ever Super Bowl ad with a pointillism animation, while Google showcased its Gemini chatbot but had to edit a previous AI-generated claim about cheese consumption. GoDaddy introduced its AI tool for small businesses, and Cirkul humorously critiqued AI's unpredictability with an ad featuring Adam Devine.

DIGITAL 2025: THE ESSENTIAL GUIDE TO THE GLOBAL STATE OF DIGITAL

Streaming dominates TV consumption, with 91.9% of internet users watching monthly, while traditional broadcast reaches 87.8%. Streaming accounts for 43.3% of viewing time, led by Saudi Arabia (54.8%), UAE (53.7%), and China (51.5%). Audio streaming is also strong, with 38.2% using music services weekly and younger users averaging nearly two hours daily. Paid subscriptions are rising, with 31.5% paying for video and 22.5% for music, particularly in high-income markets like Norway and Sweden.

HOW TO DEAL WITH TOUGH CUSTOMER CALLS

To handle tough customer interviews, embrace silence to encourage elaboration. Use "how" instead of "why" to prompt more honest, detailed responses. If an answer feels vague, express your confusion to encourage clarification. Reframe questions to make them easier to answer and help the customer feel comfortable. Trust your preparation - discomfort can lead to deeper insights and more valuable takeaways.

9 SHOPIFY BLOG EXAMPLES YOU NEED TO SEE

This article shares examples of Shopify brands using content marketing to increase engagement. Gymshark produces long-form workout guides that establish authority and attract fitness enthusiasts. Stanley builds brand loyalty by aligning its blog with adventure-driven storytelling, positioning its products as part of memorable experiences. Ruggable optimizes its content strategy with clear blog categories, SEO-driven interior design advice, and seamless navigation to convert readers into buyers.

ADWEEK'S ULTIMATE SUPER BOWL AD RANKER

Adweek ranked Super Bowl ads by online chatter, viewer engagement, and emotional response.

THE 2025 PPC EXPERT TOOL STACK

This piece lists 20 useful PPC tools for Google Ads users. Some are free while others are paid. The tools include TrueClicks for automated audits, ProfitMetrics for profit tracking, and ProductHero for feed optimization. Other recommendations include Creatopy for design, Microsoft Clarity for conversion optimization, and PowerMyAnalytics for syncing data sources.

MARKETERS HAVE GREAT POTENTIAL BUT THEY ARE NOT BEING SUPPORTED ENOUGH

Over half of marketing professionals feel overwhelmed and undervalued, with nearly half of teams facing annual restructures driven by cost-cutting rather than strategy. As marketing is increasingly viewed as a discretionary expense, teams are pressured to do more with less. While automation and AI can boost efficiency, without clear strategic direction and leadership support, many will remain in a reactive, high-stress environment.

HOW TO USE DATA MORE STRATEGICALLY TO REACH AUDIENCES

Using audience insights to focus marketing on niche communities can be more effective than relying solely on Google, Meta, or LinkedIn ads. Identifying where audiences spend time enables more strategic outreach, as seen with podcasters and event organizers leveraging influencer networks over broad paid ads. Zero-click marketing, like Chartr's Reddit engagement, builds trust without requiring direct clicks. Balancing data with qualitative research and exploring underutilized channels can help maximize impact.

STEAM'S OVERLORDS STILL THINK IN-GAME ADS ARE FINE AS LONG AS THEY'RE "APPROPRIATE"

Valve updated its Steamworks policy to clarify that in-game ads are allowed if they fit the game's context but banned business models relying on paid advertising. Developers must remove forced ad-watching mechanics before selling on Steam and are encouraged to use single-purchase or microtransaction-based models instead. The policy permits real-world brands in games if they enhance immersion and have the necessary licenses, but prohibits rewarding players for engaging with ads. Past controversies, such as unskippable ads in NBA 2K21, show the challenges of balancing advertising and player experience.

LITTLE CAESARS ASKS PRINGLES TO ‘MAKE IT OFFICIAL' AFTER SIMILAR SUPER BOWL 59 COMMERCIALS

The two food brands made nearly identical Super Bowl ads but turned it into a win with a collaborative IG post.

YOUR POP-UP IS THE REASON YOUR EMAIL LIST IS NOT GROWING

Use personalized pop-ups based on a customer's history with the brand in order to maximize signups.

STOP LEAVING MONEY ON THE TABLE: ABANDONED CART EMAILS

Use transactional-style subject lines for abandoned cart emails to double open and click rates.

EMPOWERMENT & CONSTRAINTS

The concept of "empowerment" is ambiguous, and defining clear team objectives is crucial to ensuring effective decision-making. Leaders must strike a balance between broad, high-level business outcomes that allow exploration and narrower, focused objectives that drive immediate impact, considering factors like time constraints, team capabilities, and organizational context.

