IT Leaders Network
Log in

News

What IT leaders are reading, from the sources they trust, plus articles written for this site. Stories from other sites open in a new tab.

  1. CSO Online

    Hackers abuse the Ivanti Connect Secure bug to gain access without accounts

    Attackers without an account of their own were found logging in to Ivanti Connect Secure appliances using an authentication bypass flaw that the vendor has since fixed. Once inside, attackers ran arbitrary commands on the appliances. “Ivanti initially discovered a portion of this vulnerability as...

  2. The Next Web

    Apple, OpenAI head to court over AI trade secrets, with the case on the line

    A federal judge in San Jose hears two opposed motions on the same day, Apple’s request to stop OpenAI using anything taken from it and OpenAI’s request to throw the case out. Apple won part of its expedited discovery on Tuesday, and was refused part of it. Apple and OpenAI are in court in San […]...

  3. The Next Web

    US and European regulators question banks about AI agents and cyber risks

    Banking regulators in the US and Europe are stepping up efforts to contain the risks AI poses to banks, Reuters reported, citing six people familiar with the matter. Some fear that cyberattacks or rogue AI agents could shake the financial system. In the US, the Federal Reserve and two other bank...

  4. The Hacker News

    Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days

    A team at security firm XBOW chained three then-unknown Google Chrome bugs into a single attack that runs code on a Windows computer when the user only loads a web page, the company said. Its researchers built the attack in six days by directing AI agents running OpenAI's publicly available GPT-5.6...

  5. The Next Web

    Ofcom says it still has concerns over how X removes illegal hate content

    Britain’s online safety regulator, Ofcom, says it still has concerns about how well X removes illegal hate and terror content. This comes even though X is now reviewing these reports more quickly. In May, X promised to review posts reported through its UK illegal content tool within 24 hours on...

  6. The Hacker News

    Hirudo Android Trojan Uses Patched Banking Apps to Bypass Their Built-In Security Checks

    Cybersecurity researchers have disclosed details of a new Android banking trojan called Hirudo that works by replacing legitimate banking apps with purpose-built patched versions designed to bypass security checks from inside the app itself, marking a new escalation in financial fraud. Dutch mobile...

  7. The Next Web

    US charges 14 over North Korean IT worker scheme at more than 70 companies

    The US Justice Department has charged 14 people over a North Korean job scam, announced on Tuesday. North Korean IT workers used stolen names to get remote jobs at more than 70 US firms. The workers earned about $3 million, which went to North Korean groups under US sanctions, prosecutors believe...

  8. NY Times

    Rogue A.I. Agents from China Chatted with American Researchers

    Researchers discovered that the agents were trying to bypass security controls on websites and made contact with them. A Times reporter was invited to join the discussion.

  9. Wired

    Breville Eye Q Toaster Review: Neat Sensors, but Less-Than-Perfect Toast

    The Breville Eye Q uses optical sensors to measure the darkness of your toast. Cool tech, but the toasting quality needs improvement.

  10. Wired

    My Friend Has No Soul

    The second iteration of the viral Friend AI necklace is louder and less interesting.

  11. The Hacker News

    An AI Agent Found a Critical OTP Bypass in Production. The Attack Was the Easy Part.

    The bug was simple: the login let you choose where your sign-in code went. Proving it on a live website was the hard part. TL;DR During an authorized assessment, an AI pentesting agent found a critical authentication bypass on a major insurer's production website, on its own. One login request let...

  12. Security Week

    US Arrests Two in Crackdown on North Korean IT Worker Laptop Farms

    Investigators stormed 40 locations in Texas and seized 187 laptops used by North Korean IT workers to hide their location. The post US Arrests Two in Crackdown on North Korean IT Worker Laptop Farms appeared first on SecurityWeek.

  13. IT Pro

    AI agents have a mind of their own – and that’s a problem for businesses

    New research shows that half of organizations are having to deal with agent behaviour that hasn't been authorized or approved.

  14. IT Pro Security

    AI agents have a mind of their own – and that’s a problem for businesses

    New research shows that half of organizations are having to deal with agent behaviour that hasn't been authorized or approved.

  15. IT Pro

    US raids laptop farms used to funnel $3 million to North Korea in fake candidate scam

    The Famous Chollima operation hit organizations in the health care, communications, cyber support, retail, and manufacturing sectors

  16. IT Pro Security

    US raids laptop farms used to funnel $3 million to North Korea in fake candidate scam

    The Famous Chollima operation hit organizations in the health care, communications, cyber support, retail, and manufacturing sectors

  17. Help Net Security

    Phase Eight, Hobbs and Whistles owner joins growing list of fashion retailers targeted by hackers

    People who have shopped with Phase Eight, Hobbs or Whistles will have to wait to find out whether their personal information was exposed in a cyberattack on the company behind the three UK fashion brands. TFG London, the UK business of South African retail group The Foschini Group (TFG), detected...

  18. CSO Online

    Unplug your smart fridges, French supermarkets warned after cyberattack

    More internet-connected refrigerators have joined the official list of those affected by a cyberattack that ruined stocks of chilled food at hundreds of French supermarkets over the weekend. The French Computer Emergency Response Team (CERT-FR) advised supermarkets to disconnect any refrigeration...

  19. Help Net Security

    Radware MCP Server Protection monitors agent activity and guards against protocol abuse

    Radware has announced Radware Model Context Protocol (MCP) Server Protection, a purpose-built solution designed to help organizations more securely adopt MCP as AI agents gain greater access to enterprise applications, data and business workflows. The solution is intended to give organizations...

  20. Wired

    JackRabbit MG Cargo Bike Review (2026): Compact and Powerful

    This compact, plucky ride is the cargo ebike for people who don’t want a cargo ebike. It’s even fun to ride.