Researchers at Eye Security uncovered a remote code execution flaw in Microsoft's Update Health Tools (KB4023057), traced to abandoned Azure blob storage. Attackers could trigger unintended code execution on vulnerable devices by exploiting predictable blob names and weak message security. Microsoft confirmed the issue, transferred ownership of the exposed blobs, and improved protections in newer tool versions, mitigating risks for most users.
The Instance Metadata Service (IMDS) is a server that runs on cloud VMs (like AWS EC2) to provide short-lived credentials to applications running on them. To detect potential IMDS abuse, establish a baseline of which services frequently access IMDS and then monitor for applications that either access sensitive IMDS paths or access IMDS more frequently than usual. This post applies this methodology to hunting for a vulnerability in pandoc and Clickhouse.
Sponsored
_Wake Up!_ [13] by Veeam uncovers the human stories behind cyberattacks — what it's really like to see your phone buzzing at 3 a.m., get the sinking feeling in your gut, and lead through pre-dawn fatigue. Told by top CISOs, this podcast explores the choices that
Secure.com provides AI-powered Digital Security Teammates (DSTs), autonomous agents that integrate with existing security tools, investigate and triage incidents, automate compliance tasks, and escalate issues.
Cloud-native SIEM for intelligent security analytics for your entire enterprise.
pinact is a CLI to edit GitHub Workflow and Composite action files and pin versions of actions and reusable workflows.
Imperial Kitten (aka Tortoiseshell/TA456) conducted cyber reconnaissance on maritime Automatic Identification System (AIS) tracking data days before Houthi missile strikes on Red Sea shipping in February 2024, demonstrating direct correlation between IRGC-linked cyber espionage and kinetic targeting operations. Amazon's threat intelligence indicates this represents an evolution in hybrid warfare where cyber operations provide target reconnaissance for physical attacks, with the traditional boundaries between digital and kinetic operations dissolving. Security teams should monitor for anomalous access to critical infrastructure location/tracking systems, implement enhanced logging and behavioral analytics on these systems, and coordinate with physical security teams to correlate cyber reconnaissance patterns with potential kinetic threat indicators.
SquareX researchers exposed a hidden MCP API (chrome.perplexity.mcp.addStdioServer) in the Comet browser that enables embedded extensions to execute arbitrary local commands without user consent, thereby bypassing decades of established browser security principles. The API is accessible via Comet's Agentic extension, triggered by perplexity.ai, creating a catastrophic third-party risk where a single XSS vulnerability or a compromised Perplexity employee could grant attackers complete device control over all Comet users. Security teams should audit AI browser deployments, demand API disclosure from vendors, require third-party security audits, and ensure users can disable embedded extensions that are currently hidden from extension dashboards.
Set decades ahead of its time, "Ghost in the Shell" envisioned a world where cyber-attacks, government-sanctioned hackers, and AI-driven threats are commonplace. It foresaw issues like digital privacy risks, behavioral cyber-profiling, and tech-enabled abuse, ideas that now define modern cybersecurity.
A Phishing-as-a-Service kit called “Sneaky 2FA” enables Browser-in-the-Browser attacks that create fake login pop-ups with convincing address bars using HTML/CSS.
A fired IT contractor, upset about his dismissal, re-entered the Houston Waste Management network, reset 2,500 passwords, and locked thousands of staff out across the US.
Sponsored
Your customers have moved to AI search. Are they finding your brand in ChatGPT, Gemini, and Perplexity? And what are these AIs saying about you behind your back?!
Adding structured tables to content can help improve visibility in ChatGPT and other LLM-driven experiences. The study found that ChatGPT citations are 2.3x more likely to include a page that has a table than Google search results. 13% of the analyzed 25K Google URLs contained a table, while 30% of ChatGPT citations included one. Pages that use clear table structures rank highly in ChatGPT citations, including sites that rely on basic HTML and simple formatting.
As social media has matured and become more automated, large follower counts have lost appeal, while modest accounts have gained status. High followings often signal bots, whereas small audiences suggest authenticity and the ability to succeed without performing online. Post-pandemic algorithmic feeds and alternative platforms have made audience growth easier to game, increasing the cachet of low-follower profiles. Many creators now embrace unpolished, personal content that reflects real interests rather than chasing metrics.
Using thought experiments can shake up defaults and spark fresh ideas. Teams can explore growing with existing content and driving growth from current leads without adding new accounts. They can test differentiation if a competitor copied the product or if it went free. Binary choices reveal true priorities, and imagining a dream speaker clarifies brand narrative. These exercises can help reveal blind spots.
A loud tone increases sales and speeds decisions for both new and returning customers. New customers respond best to a loud, energetic voice, which raises purchase likelihood by up to 8% and makes the salesperson seem 26.7% more excited. Returning customers respond best to a loud but calm tone, which raises purchase likelihood by 5.4% and boosts perceived competence by 4.8%. Energetic tones reduce purchase likelihood for returning customers by 3%.
Sponsored
Marketers are feeling the pressure: launch more campaigns with fewer resources. If you need to do more with less, the answer is Asana. Asana helps marketers plan better, accelerate campaign production, and reduce busywork—without adding headcount.
