IT Leaders Network
Log in

News

What IT leaders are reading, from the sources they trust, plus articles written for this site. Stories from other sites open in a new tab.

  1. CIO Dive

    Publix names new chief information and digital officer

    The grocer promoted CIO Laurie Douglas to the role and announced other executive changes in its technology, industrial operations and finance departments.

  2. Dark Reading

    Vulnerability Management Isn't About the Score — It's About How It Applies to You

    Organizations need to move away from vendor-assigned, theoretical scores toward real exploit data specific to their environments.

  3. CIO

    Secure your AI estate: 5 things CIOs must know about AI agents

    What CIOs need to know about AI agents Enterprise AI adoption is entering a new phase. Generative AI gave employees new ways to create content and access information, primarily through AI web applications. Embedded AI copilots began helping them work natively in existing applications. Now, AI...

  4. Security Week

    UK Legal Aid Agency Hack Scope Widens After Forensic Review

    Most of the data is related to applications, claims, and payments submitted between 2007 and 2025. The post UK Legal Aid Agency Hack Scope Widens After Forensic Review appeared first on SecurityWeek.

  5. The Hacker News

    Help TDS Linked to Hotejka as 20,000+ Cloudflare Pages Domains Host Tech Support Scams

    A long-running Traffic Distribution System (TDS) known as Help TDS to a Russian-language affiliate program called Hotejka, which appears to be a rebrand of a traffic monetization operation dubbed ROI777. Help TDS is assessed to be active since at least 2017, offering PHP code templates to partners...

  6. CIO

    ServiceNow makes it easier to build AI agents, gives them verifiable identities

    ServiceNow is giving its AI Control Tower new features to make AI agents more governable — and a new name, Super Intelligence Control Tower (SICT), to please the US President. It is also updating EmployeeWorks to make building AI agents easier. AI Passport, a new component of SICT, gives every...

  7. Infosecurity Magazine

    France: Internet-Exposed Danfoss Controllers Drop 71% After Cyber-Attack

    France-based operators of Danfoss refrigeration controllers have sharply reduced their internet exposure after the October 11 cyber-attack

  8. Wired

    Junji Ito’s Manga Horrors Hit Harder as Live-Action TV

    The artist’s macabre short works have been adapted into eerily freaky 30-minute bites for television. We got a sneak preview of the next episode airing on HBO Max.

  9. Help Net Security

    Fake CAPTCHAs are tricking users into running malware on their own devices

    Fake CAPTCHA checks are being used to do more than hide phishing pages. Attackers are turning the familiar “prove you’re human” step into a gateway for malware downloads, malicious browser notifications, and commands that victims are tricked into running themselves, according to Barracuda. The...

  10. IT Pro

    Data centre and cloud shares slide amid AI gloom

    Major providers saw massive selloffs following Barclays downgrade as Gartner warns on AI infrastructure spending

  11. CTO Magazine

    AI Application Development: Merrick Reveals How to Make it Enterprise-Ready

    AI application development is the easy part. Scaling it securely is the challenge. AI is dramatically accelerating application development, making it easier than ever to turn ideas into working software. But building an application and preparing it for enterprise use are two very different things...

  12. Infosecurity Magazine

    New Aoki Infostealer Targets AI Coding Assistant Credentials

    Symantec warned that Aoki can steal API keys and tokens from a number of popular AI coding assistants, including Claude and Gemini

  13. The Hacker News

    NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks

    NGINX released versions 1.30.6 and 1.31.7 on October 14 to fix five vulnerabilities, one of them present in every release since May 2005. There are three memory bugs that F5, the company behind NGINX, says could crash a worker process or possibly let an attacker run code, and each requires a...

  14. Security Week

    Supermarket Refrigeration Attack Widens to Copeland, Dixell Controllers

    Roughly 700 French supermarkets were hit by the cyberattacks, for which no group has claimed responsibility. The post Supermarket Refrigeration Attack Widens to Copeland, Dixell Controllers appeared first on SecurityWeek.

  15. CSO Online

    Cisco warns of actively exploited Secure Email Gateway flaw

    A critical vulnerability affecting Cisco’s Secure Email Gateway product is allowing attackers towrite arbitrary files on the underlying operating system. In an advisory issued on Wednesday, the company urged customers to apply available fixes after confirming that the flaw is being exploited in the...

  16. The Hacker News

    Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing

    Next.js released an out-of-band security update on October 14 that fixes two critical flaws allowing unauthenticated remote code execution, along with a high-severity denial-of-service flaw. One code-execution flaw is in React Server Components, and the other in librsvg, the open-source library...

  17. NY Times

    Tesla Debuts 2026 Roadster, an EV Sports Car at Least $200,000

    Elon Musk’s company and other automakers, like Jaguar and Bentley, are trying to sell very expensive electric cars to people who usually prefer gasoline-fueled luxury and performance.

  18. IT Pro

    Workday customers showcase how to unlock AI value

    Doing AI for AI’s sake is pointless. What really matters is ensuring AI is delivering value…

  19. The Hacker News

    Drupal Patches Critical Core RCE Flaw with No-Login Path via Contributed Modules

    Drupal core has a critical flaw in its Field UI module that could let an attacker run code on the site's server, and fixes were shipped on October 14 in Drupal 11.4.10, 11.3.19, and 10.6.19. An attacker cannot reach the flaw through core alone, the Drupal Security Team said in its advisory. Several...

  20. CSO Online

    Attackers exploit Palo Alto PAN-OS flaw for root access as CISA orders three-day fix

    Attackers are exploiting a newly disclosed flaw in Palo Alto Networks’ PAN-OS firewall software to run code with root privileges, and US federal agencies have been ordered to fix it and check for compromise by October 17. Palo Alto Networks disclosed the vulnerability, tracked as CVE-2026-0322, in...