DEEP RESEARCH AND KNOWLEDGE VALUE

OpenAI's Deep Research autonomously conducts multi-step research, synthesizing vast amounts of online data to produce reports that resemble human research analysis. While it enhances productivity and efficiency, its limitations - such as missing key industry insights and relying solely on publicly available data - highlight the growing value of secrecy and human expertise in an AI-driven world.

AI MONETIZATION: HOW TO APPROACH AI PRICING

AI monetization involves converting AI-driven features into revenue through direct methods like add-ons, standalone products, or bundled price increases and indirect methods such as enhancing user engagement and retention without separate charges. As AI becomes more ubiquitous and its costs decrease, businesses must adapt their pricing strategies to reflect its evolving value proposition.

YOUR SUPPORT INBOX IS WORTH MILLIONS 📦

Turning support tickets into viral marketing moments builds massive brand love. Empower teams with surprise budgets, personalize gestures, and create unexpected, shareable experiences - small acts can generate priceless publicity.

private by design, and available offline. Try it free

HOW TO DESIGN AN ORG FOR FOUNDER MODE

Traditional company structures delegate decision-making to managers, allowing organizations to scale efficiently but often at the cost of speed and quality. In contrast, "founder mode" organizations centralize decisions with the founder, as seen in companies like Apple, Airbnb, Shopify, and Nvidia, maximizing agility and clarity - though this approach requires continuous founder involvement and a deep understanding of the business.

THE TYPES OF COMPANIES YOU CAN WORK FOR AND WHAT THEY DO FOR YOUR CAREER

Companies fall into six common archetypes, each offering unique work environments, challenges, and career impacts. Choosing the right one depends on personal priorities like risk tolerance, career growth, financial stability, and ability to handle ambiguity.

SO... HOW DOES ONE REALLY DETERMINE AI IS CONSCIOUS?

LLMs may exhibit a weak form of consciousness by evaluating their use of language as a fraction of human-like awareness. While they lack subjective experience and intent, their capacity for attention, response adaptation, and graded language use suggests a potential framework for assessing AI consciousness, with implications for AI ethics, morality, and future alignment.

FOR THE BRAND, I GUESS

VC firms must balance both picking successful startups and being chosen by them, which leads to competition based on money, reputation, and influence rather than just investment acumen. In today's digital age, VC firms increasingly prioritize attention and brand-building, hiring figures who generate media buzz, proving that in the modern landscape, visibility and cultural influence are just as valuable as financial expertise.

UNDERSTAND FUNDAMENTAL HUMAN NEEDS TO BUILD BEST PRODUCTS

Successful products tap into deep-rooted human behaviors, not just trends or convenience.

BAD IDEA: “ARTIFICIAL INTELLIGENCE” AUTOMATICALLY IMPROVES PRODUCTIVITY

AI boosts productivity by automating more tasks, but hallucinations, overconfidence, and skill loss can reduce long-term efficiency.

Watch the recording →

APPLE IS REPORTEDLY DEVELOPING AIRPODS WITH CAMERAS: HERE'S WHAT THAT MEANS

Apple is reportedly prototyping AirPods with integrated cameras. The integration may be aimed at bringing Visual Intelligence to the AirPods, allowing them to understand the outside world and provide information to the user. They could be used together with Vision Pro headsets to enhance the user experience and strengthen the spatial computing ecosystem. The AirPods' cameras could enable in-air gesture controls. The tech is unlikely to debut anytime soon - it won't be released until 2027 at the earliest.

HOW SAM ALTMAN SIDESTEPPED ELON MUSK TO WIN OVER DONALD TRUMP

Sam Altman was on the phone with Donald Trump just days before Trump's inauguration preparing the announcement to build data centers across the country. Altman was relegated to the overflow room during the inauguration, but he stood behind Trump in the Roosevelt Room of the White House the day after as Trump announced Stargate, describing it as the largest AI infrastructure project by far in history. Stargate had been in the works for months, but the announcement was timed for Trump to take credit for it in his first days in office. This article takes a behind-the-scenes look at how the deal came about.

THE DRUG INDUSTRY IS HAVING ITS OWN DEEPSEEK MOMENT

Summit Therapeutics, a drug company backed by billionaire Bob Duggan, recently announced that its drug had outperformed Merck's Keytruda in a lung cancer trial. Keytruda is the best-selling drug in the pharma industry. Summit had licensed the drug from a little-known Chinese biotech called Akeso. While Summit's drug still needs regulatory approval, the news added billions of dollars to the company's market capitalization and created a watershed moment for the industry.

HUMAN-LIKE TEETH SUCCESSFULLY GROWN IN A PIG'S MOUTH

Scientists have been manipulating genes to grow human cells in animals for decades. They have now shown it is possible to cultivate human teeth cells inside of a pig's mouth. The teeth that grew inside the pigs didn't reach full human tooth size and likely wouldn't stand up to regular use, but these findings could lead to the development of biological tooth substitutes. Research shows that more than half of US adults may be receptive to the technology.

See how it works