Full-text search across article titles and summaries. Refine with sector, year, content type, and reading-time filters.
A good pricing constitution is intentionally restrictive and chooses hard trade-offs. You can tell your constitution is working when it actually costs you something. This kind of constitution is critical infrastructure if a company is going to ship in a rapid, iterative way. Everyone needs to be on the same page for pricing and the philosophy behind it so teams can make decisions for themselves and stay moving in the same direction.
The percentage on your cap table is not the number that decides anything. Supermajorities increase the veto power of investors. One transaction may have to clear two or three separate majorities. The drag-along can compel shareholders to approve a sale that pays them nothing.
A customer selects “too expensive” when cancelling. You offer a discount, but they still don't come back. The price may have been easier to explain than why they stopped using the product. RevenueCat's data puts insufficient usage slightly ahead of price among cancellation reasons, at 37% versus 35%. This guide shows how to investigate the behavior behind those answers. Look for an action that long-term subscribers repeat during their first billing cycle, then help new users reach it. A cheaper subscription doesn't give someone a reason to open the app.
Sponsored
Your business moves quickly. Your money should, too. Stripe Treasury brings payments and financial tools together, helping you pay vendors, send payouts, issue cards, and manage cash flow with less complexity. Build more efficient financial operations on the same platform your business already uses for payments as you continue growing. See how it
Anthropic and OpenAI both released new models within an hour of each other. OpenAI's GPT-6 Sol and Luna are half the price of the promotional pricing for GPT-5.6 equivalents. Opus 5.5 is cheaper per token than Opus 5.0 and has the intelligence of Fable 5.1. It is very token efficient and works across every effort level.
DigitalOcean Managed Agents enable teams to deploy their preferred agent harness, connect agents to over 16,000 tools, and help agents do more work at scale without building or maintaining any infrastructure themselves. It brings inference tokens, agent execution, and tool use together so teams can scale intelligence all in one place. Teams only pay for the CPU that agents actually consume with per-second active CPU billing. DigitalOcean Managed Agents is now available in public preview.
WebMCP lets browser agents interact with Stripe payment UIs through structured tools registered within the webpage. Agents can complete payment flows using WebMCP tool calls rather than relying on page scraping and simulating clicks. The available tools depend on the payment UI, session state, and which form is currently active. WebMCP is still experimental, so browser support, tool availability, and tool schemas can change.
A 'slop grenade' is bad AI-generated code that someone created, didn't properly understand, and then handed over to a reviewer to deal with. The problem is that the person who submitted the code can't fully explain the decisions behind it. This means reviewers need to work out what parts of the PR can be trusted and potentially also teach the author what their own code does. The time saved generating the code becomes someone else's work.
Give an agent a server, a wallet, and three weeks, and it can produce a lot of work. In this experiment, it wrote more than 100,000 lines of code, launched 17 paid products, and published 20 blog posts. Revenue came to $1.54 against roughly $1,000 in costs. The agent was selling into an agent economy with very few actual buyers. In a survey it commissioned, 90% of respondents said they lacked a wallet or spending authority. It could keep building products, but most of its intended customers couldn't pay for them.
Deel says that its over 10,000 agents operating across finance, payments, and regulatory functions have helped the platform save more than 1 million hours across its teams.
After building more than a dozen agents, including an AI VP of Revenue, SaaStr now builds only what it can't buy because maintaining them takes so much work.
There have been four straight quarters of increasing dilution across the board.
Many remain stuck in "local maximums," where pursuing greater happiness necessitates temporary discomfort.
Google has opened preorders for Googlebook, its new premium laptop category built on Android with ChromeOS-derived foundations under the official OS name Googlebook OS, five launch models from Acer, ASUS, Dell, HP, and Lenovo priced at $899-$1,299, hitting US shelves October 4. The lineup runs on Intel Core Ultra Series 3 or Snapdragon X Elite chips with 40+ TOPS NPUs (MediaTek-powered models to follow later), a 16GB RAM baseline with 32GB options, touchscreens up to 2.8K, and bodies built from aluminum, magnesium, or carbon fiber.
At ROSCon 2026 in Toronto, Alphabet's Intrinsic released Intrinsic Core, an Apache 2.0-licensed, ROS-compatible set of robotics capabilities pulled directly from the same platform Intrinsic uses for real manufacturing deployments, aiming to lower the barrier for developers building industrial robotics applications. The package includes a hardware-agnostic real-time control framework that lets robots dynamically adapt mid-trajectory to sensor input, 6-DoF pose estimation built on NVIDIA FoundationPose for handling parts without rigid physical fixtures, automatic motion and grasp planning, Gazebo-powered simulation, camera calibration, and pre-tuned ROS drivers for supported robots, grippers, and 3D cameras.
Meta's Petal cable will span roughly 7,000km between France and the US, carrying 1 petabit per second, double the capacity of any subsea cable at transatlantic distance, becoming the first system to deploy multi-core fiber at scale. Since the 2010s, coherent optical transmission pushed fiber capacity 10x before hitting the Shannon Limit, forcing the industry toward spatial division multiplexing, adding more fiber pairs to a cable, which Meta scaled from 8 pairs on Marea to 24 on Anjana. Rather than pushing to 48 fiber pairs or widening the optical band, Petal packs 2-core fiber into a 24-pair system, physically equivalent to 48 pairs but using ultra-pure synthetic silica and carefully controlled refractive-index differences between the cores to keep crosstalk nearly immeasurable.
