Intercom's Fin AI version 2 introduces a solution-based pricing model that charges $0.99 per resolved customer query instead of a traditional subscription fee. This approach aligns costs with measurable outcomes, offering businesses flexibility and lowering the barrier to entry, especially for those with fluctuating support needs. However, while the model offers clear cost comparisons and scalability, it may introduce unpredictability in expenses and potential misalignment of service quality.
The belief that most successful startups rely on a single primary growth channel is overly simplistic and misleading. Effective growth strategies require a combination of multiple channels, much like assembling a basketball team where each player (or channel) plays a vital role. Startups should test, scale, and optimize various channels over time to ensure long-term growth, especially as marketing evolves with AI and automation. This post provides insights into five key growth engines - Inbound, Outbound, Product Virality, Events, and Ecosystem - and offers guidance on how to combine them for maximum impact.
Building applications doesn't need to be slow and painful. Combining AI-powered [10] design and development, human expertise, and a managed cloud platform, Archie Labs will bring your idea to life - with no technical skills, and at affordable fixed rates. Archie Labs is the software development agency of the future. Get a guided demo and consultation [11].
Seven powerful frameworks have emerged for building successful vertical AI companies, representing a potential $6 trillion opportunity in annual services spend. These frameworks include networked SaaS platforms connecting multiple stakeholders, data defensibility through proprietary datasets, and AI-business-in-a-box solutions that enable entrepreneurs to launch AI-driven ventures with turnkey operations. The key to success lies in reimagining specific industry verticals from the ground up rather than creating general-purpose AI tools, with a focus on addressing unstructured data and creating defensible market positions through innovative approaches to product development and monetization.
Reading is a powerful tool for personal growth and learning. Successful figures like Warren Buffett dedicate up to 80% of their working days to reading and thinking. Barack Obama maintained a daily
The relationship between CEOs and CMOs is often strained due to misalignment and lack of understanding, with only 10% of Fortune 250 CEOs having marketing experience and just 32% of CEOs trusting their CMOs. A successful CEO-CMO partnership requires clear role definition, focused priorities, and alignment on business objectives. Marketing responsibilities should not be too broad and ambiguous. Companies that position marketing as a core growth driver are twice as likely to achieve over 5% annual revenue growth. It is important to provide CMOs with proper resources, autonomy, and clear alignment with organizational goals.
The rapid growth in SaaS and Cloud spending, fueled by the COVID-19 pandemic, created a temporary bubble that has since deflated, with average growth rates dropping significantly from their 2021 highs.
30-minute reading habit even during his presidency. Americans spend over two hours daily on social media and three hours watching TV. Only 46% have read a book in the past year, highlighting a significant opportunity to reallocate time more productively. It is important to focus reading in specific areas of interest to build a strong knowledge foundation. Mastering a niche before expanding leads to better retention and understanding of complex topics.
Okta discovered a vulnerability in the DelAuth procedure for Okta AD/LDAP that allows users with usernames with a length equal to or greater than 52 characters to authenticate with only a username and a stored cache key of a previous authentication (no password needed). This issue was resolved in Okta's production systems on October 30. Okta recommends that customers review their logs from July 23 to October 30 for evidence of exploitation.
There is a new phishing campaign that targets users by posting reviews with a fake customer support number. When users call the number, a fake customer support agent instructs them to enter a code on a website that installs the ConnectWise SmartConnect software. The customer support agent then asks questions and attempts to troubleshoot the issue while an accomplice uses the SmartConnect software to steal data or install other malware. The same customer support number has been seen in attacks on Netflix, Amazon, iCloud, and others.
500,000 people in Columbus, Ohio were affected by a ransomware attack in July claimed by the Rhysida gang. The stolen personal information included names, addresses, bank details, and Social Security numbers. The city dropped a lawsuit against a security researcher who was accused of exposing sensitive data from the attack.
AWS CloudTrail's behavior with VPC Endpoints allowed data exfiltration through denied cross-account requests. Exploiting the vulnerability requires creating a DynamoDB table with specific resource policies and using custom user-agents to smuggle data through CloudTrail logs. While now patched, the vulnerability demonstrates how CloudTrail's inconsistent logging behavior across services can be exploited for data exfiltration.
This blog post outlines DataDog's Detection as Code (DaC) workflow, Terraform repository structure, and testing strategy. The DataDog team's process involves defining a query in the UI, exporting the detection to Terraform from the UI, committing it to source code with tests based on Stratus Red Team, and then deploying via a GitLab CI/CD pipeline. The post provides samples of rules, suppressions, tests, and Terraform configurations.
Organizations can utilize Wazuh to build a zero trust security system that protects against cyber threats and compliance limitations of traditional security models. Zero Trust security changes how organizations handle security by continuously analyzing access requests and monitoring every device and user. Companies adopt Zero Trust security to protect against cyber threats and compliance limitations of traditional security models.
Pinggy is a tool that can create SSH tunnels over the public Internet without the need to download any binaries. There is a free plan that allows for custom domains and free persistent URLs for 7 days.
The Iscariot Suite is a collection of tools that enhances and augments trusted open-source and commercial Blue Team/Sysadmin products, turning them into traitor-ware to achieve offensive security goals.
AWS has developed a Security Guardians program that empowers builders to make security decisions to enable security efforts (threat modeling, security reviews, etc) at scale. AWS has defined five steps to creating a security guardians program: set the program vision, identify innovators with a passion for security, define the behaviors that guardians will be expected to perform, maintain guardians' interest by providing opportunities to learn new skills and potential for career advancement, and measure the success of the program by gathering feedback as well as other metrics.
