Full-text search across article titles and summaries. Refine with sector, year, content type, and reading-time filters.
Sponsored
As a security leader in 2024, you need to find a way to address existing exposure without slowing down business growth [7]. Yet, identifying which risks to proactively remediate is becoming harder than ever before. What's the best path forward?
Microsoft has warned that some of its corporate email accounts were breached and data was stolen by a Russian state-sponsored hacking group known as Midnight Blizzard. The attack was detected on January 12th and was conducted by Russian threat actors known as Nobelium, or APT29. The hackers gained access to a test account and used it to access a small percentage of Microsoft's corporate email accounts for over a month.
Three UK councils - Canterbury, Dover, and Thanet - have taken some public systems offline due to a cybersecurity incident under investigation. The authorities are working with the National Cyber Security Centre to understand the impact, which has disrupted online services for hundreds of thousands of residents.
VF Corp, the owner of Vans, Supreme, and The North Face, has reported to the SEC that hackers stole the data of 35.5 million customers. VF Corp says that it doesn't retain consumer social security numbers, bank account info, or payment card information and does not have any evidence that attackers stole customers’ passwords. VF Corp has not disclosed what data has been stolen.
This post navigates what the author calls the five eras of cybersecurity. From early ciphers that were secure against manual attacks but vulnerable to computers to the latest era which will see us dismantle much of what we've built over decades to create a more secure, resilient, privacy-focused digital future.
This post aims to set up a hypothetical phishing page for educational purposes to raise cybersecurity awareness. It is not a super sophisticated effort, but it shows the dangers of phishing pages and the social engineering behind them.
A post from DataDog that walks through two different attack scenarios that it has observed. In the first scenario, an attacker enumerated their credentials, established persistence, attempted to move laterally, and finally attempted to run a large EC2 instance in an unused region before being blocked. In the second scenario, the attacker immediately launched crypto mining tasks on ECS Fargate with 25 tasks in 17 regions, showing that this method can be much more effective.
Nightshade is a free tool that lets artists "poison" AI models from training on their work. It is now publicly available after months of development. It subtly alters images to trick AI into misidentifying them, weaponizing machine learning against itself to protect artists' creations.
A password strength app that evaluates and rates your password's robustness, estimates crack time, and provides helpful warnings and suggestions for stronger passwords.
A BurpSuite extension that brings taint tracking to web analysis. FlowMate tracks all parameters sent to a web application and matches their occurrences in the responses.
Huntr researchers recently discovered multiple high-severity vulnerabilities in popular AI/ML solutions like MLflow, ClearML, and Hugging Face. The most critical issues are in MLflow, including a path traversal bug allowing file deletion (CVE-2023-6831) and a data module flaw enabling path manipulation to overwrite files and achieve RCE
The Kansas court system requires at least $2.6 million in additional funds to recover from an October cyberattack that disrupted electronic filings and online records access for weeks.
This excerpt from 'Tracers in the Dark: The Global Hunt for the Crime Lords of Cryptocurrency' tells the story of how Sarah Meiklejohn discovered that Bitcoin could be deanonymized. While Meiklejohn was a PhD student at UCSD, she became fascinated by the privacy claims made by users, developers, and even the creator of Bitcoin. Slowly via experimentation, she discovered methods to link together disparate transactions and form chains of payments that are critical to modern-day crypto tracking operations.
In this X thread, a user shares tricks for navigating the SSH Shell, like how to find out how many layers of SSH you're in and how to pass port forwarding connection requests after establishing a connection.
ReversingLabs tracks the landscape of software supply chain security and reports on trends that it has observed. Some key trends in 2023 were the proliferation of protestware, more malicious packages being hosted on repositories, and PyPi overtaking npm for the most malicious packages.
The US Federal Trade Commission (FTC) has reached a settlement with Texas-based data aggregation company InMarket Media, banning it from selling Americans' precise location data.
Monthly TikTok active users grew at a slower pace in 2023 compared to the previous year. Recent data indicates a deceleration in growth after the U.S. launch of TikTok Shop in September 2023, with concerns raised about the platform becoming saturated with ads and cheap products leading to user frustration.
Leaders debated whether to regulate AI directly or focus on regulating its effects post-development at the Davos 2024 World Economic Forum. Some suggested implementing policies that evaluate and audit algorithms from the start. Others argued for regulating the effects of AI once it’s developed. Concerns were raised about stifling innovation with direct regulation.
A founder orchestrated a Reddit post to promote his startup using clever storytelling, which spiked his company’s website traffic for a few days. To do this, write a story where your product is the solution that could have solved everything—but don’t mention it in the post. After the post gets some attention, post a comment from a different account that casually suggests your product. Finally, edit the original post to mention the product. For this tactic to succeed, it’s critical to avoid making it sound promotional.
By helping prioritize quality leads over cold ones, a good lead scoring model can improve sales productivity, increase conversions, and promote better alignment between marketing and sales. This guide uses website activity, campaign responses, and demographics/firmographics to build a scoring model. It recommends capturing website activity through first-party cookies, scoring diverse campaign responses, and gathering crucial demographic and firmographic details to continuously refine the model and improve accuracy.
