News

Mailchimp’s subtle updates are stacking up to challenge what we expect from SMB softwareIntegrations with TikTok, Meta, and Google are finally making Mailchimp marketing feel connectedMetrics Visualizer offers 40+ variables, but feels like overdue functionality rather than innovationMailchimp’s continued transformation from a straightforward email marketing service into a broader business platform seems less like a pivot and more like a quiet evolution.Over the past year, the company has introduced more than 2,000 updates, most of them small but collectively significant.These updates aim to simplify customer engagement and automate key marketing workflows, quietly nudging Mailchimp toward becoming a top CRM offering - at least in ambition, if not yet in capability.Mailchimp expands beyond email marketingAt its recent FWD: London 2025 event, Mailchimp announced a wave of new features aimed at helping small and mid-sized businesses get more from their customer data.These include direct lead integrations with platforms like Meta, TikTok, LinkedIn, Google, and Snapchat.Marketers can now bring in social campaign leads more efficiently and feed them into Mailchimp’s upgraded automation flows for hyper-personalized messaging.This, paired with over 100 new pop-up templates, seems like a step toward making Mailchimp feel less like a glorified newsletter tool and more like a proper pipeline manager.“Mailchimp is evolving into the essential bridge between advertising and customer relationships for businesses, seamlessly connecting ad campaigns to powerful marketing automation that nurtures leads and drives sales,” said Ken Chestnut, Director of Global Partner Ecosystem, Intuit.“We're closing the loop between advertising, marketing automation, and powerful customer insights, giving businesses the tools to engage at the right time and place of the customer journey, from attracting new leads and nurturing relationships to driving conversions and building lasting loyalty.”Still, it’s hard to ignore that these features look like a patchwork of add-ons rather than a coherent CRM suite, at least for now.Freya Doggett from Serpentine Galleries acknowledged the improvements but also hinted at the ongoing complexity many users still face.“It feels like we're not having to do as much digging or joining the dots as much, which is really nice…Mailchimp really simplifies things that are complicated by nature.” It's a compliment, but a cautious one.The new Metrics Visualizer introduces over 40 reporting variables across email and SMS channels.Marketers can now assemble custom reports with much greater clarity, a welcome step for anyone still juggling data from multiple platforms.If Mailchimp hopes to contend with true CRM systems or even compete with the best email marketing service options out there, this kind of cross-channel insight will be essential.What’s still ahead might be more telling than what’s here now. Mailchimp is pushing toward becoming an all-in-one growth platform, but it's not quite the best website builder, nor a fully mature CRM system, just yet.You might also likeCheck out our roundup of the best online collaboration toolsThese are the best productivity toolsLG has a new 5K monitor with a Thunderbolt 5 port, and I love that it is curved and has a LAN connector

Sysdig exposed how a trusted GitHub feature can silently hand control to attackerspull_request_target isn’t just risky, it’s a loaded weapon in the wrong handsEven top-tier security projects like MITRE’s can fall to simple GitHub workflow misconfigurationsExperts have revealed several critical vulnerabilities in GitHub Actions workflows which could pose serious risks to some major open source projects.A recent investigation by Sysdig’s Threat Research Team (TRT) has exposed how misconfigurations, particularly involving the pull_request_target trigger, could let attackers seize control over active repositories or extract sensitive credentials.The team demonstrated this by compromising projects from well-known organizations such as MITRE and Splunk.GitHub Actions: A powerful tool with dangerous pitfallsGitHub Actions is widely adopted in modern software development for its automation capabilities, but this convenience often hides security risks.“Modern supply chain attacks frequently begin by abusing insecure workflows,” the report states, noting how secrets like tokens or passwords embedded in workflows can be exploited if improperly secured.Despite available best practices and documentation, many repositories continue to use high-risk configurations, either from oversight or a lack of awareness.At the core of the problem is the pull_request_target trigger, which runs workflows in the context of the main branch.This setup grants elevated privileges, including access to GITHUB_TOKEN and repository secrets, to code submitted from forks.While intended to facilitate pre-merge testing, this mechanism also allows execution of untrusted code, creating an attack surface that is easily overlooked.The risks are not hypothetical, they are real.In the Spotipy repository, which integrates with Spotify’s Web API, Sysdig discovered a setup where a crafted setup.py could execute code and harvest secrets.In MITRE’s Cybersecurity Analytics Repository (CAR), attackers were able to execute arbitrary code by modifying dependencies.Sysdig confirmed it was possible to take over the GitHub account associated with the project.Even Splunk’s security_content repository had secrets like APPINSPECTUSERNAME and APPINSPECTPASSWORD exposed, despite the limited scope of the GITHUB_TOKEN.Developers should reassess the use of pull_request_target, considering safer alternatives - Sysdig recommends separating workflows, using unprivileged checks first, and only allowing sensitive tasks after validation.Limiting the capabilities of tokens and adopting real-time monitoring with tools like Falco Actions can also provide vital protection.You might also likeTake a look at the best malware removal options aroundWe’ve rounded up a list of the best endpoint protection toolsCheck out the best antivirus for extra protection too

