Full-text search across article titles and summaries. Refine with sector, year, content type, and reading-time filters.
Figma templates and Figma widgets have been welcome additions to the platform's ecosystem, helping designers do certain things faster and easier. In this great list, you'll find wireframe kits, illustration sets, design system templates, icon libraries, and much more.
Let AI decide the right colors for your design projects and apply colors with a single click.
Within the furniture and lighting design realm, there’s an unspoken rule regarding design pitches. Designers share their concepts with companies, and it’s the company’s prerogative whether to proceed with the idea. Ferréol Babin made a bold decision at a certain point—to start afresh and create his pieces with a distinctive approach that birthed something entirely new, unparalleled, and inspirational, breathing life into beautiful objects crafted with reverence for both material and process—an ethos that every designer should embrace.
Passkeys are beginning to make their way into popular apps, from password managers to multi-factor authenticators, vastly improving the user experience of authentication. There’s also a downside — having to store additional cryptographic keys for each login and every site for which you have a passkey often requires more space than storing a password. However, the security gains, the user experience from not having to remember a password, and the prevention of common phishing techniques more than offset the increased storage space.
Netlify recently rebranded all of its properties, including its marketing pages, docs site, and app UI. Often, this type of work takes six months or more since there are so many moving parts, stakeholders, and time zones. It took Netlify just six weeks.
Cartoonist Amy Kurzweil shares how she and her father, inventor and futurist Ray Kurzweil, used artificial intelligence to connect with her grandfather. Fredbot, her grandfather's chatbot, was built by digitizing thousands of his lecture notes, love letters, music writings, and employment applications. The process inspired Amy to write and illustrate the book.
We don't always get answers to our greatest questions in words. In some cases, art can help us see things in a new light. A new exhibition at Impulse Gallery in Lucerne, Switzerland, shows 14 sculptures by Christian Bolt that explore the concept of beauty from unexpected angles.
More than half of the world's population has low literacy, making using prompts difficult. Alternatively, the fundamentals of usability have been neglected or forgotten in the frenetic race to push generative AI to an eager audience. As soon as the novelty of these tools wears off, they will need more than just utility to keep users interested.
An insightful read from a founder of a venture-backed B2B startup that shut down. The biggest takeaways include: You need to really nail your ICP and build vertical use cases if you’re playing a horizontal game, don’t underestimate incumbents, and be mindful of confirmation bias from the supporters around you.
We put this in the highlight because it’s a needed reminder. As founders, we like to look at the competition or the best in class companies out there. Sometimes this can be useful, most of the time it’s not. You cannot copy Google. Its search business is so profitable that it can afford to do all those quirky things, your startup likely can’t. Focus on you.
Sam Lessin, a partner at Slow Ventures and former VP Product at Facebook, put out an 84-page slide deck recently that digs into the state of venture capital. It’s a long but very enjoyable read that gives a poignant view of the landscape.
You likely wave the figure around when talking to investors, but do you really understand what goes into calculating your gross margin? Here are some live examples to help bring it to life.
A bundle of insights from Lavanya Shukla, VP of Growth at Weights & Biases, on how to build a user acquisition flywheel instead of a funnel.
Asking the question of what advice you’d give a younger version of yourself is a super interesting exercise and this time done specifically with Reid Hoffman. Hint: he missed Stripe.
Groupthink joins your meetings, creates agendas, takes notes, and then instantly shares the summary with everyone else.
Visualize your online PR and link coverage.
Personalize every single email at any scale and in any language.
In-office, hybrid, remote–whatever working model you choose, there’s always trade-offs. If you’re even partially remote, igniting a sense of personal responsibility with your employees is critical. They need to know what their company objectives are, why they were chosen, and exactly how their role and daily work relates back to them.
a16z is calling this “The Superhero stack.” They dive into what role tech startups might play in changing how we think about public safety and security response.
Given the high concentration of cash and equity tied up in the top companies and their inability to do anything with it because of antitrust concerns, it will definitely put a damper on the M&A market with no end in sight.
Having a fully-vested co-founder or key hire depart the company is a killer. To hedge against this predictable outcome, more founders should adopt longer vesting cycles for themselves and the earliest big equity employees.
This question acts as a forcing function for feedback. You’ll know where you stand, and the investor will also be confronted with the need to refine their thinking a little.
Biden has gone all in on an executive order that, while lacking teeth, gives a good sense of where the administration is coming from when it comes to AI, and from that, we can glean potential impacts on the startup ecosystem.
Sponsored
Rampant cloud usage requires an advanced security playbook. Wiz put together these AWS security best practices [5] from leading cloud security orgs.
Lockbit ransomware group has listed Boeing on its victims list. Stolen Boeing data could have big repercussions as the company works for military clients who want their information to be confidential. Boeing is currently assessing this claim.
Atlassian disclosed a 9.1 severity CVE in Confluence Data Center and Server. It described the vulnerability as an improper authorization vulnerability that could lead to significant data loss if exploited by an unauthenticated attacker. Users of Confluence Data and Server are advised to update as quickly as possible. Confluence Cloud users are unaffected.
CCleaner’s parent company announced that it experienced a data breach related to MOVEit. Attackers compromised customer names, contact information, and purchase details. The Cl0p ransomware gang has not yet added details to its website about this attack.
This multi-part blog is a walkthrough on how to set up a phishing simulation campaign for education purposes. The first post covers configuring DNS, VPS, and TLS, installing Postfix, and SMTP service integration.
