daily design digest
All times UTC
As Figma, Cursor and other design/dev tools plug into the Model Context Protocol, security researchers are flagging 'tool poisoning' attacks where a malicious MCP server tricks an AI agent into leaking data or running unwanted commands. This has already been documented against real IDEs, not just described in theory.
labs.cloudsecurityalliance.org
A trade piece published this month on designers working across commercial and residential design points to a wider pattern worth watching: employers valuing designers who flex across specialisms rather than staying in one lane. It's from the interiors world, not UX — treat it as a directional signal, not a UK tech-hiring stat.
designerstoday.com
A guide published this August lays out concrete patterns — triggers, approval steps, escalation rules — for keeping people in control before agentic AI tools take autonomous action. It reframes 'human-in-the-loop' as a design deliverable, not just an engineering principle.
airia.com
Figma's Variables feature — colour, number, string and boolean values tied to modes — is now the established way most teams structure design tokens inside Figma. If you're still hardcoding hex values in a junior role, this is the skill gap worth closing first.
help.figma.com