Guideflow is a demo automation platform that helps teams build product walkthroughs in minutes using a no-code builder. It captures apps or sites, generates step-by-step guides, adds personalization, and applies AI for polishing, translations, and voiceovers. Demos can be embedded or shared across channels and tracked through analytics.
This webinar explains the recent drop in LinkedIn reach and how the algorithm has shifted. Ex-LinkedIn insider Alicia Teltz shares data from platform reports and top creators, covering what the algorithm now prioritizes, which post formats perform, and which habits reduce visibility.
In B2B sales, most decisions are made before the first sales call. Research shows that 94% of buyers purchase from the brand they thought of first. Mindshare refers to the mental presence a brand holds in the minds of ideal customers. It is built through consistent, relevant exposure across content, thought leadership, and PR. A recent campaign by a SaaS company that increased visibility through executive LinkedIn content and industry publications resulted in a 38% rise in branded search and a 19% reduction in sales cycle length.
Chipotle's marketing uses its real-ingredient positioning to justify creative campaigns across unexpected cultural spaces. A spelling bee activation contrasted its simple ingredients with complex competitor terms, while a temporary tattoo offer tied to an internet trend drove record off-peak sales and over 9 billion PR impressions. The approach focuses on early testing in highly relevant communities and scaling ideas that show performance. Each campaign is measured with attention to cost and outcome, with longer-term initiatives in sustainability and food sourcing balancing the short-term activations.
Tests include using assertive power verbs, mid-subject line capital words, and negative emojis.
Apply light and dark tints of the brand color across the UI to create a cohesive feel.
Brands that limit their targeting to high-income segments miss growth opportunities and risk alienating large, underserved communities.
Sponsored
Revenue shouldn't fracture just because your go-to-market motions do. Most billing systems force companies to juggle separate tools for self-serve, enterprise, and cloud marketplaces—creating data silos, reconciliation gaps, and a mess for customers and finance teams alike.
AI is reshaping tech. Defensibility now comes from workflow ownership, proprietary data, distribution, and seamless UX. Superintelligence is on the horizon. Startups must 10x workflows, keep humans involved where needed, and anchor themselves in the layer of the stack that will keep long-term value.
There are four ways companies approach product discovery, depending on how centralized and how evidence-driven they are. The strongest results come from empowered teams using data, but most organizations drift toward top-down control unless they deliberately choose otherwise.
Do not wait for a perfect strategy. Use the clues you already have about goals and customers to make explicit choices. Write down your assumptions, and move the work forward.
Companies are overspending on AI out of fear and hype, but this phase will not last. Product leaders must be ready with clear financial cases for where AI can deliver meaningful returns.
Sponsored
Why pick one? Marqeta's modern payments platform puts you in control
Getting a PM job today means showing curiosity about AI, doing deep product research, and building quick prototypes before the interview. The candidates who actively demonstrate value, guide the conversation, and follow up with insight are the ones who stand out.
True leadership is not about showing you are smart, but helping others feel smart. Leaders who ask questions, listen well, and give credit build deeper trust and far greater influence.
US natural gas is no longer an endless, cheap oversupply. LNG exports and AI data centers are competing for the same molecules. In the coming years, gas is likely to become the core near-term power source for AI. Some export ambitions will be curtailed so domestic demand can be met.
Affinity bias, confirmation bias, and negativity bias quietly limit opportunities for women and minorities. Small, often hidden decisions accumulate over time, shaping who advances and who gets left behind.
Sponsored
Tool switching eats 4 hours a week. Unify tasks + documents using Vaiz to save time and start automating routine tasks. Get up to 3
Taste is subjective - sensibility is the goal.
High agency comes from testing ideas early, learning from evidence, and reducing the distance between belief and truth.
Sponsored
AI-driven attacks are getting bigger, faster, and more sophisticated. But Vanta's newest State of Trust [4] survey of 3,500 leaders shows that businesses are spending way more time and energy proving trust than building it:
Nvidia reported record sales at its quarterly earnings report yesterday. The company hit a record $57 billion in the October quarter, up 62% from the year-earlier quarter. Nvidia estimates sales for the current quarter will reach $65 billion. Shares in the company rose up to 6.5% in after-hours trading.
2025.11.20·links.tldrnewsletter.com·5 min read·TLDR The Apple N1 is Apple's first in-house chip designed to handle local wireless connections. It supports Wi-Fi 7, Bluetooth 6, and the Thread smart home connection protocol. While the N1 isn't the best chip on the market, it delivers higher download and upload speeds on Wi-Fi compared to the iPhone 16.
2025.11.20·arstechnica.com·4 min read·TLDR The frontier of medicine is shifting from fighting disease to pursuing more life. Speakers at the recent Progress Conference 2025 held at Lighthaven spoke about extending life by addressing the biological hallmarks of aging itself: genomic instability, telomere shortening, mitochondrial dysfunction, and cellular senescence. The new frontier is to find targeted interventions that impact these factors. The pursuit of longevity, not survival, is still in its early days. Research is happening largely along non-traditional paths and with non-traditional funding and support models.
2025.11.20·bigthink.com·13 min read·TLDR