There's nothing quite like the excitement of a new console; feverishly whipping off the packaging, setting up your user account, and loading up your games to settle in for an hours-long induction to your new system.Thrilling though the process may be, there's a fundamental step all too often skipped: adjusting your settings. From Display and Audio settings to User, Lock, and software settings, there's plenty to tweak in your Switch 2.I've spent a week with the console, and there are some must-change settings you should adjust before getting started; here are my recommendations.1. HDR settings(Image credit: Future / Nintendo)Nintendo’s latest console supports HDR, and you can easily toggle this on and off within the settings. Simply head to Settings > Display > HDR Output and make sure this setting is on by default.Don’t stop there, though, because there’s a second setting which allows you to choose which games it’s enabled for. Scroll down in the Display menu, and you'll see (confusingly) another HDR Output option. Select this, and you can choose between 'Always Enabled', 'Compatible Software Only', and 'Disabled'.I’d recommend switching it on for compatible games instead of the default always-on setting to make sure non-compatible games look as good as ever.2. Preserve the battery life(Image credit: Future / Nintendo)If you’ve suffered from battery degradation on your first-generation Nintendo Switch, you’ll be delighted to know that the Switch 2 offers a setting that caps your battery life at around 90 percent while it's on charge, which should help your battery long-term. Simply head to Settings > System > Stop Charging Around 90%. You can easily toggle this on and off any time, so if you want a full charge every now and then for a long day of gaming in handheld mode, it’s just a matter of a quick trip to the settings. Alternatively, you can simply outsource the load and try a portable battery for your Nintendo Switch 2.3. TV resolution(Image credit: Future / Nintendo)Gamers, rejoice - the Nintendo Switch 2 can support screen resolutions up to 4K, albeit at a 60Hz refresh rate and 60fps for most titles, but you might have different ideas for your new console. Again, head to Settings > Display > TV Resolution.Within the settings, you can toggle automatic resolution detection or manually set the resolution for your TV, especially handy if you would prefer the higher refresh rates available in 1440p or 1080p resolutions.4. Change your lock settings(Image credit: Future / Nintendo)(Image credit: Future / Nintendo)Depending on who else will be using your Switch, you may want to change your Lock Screen settings with the system lock menu.Head to Settings > User, where you can select to Skip Selection Screen if you're the only one using the console regularly. Alertanitlvey, head to Settings > System > Console Lock. Here, you can set a PIN to keep prying eyes and grubby hands off your new console, but you can also opt to add parental controls using the dedicated Nintendo Switch Parental Controls app. 5. Activate Dark ModeSure, this one is a preference-based tip, but personally, I don’t see why you’d prefer to use the standard white theme over dark. Especially if you play mostly in handheld, it’s a great way to conserve power and give your eyes some rest.Once again, navigate to Settings > Themes and select between Basic White and Basic Black.You Might Also Like...3 chargers I’ve tested and recommend for giving your Nintendo Switch 2’s battery life a boostMissed out on a Nintendo Switch 2? Here's why the original Switch console might still be worth a look insteadUpcoming Switch 2 games to play in 2025