Operations | Monitoring | ITSM | DevOps | Cloud

Mozilla releases Firefox 1.45, fixing 16 vulnerabilities, while the older ESR version 15.30 addresses four. Adobe updates critical vulnerabilities in InDesign, Photoshop, and Illustrator. Microsoft also updates various Office versions, tackling critical vulnerabilities and known issues in SharePoint and SQL Server. This month sees a decrease in overall vulnerabilities, emphasizing the importance of keeping applications updated.

Discover how to manage unauthorized AI tools like Atlas and Comet in your organization. Learn how to:✓ Identify machines running unauthorized AI browsers.✓ Create smart tags for banned software.✓ Set up proactive security alerts.✓ Deploy automated uninstallation packages. Whether you're concerned about data privacy, compliance requirements, or unauthorized software installations, this guide shows you how to take control of your IT environment.

No more fixing the same issues again and again! The AI Assistant jumps in like a tireless first-line teammate, instantly providing the right solution. You choose whether it uses your internal knowledge, public resources, or both. See how easy it is to let AI handle recurring support issues, so your IT team can focus on bigger things. In this video, we used gpt-4.1 for completion and text-embedding-3-large for embeddings.

In this Reality Bytes reunion, Tom, Sean, Tim, Oriana and Megan unpack the buzzy rise of vibe coding — the AI-assisted development trend coined by Andrej Karpathy and already explored by companies like Meta and Microsoft. The panel digs beneath the hype: from accelerated prototyping and accessibility gains to serious risks around technical debt, shadow applications, governance, security and the loss of human accountability. Oriana and Megan highlight the importance of schema, context and genuine creativity, while Tim warns against mistaking speed for quality. Is vibe coding the future - or just another fragile shortcut?

Servicing stack updates for Server 2008 and 2012 require users to remain current to avoid operational impacts. Development tools also receive necessary updates, prompting action from development and operations teams. Key updates for Azure Monitor and Microsoft Visual Studio emphasize the importance of team engagement. The content also addresses the end of life for certain services, highlighting the need for awareness and preparation.

Much like an expert weaver crafts garments with centuries of knowledge and expertise, ManageEngine's IT management solutions are interwoven into the very fabric of your IT enterprise with precision and care.

Agentic AI is generating a lot of buzz, but what does it actually do for IT teams? Join us as we showcase how the industry is evolving in the new era. What once took hours or days will soon take minutes—unlocking a new level of productivity and efficiency for IT operations. The foundation of this evolution? AI-driven contextual analytics. Agenda.

CVE 2025-11561 affects Red Hat Linux and other distributions, requiring configuration of the Kross local authentication plugin for mitigation. Linux updates differ by vendor, with some delays in addressing vulnerabilities. A VMware tools vulnerability is actively exploited, prompting a recommendation to upgrade to a supported Linux version. Additionally, CVE 2025-58438 presents a traversal vulnerability in Python libraries on both Windows and Linux, resolved by upgrading to version 5.5.0.1.

Join us for a step-by-step tutorial on how to effectively configure your instance, customize your help desk, and automate processes using ServiceDesk Plus MSP Cloud. Also, learn how to leverage essential PSA features such as Timesheets, Billings, and Resource Management to streamline your MSP operations and achieve operational efficiency right from the start.

Learn how to design, implement, and manage a robust service delivery process to cater to your customers' IT service needs.

Microsoft has identified a zero-day vulnerability in the Windows kernel, rated 7.0 on the CVSS scale. Organizations often misprioritize vulnerabilities, focusing on high-severity scores instead of those actively exploited. Many lower-severity vulnerabilities are chained by attackers. A risk-based approach to vulnerability management is crucial. Current Windows OS versions are affected, and organizations should consider Extended Security Updates to mitigate risks as more zero days are anticipated.

Cisco has identified a new attack variant targeting firewalls, highlighting the need for user education on vulnerabilities. A vulnerability discovered on November 5th affects nearly 50,000 devices, with many still at risk as of September 30th. Organizations struggle to expedite updates due to complex configurations and implementation challenges. Recent research indicates that network edge devices are prime targets for zero-day vulnerabilities, emphasizing the need for improved security measures.

In a wide-ranging conversation, Robb Wilson—CEO and co-founder of OneReach.ai and author of The Age of Invisible Machines—joins Tim and Tom to explore the rise of agentic AI and its seismic implications for IT, organizations, and society. Robb breaks down the concept of agent runtimes, why conversational interfaces matter more than ever, and how adaptive, self-orchestrating systems will reshape work far beyond today’s service models.

Whether your organization’s mobile ecosystem consists of bring-your-own devices (BYODs) or corporate-owned devices, the Android operating system is likely part of the mix and has implications on IT and security. Explore some of the latest productivity-boosting tools to help admins automate routine tasks and provide secure, available and accessible mobility for end users of Android.

In this in-depth interview with Steve Thornton, Head of Service Delivery at Gilbert+Tobin Steve reveals how the Service Desk cut the time to resolve issues, increased employee satisfaction and adopted a shift-left approach with improved career opportunities within the service desk – all with the aid of automation bots via Ivanti Neurons. Listen to how Gilbert+Tobin.

The UK introduces a cybersecurity bill that enforces stricter regulations for critical infrastructure. As threat actors become more aggressive and utilize AI for advanced attacks, the legislation mandates organizations to respond quickly to incidents. Vendors must notify authorities within 24 hours, and emergency powers are created to improve cybersecurity responses. The emphasis is now on managing exposure in vulnerability practices.