CXMT said its fifth-generation DRAM platform has entered mass production, claiming process capability "on par with the most advanced mass-produced nodes out there in the industry." The company reduced the spacing of key data-storage structures to 11.95 nanometers using "quadruple patterning," a technique that repeats manufacturing steps to produce finer circuit patterns without needing EUV lithography, and says the new platform yields at least 50% more dies per wafer than its fourth generation on an 8-gigabit baseline.
NVIDIA released Isaac ROS 5.0 at ROSCon in Toronto, adding support for ROS Lyrical and Ubuntu 24.04 and contributing a vendor-neutral accelerated memory transport interface to ROS Lyrical alongside the Open Source Robotics Alliance, giving the broader 1.3-million-user ROS community a standard way to move data efficiently across different compute hardware, including GPUs.
Most LLM chip-design agents work directly at RTL, the low-level hardware description that specifies exact circuit behavior, which forces the agent to grapple with fine-grained optimization details from the very start. This paper tests whether letting agents design at a higher abstraction level first, High-Level Synthesis (HLS), which compiles from something closer to software code down into RTL, produces better results, comparing four workflows including a combined approach called Agent-based HLS with RTL Refinement (AHRR): the agent designs in HLS, then a separate refinement pass drops down to RTL to recover optimizations the higher-level abstraction misses.
MediaTek has unveiled the Dimensity CX C10 Max, the first chip in its new Dimensity Compute Experiences family, built on TSMC's 3nm process with an all-big-core octa-core CPU, an 11-core GPU, and MediaTek's 8th-gen NPU. The company claims up to 15% faster multi-thread performance and up to 50% less single-thread power draw than alternative platforms, enough efficiency headroom to enable fanless, ultra-thin laptop designs with up to 19 hours of battery life.
Ceer, Saudi Arabia's first homegrown EV brand, unveiled the Exobot sedan and SUV, the opening two of a planned seven-vehicle lineup, at its manufacturing complex in King Abdullah Economic City. The company is a joint venture between Saudi Arabia's Public Investment Fund and Foxconn, leveraging BMW licensing for the underlying platform along with partnerships spanning Hyundai Transys and Rimac, and both Tron-esque, gullwing-doored models were built with design input personally pushed by Crown Prince Mohammed bin Salman.
In a joint court filing, Apple asked to let its own forensic experts directly examine the digital images OpenAI's experts used to analyze former Apple engineer Chang Liu's devices, arguing its expert already found "critical flaws" and incorrect conclusions drawn from zero-byte files and empty metadata fields.
Qualcomm unveiled its Snapdragon 8 Elite Gen 6 and Elite Extreme Gen 6 at its annual Snapdragon Summit, both built with a new dedicated sensing hub capable of running small models up to 200 million parameters locally.
DSX Ready is a program that qualifies partner power and cooling products against its DSX AI factory reference design requirements, starting with battery energy storage systems and cooling distribution units.
Unitree's Dex5-S is a five-finger robotic hand scaled to match human hand size, with every one of its 22 degrees of freedom motor-driven and backdrivable via dual-encoder control.
Cognex is buying RealSense, a depth-sensing camera and vision technology business Intel spun out in 2025, for $500 million cash.
Sponsored
Based on outstanding customer feedback in the all new Forrester Wave™: External Threat Intelligence Service Providers, Q3 2026. Flashpoint also received the highest scores possible for the Fraud Intelligence, Executive Protection, and Pricing Flexibility and Transparency criteria. Access the report to see how top vendors scored across 23 criteria and learn why Flashpoint is ideal for customers seeking primary source access intelligence.
Attackers used a former CrowdSec employee's GitHub OAuth token following the May TanStack compromise. On May 22, they cloned about 170 private repositories within nine minutes. The leaked archive contained private code and contact data for 83 users. Investigators found no code changes, CI/CD access, or AWS access. The attackers tested one scoped SNS credential, but IAM permissions blocked it.
A zero-day allows any local macOS app or terminal command to redirect Muse transcription to an attacker-controlled server. The server receives the account token, enabling control over Muse and its connected email, WhatsApp, calendar, social accounts, microphone, camera, and files. Researcher Patrick Wardle demonstrated prompts that write files or take photos. Amazon also blocked Muse shopping requests as unauthorized.
The ShinyHunters ransomware gang hacked the Clop ransomware gang's data leak site on Tor, defaced it, and claimed to have stolen server data and private keys for its onion service. The ShinyHunters claim to have exploited an unauthenticated file upload vulnerability in Grav CMS to breach the site. This appears to be the latest escalation in an ongoing feud between the two ransomware gangs.