An article from Push Security exploring different Phishing techniques that can be used for initial access in Slack. The article covers common attacks, methods to cleanup after attacks, and the potential impacts.
This post showcases how to detect browser credential extraction, weed out false positives, and improve resilience against this threat by enabling process creation and file access auditing. Tools such as Lazagne and HackerBrowserData are open source and provide customizability to advanced attackers, whereas tools such as Nirsoft’s WebBrowserPassView are closed source and cannot be modified easily.
Darktrace has released a new solution based on AI. The new solution provides visibility of cloud architectures, real-time cloud-native threat detection and response, and prioritized recommendations and actions to help security teams manage misconfigurations and strengthen compliance.
Cloudflare released a tool to sanitize HAR files in response to the (latest) Okta breach of customer HAR files. Users can upload a HAR file and client-side logic will sanitize any sensitive credentials.
iMessage Contact Key Verification uses Key Transparency to verify the identity of the person that a user is corresponding with and notifies users if the conversation may be eavesdropped on. Users can also choose to verify a Contact Verification Code in person or via FaceTime. This feature is aimed at journalists, government officials, or others who have high privacy requirements.
This post details an active cryptojacking campaign abusing exposed AWS credentials on GitHub. The actor creates EC2 miners within minutes of secrets being posted leveraging cloud automation for scale. It goes into detail on how the actor implemented honeypots to monitor and reveals 474 miner instances between August and October.
Researchers are calling attention to the Wiki-Slack attack, a new technique that uses modified Wikipedia pages and relies on a formatting error when the page is rendered in Slack. To mount the attack, a threat actor would first need to select a Wikipedia article that might be of interest to an intended target, modify it to add a legitimate footnote at the end of the first paragraph, and then share the article in Slack, leading them to an attacker-controlled website where browser-based malware lays in wait.
The document from CitizenLab discusses the vulnerabilities of mobile networks and how they can be exploited by surveillance actors to track users' locations. These vulnerabilities are most often tied to the signaling messages sent between telecommunications networks which expose phones to different modes of location disclosure.
The Zero Day Initiative’s Pwn2Own Toronto 2023 hacking competition concluded with two new zero-day exploits, bringing the total demonstrated vulnerabilities to 58. Over the course of four days, participants successfully exploited routers, printers, smart speakers, NAS products, surveillance systems, and mobile phones, earning more than $1 million in rewards.
A malvertising campaign has been discovered that promotes fake versions of PyCharm through Google search results. A compromised website specializing in wedding planning has been infected with malware to serve bogus links to the software. Victims who click on the ad are led to a hacked web page with a link to download the application, which installs over a dozen different pieces of malware instead.
The SEC has charged SolarWinds with defrauding investors by concealing cybersecurity defense issues. The SEC alleges that the CISO of SolarWinds was aware of major security issues in the product but concealed that information. SolarWinds maintains that the action is unfounded.
More than half of Gen Zs can correctly identify a brand based on a viral sound alone. From licensing popular tracks to creating custom brand beats, marketers have embraced sound as a way to stand out on platforms like TikTok. Sounds likely don’t make or break a brand in the minds of Gen Zers, but it certainly helps with brand recognition and awareness.
YouTube has rolled out a global policy, prompting users to disable their ad blockers or subscribe to YouTube Premium for an ad-free experience. A message within the video player now informs users that ad blockers violate YouTube's Terms of Service and instructs them to "Allow YouTube Ads".
Using technical language in product descriptions makes people up to 16% less likely to buy a product, based on a recent experiment. Focus on describing the product's benefits using simple language to improve purchase intent, especially when targeting users that may not be familiar with the product.
Convert acquired 39K unique visitors and 500 qualified trials in one year by building a free online hypothesis generator tool. The team was looking for ways to drive organic traffic to their site and introduce visitors to their main product, an A/B testing tool. They noticed a lack of quality online tools to help formulate hypotheses for their A/B tests, so they created one. It includes a FAQ, links to other relevant content, and a Thank You page to measure completion rate.
Disallow the Google-Extended user agent or use Google-approved meta tags and attributes to block Google’s Bard from using your site’s content. However, there is a chance using these methods could harm your organic search performance. This article also explains how to block ChatGPT’s bot, Common Crawl’s bot, and Bingbot.
Google Slides has an entire ecosystem of add-ons to help make decks more engaging. This article shares add-ons and apps like Poll Everywhere, Noun Project, Slides Carnival, and Pear Deck. If you’re not a Google fan, there are also alternatives to Slides, including iA Presenter, Pitch, and Beautiful.ai.
T-Mobile almost failed because it focused too much on copying competitors. Its team used “framestorming” to identify the right problem to solve and took its market share from 10% to almost 30%. Framestorming encourages you to actively reframe a question and challenge its assumptions before jumping into solution mode.
This article shares insights about the shortcomings of Cascade, a B2B SaaS startup. Cascade raised $5.3M in a seed round but failed to scale, so the founders opted for a soft landing. Among the key lessons from the failure: the founders did not have a well-defined ideal customer profile to target with their product.
Umault, a B2B video ad agency, dissects the viral success of their Halloween parody, “Possessed”. The video is in the link and is under 1.5 minutes—it pokes fun at boring B2B stereotypes. In the podcast transcript, the creator shares his ideation process, and that there’s no secret formula or checklist for creating “jackpot” content. Create a macro strategy—treat it like a box, and think of ideas that are 10-20% outside of that box.