Attacks on GenAI infrastructure like AWS Bedrock have increased, with attackers hijacking models for dark roleplaying applications. Permiso discovered attackers hosting a sexual roleplaying chatbot using hijacked LLM infrastructure in AWS. The attacker bypassed content filters to enable sexual and violent content, including potentially illegal material.
Threat actors are using DocuSign's Envelopes API to send fake invoices impersonating well-known brands like Norton and PayPal. Attackers are bypassing email security protections to trick recipients into e-signing these documents to authorize payments. This large-scale abuse of the API has been reported to DocuSign.
60% of content creators plan to expand their presence on LinkedIn in the coming year. 49% had increased their activity over the past year. Many creators report that B2B influencer marketing content generates equal or better engagement compared to B2C, with 33% noting higher conversion rates. Consumer sentiment is notably positive - 58% favor more creator content on the platform. This trend is especially pronounced among 25 to 34-year-olds, who show 61% support for increasing creator presence.
Meta is extending its political ad ban on Facebook and Instagram past Election Day to prevent misinformation as votes continue to be counted. The policy, in place since October 29, allows only previously run ads and restricts new claims and edits. Other platforms, like Google, have also paused election ads. X has not implemented similar restrictions.
Storylane shifted its focus from traditional blog posts to interactive demos, creating engaging pages that provide immediate value. As a result, organic visits surged from 25K to 220K per month without any external backlinks. This approach highlights the importance of brand trust in an AI-saturated environment, where users prefer recognizable names, and shows how time-to-value has become a crucial metric for SEO success.
Google reviews make up 73% of all online reviews. Responding to them can significantly boost a business's reputation and build customer trust. 93% of consumers expect businesses to reply - prompt responses show care for customer feedback, improving brand credibility. Responses can improve local rankings, helping businesses become more visible to potential customers.
New technology, from AI to multi-tenant CMS, opens up new possibilities. Are you making the most of them? Join marketing and web development leaders from dotCMS, Refine Labs, Gitbook, and others at dotConnect — a free 2-day virtual summit [9]. Explore the future of content strategy, the role of AI and experimentation, and more.
Popr.ai helps users create personalized GIFs and memes to enhance engagement in LinkedIn DMs and emails. It offers customizable GIFs with text overlays, templates for repeat messaging, and a Chrome extension for streamlined LinkedIn interactions.
Navattic enables you to embed no-code interactive demos across your website, emails, and more. The tool allows for dynamic variables that personalize demos for each visitor. Navattic offers a free plan that includes an HTML demo and unlimited demo views.
Successful brand strategies balance long-term brand-building with short-term performance marketing, often through a 60/40 investment split - 60% for brand-building and 40% for sales activation. Brand-building boosts customer loyalty and differentiation, while performance marketing drives immediate, measurable sales. Key metrics like customer lifetime value, share of voice, and brand elasticity help connect brand-building efforts to commercial outcomes. Effective strategies include aligning budgets to support both brand equity and sales, educating executives on the advantages of long-term investments, and unifying brand messaging across channels. Brands like Nike show that investing in meaningful narratives yields both immediate and lasting results.
Nike's shift to a direct-to-consumer (DTC) model aimed to capitalize on digital channels, but came with big setbacks. Moving from sport-specific categories to a gender-focused strategy initially grew targeted segments but later slowed, failing to compensate for lost wholesale revenue. Nike's DTC lacked the logistical and customer support infrastructure its established wholesale model had, leading to overstock and brand dilution through frequent discounting. This experience shows the need for brands to phase DTC transitions carefully, maintaining core strengths while adapting gradually to avoid operational and financial pitfalls.
Family-owned businesses often leverage their heritage as a key marketing tool, emphasizing local roots, personal service, and community ties. This approach appeals to customers who value supporting local enterprises and enjoy knowing the history behind the products or services they buy. "Family-owned" branding can foster loyalty and trust, especially when businesses share stories of multiple generations and deep community involvement. Many such companies incorporate their heritage into their websites, advertising, and customer interactions, which can distinguish them from larger corporations. Maine, with a high percentage of family-owned businesses, shows how these firms can create a unique and appealing brand identity by celebrating their legacy.
Google's AI agent, Big Sleep, discovered an exploitable stack buffer underflow in SQLite. This marks the first publicly known instance of an AI agent finding a previously unknown exploitable memory-safety issue in widely used real-world software.
2024.11.06·
googleprojectzero.blogspot.com·13 min read·TLDR Web Dev
This developer found a vulnerability in EA's authentication system that allowed him to manipulate user accounts. The vulnerability involved exploiting exposed API documentation and a single insecure endpoint. It allowed him to steal usernames and game data, ban accounts, and even bypass game bans. The vulnerability was eventually patched by EA. The scenario highlights the need for more bug bounty programs for popular software.
There is an Arbitrary File Write vulnerability in Node.js that can be exploited to gain remote code execution access, even on a read-only filesystem, by using pipe file descriptors in the /proc filesystem. This post explains how attackers can bypass hardened infrastructure measures by using controlled data structures to manipulate event handlers. It also goes over how to protect against this.
Software engineers need to understand the dynamics of their organization to be successful. Beyond technical skills, they need to develop soft skills, understand implicit organizational hierarchies, and navigate company cultures properly. Embrace messiness, find small wins, and recognize organizational constraints.
2024.11.06·
newsletter.pragmaticengineer.com·26 min read·TLDR Web Dev