09 — News
What's changing in search — and what it means for you.
AI search moves fast. We track it daily so you don't have to. Curated, summarized, and updated every few days.
Featured
Stop Saying Kids Can’t Read
Everyone is talking about the reading crisis. But inside the “Mississippi Miracle,” it’s all about comprehension.
Read →What actually got our articles cited by ChatGPT (and what didn't)
A few weeks ago I found out our site had a table of contents that rendered for absolutely nobody. The code was there. The CSS was there. It had been shipping to production for months. It just never a...
Read →I reverse-engineered Claude's undocumented Design API so a file sync wouldn't cost 665k tokens
A build log about protocol archaeology, three wrong guesses, and refusing to trust my own mocks. The token bill that started it Claude Design (claude.ai/design) is a nice place to keep a d...
Read →The feed
Discord is making its public communities more searchable, and people have concerns
In December, messages from Discord's public discoverable servers will begin appearing in search engine results.
Read →Who’s really in charge at Anthropic after the IPO?
Here's a clear explanation of Anthropic's incredibly complex governance structure.
Read →Bank of America kindly asks that you don’t share your banking password with your AI assistant
The banking giant reminds customers that "you're responsible for activity" resulting from your AI agents' access.
Read →GM is embracing hybrids now
GM eschewed hybrids in favor of battery-electric vehicles. Now, it's gearing up to offer hybrid versions of its SUVs.
Read →Can someone fake your email? A free SPF, DKIM and DMARC check, graded A to F
Key takeaways The free email check tells you in about 20 seconds whether anyone can send email pretending to be your domain. It reads public records only, grades the domain A to F by fixed rules, an...
Read →Proof pack: evidence of your vulnerability work for audits, insurers and renewals
Key takeaways Every tracked finding now has a fix deadline, and a past due list shows what is late and by how many days. When a client won't fix something, they can accept the risk by signing online...
Read →【第1回】 「止めないこと」は本当に品質なのか
「Web サービスは、24 時間 365 日止まらず動いているのが当たり前」——私たちは、いつからそう考えるようになったのでしょうか。 本シリーズのテーマは、24/365 稼働で得られるものはセキュリティ脅威に見合うかで...
Read →I built a course on shipping AI agents that can't hurt you. Module 1 is free.
Your agent will try to do something you never meant to allow. It will refund an order nobody approved, call a tool it should not see, or loop until the bill gets your attention. Prompts do not stop th...
Read →What's new in Varaxon Scan Hub: October 2026
Key takeaways New: a free email and domain check, graded A to F, for your own domain, your clients and their suppliers. Reports now prove what was fixed since the last scan, with deadlines and a p...
Read →gVisor in CI: sandboxing untrusted code on GitHub Actions
If your CI executes code that contributors send you, a plain container is not a boundary. Run it under gVisor with the network off and a read-only root filesystem, keep a syscall trace, and treat ever...
Read →cosign verify-attestation vs gh attestation verify
To verify an OCI artifact that carries GitHub artifact attestations, run gh attestation verify or cosign verify-attestation with the exact workflow identity. gh reads the Sigstore bundles from GitHub'...
Read →Catch leaked secrets before `git push`, with one stdlib Python file
Everyone has a story about an API key that landed in a public repo. Usually it is not carelessness: a .env file was not in .gitignore yet, or a quick test left a password in a config file, and git add...
Read →Ranking position trendnews → referrals
Referral traffic from published news coverage.
Get in touch
You don't need a finished brief. Tell us what the brand has to do and by when — we'll come back with a plan and a price.
Let's discuss
Tell us what the site has to do and by when — we'll come back with a plan and a price.