A SOC investigation loop requires assembling a full attack chain from various different signals that may look benign or unrelated, which traditional, deterministic playbooks may miss. The authors built a set of scenarios to evaluate agentic SOC's investigative ability and built their own harness (called Tengu). Their scenario involves a GitHub workflow vulnerability that leads to full Kubernetes cluster compromise, which then is escalated to full AWS account compromise. Of the models tested on a naive prompt, only Opus 5 managed to identify the alert as a true positive without the Tengu harness
Researchers from Gen have observed multiple new infostealers that harvest credentials, context, and local data from AI agents. Users and security teams should inventory what gets cached locally, keep secrets out of prompts and history, limit what connectors can do, and continue securing endpoints. Agent providers should also share the burden by providing more secure default behaviors.
CLOSEDQUORUM, a Go-based Windows implant, uses DeepSeek, Qwen, Mistral, and Gemini as its C2. Every 5 to 15 minutes, the models vote through a constrained JSON schema on whether to steal LSASS, browser, and crypto wallet credentials, inject shellcode, or persist via Run keys, scheduled tasks, and WMI. Talos hasn't seen it in the wild, and the public build is an inert template, but it points to a credentials-as-a-service model where each operator gets a custom build and never needs to be online. Its dependence on commercial APIs brings refusals, rate limits, and a deterministic DeepSeek tiebreak, so defenders should correlate multi-provider LLM traffic from unexpected executables with LSASS access, suspended-process injection, WMI persistence, and Discord webhook exfil instead of blocking domains.
Sponsored
Your prospects will see cybersecurity ad after cybersecurity ad on social this October. In TLDR InfoSec, your ad reaches 410K cybersecurity professionals and is one of just three ads per issue. Learn more about our special Cybersecurity Awareness Month ad
HelmGuard provides governance, risk, compliance, and security software. It gathers evidence from source systems, documents, and unstructured data, then automates risk assessments, assurance tasks, and control-gap reviews.
askWAM is a tool to request Microsoft Entra access tokens silently through Windows Web Account Manager (WAM).
DARKCLOAK chains the manipulation of all userspace-visible identity sources into an 11-phase sequential pipeline that progressively transforms a process until it becomes indistinguishable from the impersonated one to userspace monitoring tools.
VulnCheck's Patrick Garrity tracked 225 CVEs tied to Anthropic's Project Glasswing, which gives partners access to the Claude Mythos Preview model for bug-hunting. Only one, a critical SQL injection in Ghost (CVE-2026-26980), has been exploited in the wild. Garrity says that historically 1-2% of vulnerabilities are weaponized, so this rate isn't unusual. AI models are uncovering more bugs, driving recent record patch counts from Microsoft, Apple, and Palo Alto Networks, but fixing bugs remains weak: 1Password found that Opus 4.8 and ChatGPT-5.5 fully resolved vulnerabilities in only 26% of 6,080 patches tested, and Veracode measured a 56% average security pass rate across 100+ models.
Ireland's Data Protection Commission fined Google 403 million euros for GDPR breaches involving location data. The probe covered Web & App Activity, Location History, and Android's Location Accuracy feature from 2018 through February 2020. Regulators found the processing unlawful, unfair, or opaque, even though Google said it changed its policies and released new location-management tools in 2019.
The ShinyHunters claim to have breached the FBI's job site and networks using a zero-day in Oracle PeopleSoft. The ransomware gang claims to have stolen 2-3TB of data, including PII and PHI of current and former FBI employees and job seekers, as well as other internal records. The hackers said they carried out the attack in retaliation for an FBI FLASH report on ShinyHunters.
Attackers exploited Brevo SAML SSO handling, accessed 138 accounts, and later used a stolen Cloudflare API key.
Check Point patched CVE-2026-91843, a CVSS 9.8 login stack overflow.
A race in glibc's ld.so (CVE-2026-86805, versions 2.14 through 2.44) lets local users hardlink a setuid binary whose $ORIGIN RPATH uses ".." traversal and swap in a symlink to load attacker code with elevated privileges.
Microsoft announced the launch of its new India South Central datacenter region in Hyderabad, designating it as a strategic hub for Asia and the Global South. The facility features AI-ready infrastructure, a resilient three-zone architecture, and zero-water mechanical cooling, advancing the company's US$20.5 billion investment in the country's cloud and AI capabilities.
A vulnerability in Meta's new macOS AI assistant allowed local apps or commands to redirect traffic, steal the user's Muse token, and effectively inherit the agent's access to files, camera, messages, and connected services. Meta has issued a hotfix, but the bigger lesson is that desktop AI agents with broad permissions create a new privileged endpoint that needs the same scrutiny as remote management and admin tooling.
1Password explains how it extended hybrid post-quantum TLS across its first-party clients and services using an AWS load-balancer policy and a cryptographic-provider dependency change rather than rewriting application code. The interesting takeaway is less about quantum computing today and more about cryptographic agility: teams that keep crypto implementation separated from application logic can upgrade foundational security much faster.
Gartner expects 55% of enterprises to begin proofs of concept for alternatives to VMware-based distributed infrastructure by 2029, up from 25% in 2026. VMware remains rated strongly on technology, but pricing changes, licensing complexity, support concerns, and migration timelines are pushing infrastructure teams to at least evaluate alternatives rather than automatically renew.