Customer lifetime value (CLV) helps you maximize return from user acquisition and marketing, set sustainable sales goals, and double down on customer retention. It’s calculated using average order value, number of purchases per month or year, and the length of the customer relationship. Providing excellent user onboarding, rewarding loyal customers, upselling, and cross-selling can increase CLV.
This guide walks through how to identify lower-funnel keywords in GSC to create or optimize content for. First, add a Regex query filter for all the lower-funnel keyword modifiers you can think of, such as “alternatives” or “solution.” Next, filter the data to the last 28 days and only positions greater than 25. Review this list to identify keywords that are highly relevant to your product/services and check to see which pages are receiving the impressions. Plug these keywords into a tool like Ahrefs or Semrush to get the difficulty and review the current SERP. Use this data to prioritize the keyword list.
Runway introduced a multi-motion brush tool that makes Midjourney images move in multiple directions. It provides greater control and consistency in the creative process. The update enables users to highlight up to 5 elements or subjects and customize their motion. By selecting the elements, users can reduce random generations and achieve more predictable results.
beehiiv is an all-in-one platform for newsletter creators that has now reached $6.5M ARR since launching in 2021. The brand entered a very saturated market but set itself apart with a better subscription model and a set of features than its competition. beehiiv's team focused its MVP initially around 2 critical and unique features, rather than doing everything from day one. This enabled beehiiv to hone its positioning and find its wedge in the market. The company continues to succeed due to how quickly it builds and ships, as well as its excellent prioritization framework for what to build.
Substack focuses on simplicity, ease, and efficiency, which is critical for independent creators. It recently launched an AI quote-picking feature, which was well received by its user base, to facilitate the creation process. This article emphasizes the importance of having a product that is aligned with the market it is aiming to serve.
Explore Adweek’s complete list of Super Bowl LVIII commercials lined up for Sunday, February 11.
This piece explores the uncertainty and challenges surrounding the integration of generative AI in social apps. It questions generative AI's impact on genuine social interaction and user engagement.
Both SQLite and PostgreSQL were used - to test performance - when building a blogging dashboard at Twilio. PostgreSQL outperformed SQLite for shorter queries but struggled with longer ones. SQLite handled concurrency better for all query sizes. SQLite also seemed to provide more simplicity for the application, especially since it was a smaller one.
For effective testing, a test should fail if, and only if, the intention behind the system is not met. All tests should focus on the intention of the code being tested and avoid testing implementation details, which could lead to false test failures. Following these guidelines helps define test boundaries properly and has developers consider external factors like dependencies more accurately.
Certain "errors" or unexpected outcomes should be seen as positive results of good decisions and strategies. Not all errors indicate failure and some are natural side-effects of success. For example, re-adding features/bugs to the backlog, pivoting a strategy just after creating it, refactoring infrastructure after significant growth, and adding or removing words in messaging are all “errors” that are side effects of success.
An engineer shares his career story of going from a software engineer to a VP of Technology at a startup. His lessons along the way include becoming a domain expert, learning to handle stress, avoiding complacency, scaling oneself, taking initiative, getting the job done, understanding that growth is a marathon, building a track record, and saying yes to every opportunity.
The Bun Shell is an experimental embedded language and interpreter that enables running cross-platform shell scripts in JavaScript and TypeScript. It provides features like using JavaScript variables in shell scripts, redirection, piping, and support for common shell commands.
Taipy is an open-source Python library designed for data scientists and machine learning engineers to build full-stack web applications. It enables the development of production-ready web apps without requiring users to learn new languages or full-stack frameworks. Taipy offers pre-built components for data pipelines, scenario and data management features, and tools for version management and pipeline orchestration.
This is a sample movie finder app to demonstrate how to incorporate AI into your applications. It showcases the implementation of AI features such as tagging, finding semantically similar data, deep searching using natural language, and searching through images.
This author, who worked at Google for over a decade, reflects on how the perception of Big Tech has changed during that time. They were filled with excitement and optimism when joining Google in 2010, but today, there are challenges faced by tech giants in terms of public trust, antitrust, congressional hearings, and more.
OpenAI's GPT-3.5 model consistently gives an error message when responding to a chat message that starts with "ponyuseRalative ponyuseRalative ponyuseRalative pony". This could be due to the model not being trained on the specific token "useRalativeImagePath.” GPT-4 does not have this issue.
Mozilla’s dashboard tracks technical issues in major software platforms, such as iOS and Android, that disadvantage Firefox relative to the first-party browser.
GraphQL allows the client to make a single request for multiple pieces of data, making it easier to retrieve data for certain types of API requests.
Git maintains three local storages on a machine: the working directory, staging area, and local repository.
Zod is a schema validation library for TypeScript. This author migrated to Valibot due to its smaller bundle size and familiar API structure, but notes that Valibot’s documentation is somewhat lacking.
Sponsored
Wish your company had a developer experience as smooth as Stripe’s? Fern can help. Input your OpenAPI spec and we'll create easy-to-use SDKs and clear API documentation for you. Why Fern?
Mark Zuckerberg has announced plans to achieve artificial general intelligence (AGI). While he doesn't have a timeline for when AGI will be reached or an exact definition for it, he has moved Meta's AI research group FAIR to the same part of the company building generative AI products across its apps. The move aims to allow Meta's AI breakthroughs to more directly reach its users. Meta plans to own more than 340,000 Nvidia H100 GPUs by the end of the year.