Master the complete journey of IT assets – from planning and procurement to deployment, maintenance, and retirement – so you can maximize value, reduce risk, and make smarter IT decisions. With this course, you'll: This course is designed for learners of all backgrounds who want to understand IT Asset Lifecycle Management and apply it effectively in their organizations. No prior technical expertise is required -- just a desire to improve IT operations, reduce waste, and build smarter processes.

Key Takeaways November 2025 marks the first month of the Windows 10 Extended Security Updates program. If you are planning to run Windows 10 for an extended period, ensure you have upgraded to Windows 10 version 22H2. The Windows OS update is the highest priority this month as it resolves a known exploited CVE (CVE-2025-62215). Third-party updates from Adobe and Mozilla have already been released and an update for Google Chrome is expected soon, which means Edge will also need an update. November Patch Tuesday is the first Patch Tuesday after the EoL of Windows 10.

On the ServiceNow AI Platform, every corner of your business connects. Friction fades. Clarity emerges. Work flows. From IT to HR, Finance to Customer Service, it unites people, systems, and AI to drive transformation across the enterprise. See how we put AI to work for people.

Tim, Tom, and Oriana sit down with Monica Filak, Director of Customer Success at Nexthink, to explore what it really takes to turn DEX from a tool into a transformative methodology. Monica shares how her team helps organizations move beyond technology to rethink their people, processes, and communication — bridging the long-standing divide between IT and the business. From creative internal branding to AI-driven efficiency gains, she explains how companies can evolve from “shiny tool” thinking to achieving measurable, human-centered value.

A Chrome vulnerability is identified, allowing for remote code execution. Mozilla updates Firefox and Thunderbird to fix vulnerabilities. Adobe addresses critical issues in Bridge, Animate, and Illustrator. Microsoft resolves multiple vulnerabilities in Windows 10 and 11, along with updates for Office 2016 and 2019. Exchange Server updates are released, with no known exploits, and the T Net framework receives a rare update for an encryption vulnerability.

It’s a milestone moment! Our 200th episode of The DEX Show (and the first ever late one — sorry about that!). To mark the occasion, Nexthink Founder and CEO Pedro Bados returns to reflect on Nexthink’s incredible journey and discuss the company’s next era — from the recent investment by Vista Equity Partners to the accelerating fusion of DEX and AI. Pedro shares his perspective on how AI is reshaping the workplace, Nexthink’s vision for “an IT agent for every employee,” and why he’s optimistic about the future of technology and innovation. A landmark conversation to celebrate our big birthday.

Ivanti’s 2025 DEX report reveals a surprising disconnect: While IT leaders strongly believe in DEX, its adoption and impact are plateauing across industries. Join us for a thought-provoking webinar with Ivanti’s Mariah Shotts, along with special guest and AI expert Rob May. We’ll unpack findings from our global survey of 3,300 IT professionals and office workers, revealing: Whether you’re just beginning your DEX journey or looking to optimize your existing program, this session will help you benchmark your progress, close critical gaps and chart a future-proof strategy.

If you manage inventory or equipment within your organization and find it difficult to quickly locate it, know who it is assigned to, or when it needs your attention — this video is for you. Discover Hector, a cloud-based asset management solution accessible online, designed to help organizations manage their assets efficiently. Don't waste any more time with Excel files. Modernize your equipment management with Hector to maximize your investments and increase efficiency.

In this ninth episode of Masterclass 2025, discover how your enterprise can leverage generative and predictive AI features paired with last-mile customizations to meet your unique service delivery needs.

ivanti.com/itsm-automation Unlock the secrets to successful Agentic AI deployment and widespread AI adoption in your organization with insights from Scott Hughes, SVP of Revenue Operations and Corporate IT at Ivanti. This video explores why IT-business alignment is critical, the importance of high-quality data, and how legacy infrastructure poses challenges for effective AI integration. Key insights.

The platform provides features for member access, defining roles and permissions that guide user capabilities. Device management is regulated through scopes, which control visibility and actions on devices. Future enhancements will include object level ownership to improve policy management. Scopes also influence reporting, determining device visibility and compliance assessment, highlighting potential broader impacts beyond immediate access.

Updates focus on security and non-security improvements across various software, including Chrome, Firefox, and Apple operating systems. Chrome addresses multiple vulnerabilities, while Green Shot introduces new management features. Firefox and Safari receive regular updates for security issues, and Apple makes significant changes in its operating system versioning. Office applications like Excel also see updates targeting vulnerabilities, showcasing a proactive approach to software security.

In this episode of ITOM Spotlight, we sit down with Girish Bhat, Senior VP of GTM at Revifi, who has spent decades building, managing, and launching enterprise IT, security, and AI products at pioneering companies including Splunk, Cisco, Netscout, and Sumo Logic. With experience spanning engineering, product management, marketing, and GTM leadership, Girish brings a 360° perspective on how IT operations have evolved — from traditional alert-based monitoring to autonomous, AI-driven systems.

Windows 10 support already ended, but you are still running unsupported devices? AlloyScan shows which devices in your fleet are ready for Windows 11, and which need attention — missing TPM 2.0, incompatible CPU, or other requirements — all in seconds! Perfect for sysadmins who need clear, actionable insights to plan upgrades or replacements efficiently and avoid guesswork. Windows 11 migration readiness check and other great features arrived in AlloyScan this October.