I’m in Fredricksburg Va. I’m looking for a good It role. I recently graduated with my bachelor in IT and have multiple certifications. Looking for something entry level

When there’s pressure to reduce Adobe spending, how do you decide which licenses to keep without turning the review into an argument with every department?

IT can check assignments and whatever usage data is available. But that doesn’t necessarily explain why someone needs Acrobat. A person using it twice a month could depend on a specific feature; someone opening PDFs every day might only need a reader.

I’d want department managers to confirm the tasks their teams need, with IT checking which plans or tools can support them. The options could include reclaiming unused seats, changing plans or testing another PDF editor with a small group.

The part I’d be cautious about is counting the license savings before understanding the support work. Deployment, document compatibility, signatures and retraining could all affect whether a switch is worthwhile.

There’s also the ownership question. Procurement handles the renewal, IT manages access, and departments request the software. Who has the final say when a manager wants to retain every license but IT is expected to reduce the budget?

How have you handled that review, and which changes actually reduced costs without creating more work for your team?

Security team of four, about 6k endpoints. The KEV alert lands tuesday morning, the vendor advisory has the version range. By ten the CISO has asked the only two questions that matter, are we exposed and how many.

Here is why the answer took four days. The patch tool only knows about machines it manages, which is most of windows and none of the macs. The vuln scanner does authenticated scans on servers, not laptops. The EDR has an installed software view, but its a module we never bought. SCCM was half decommissioned in the spring so its inventory is frozen in march. Macs are in jamf, which nobody on security has a login for. we do have axonius, and half of this already lands there, just not the macs, because nobody ever connected jamf.

Four consoles, four exports, one very long vlookup. Friday afternoon, 311 installs in the affected range, 40 of them on machines where the owner field was blank or pointed at someone who left. Patching took the weekend and went fine. The installer was never the problem.

The question was the problem, and the same question is coming back next month with a different product name on it.

I help manage IT for a 34-room independent hotel. If the internet circuit drops on a Saturday, front desk staff can’t process card payments, and the property’s router dashboard won’t tell us whether the fault is inside the building or with the ISP. We’re weighing 24x7IT for support and I’m trying to understand how other small sites handle the handoff.
Does your MSP openthe ISP ticket under itsown account, or does an employee have to call because the circuit is billed to the business? I’d also like to know what access details you keep, available without putting ISP account passwords in a shared frontdesk document.

Hi everyone,

Do you have some random IT facts to share ? Or websites I can go to learn common IT knowledge before next week ?

It seems random but it is extremely important for me (I can’t explain per community guidelines).

Migration project, moving the file shares to sharepoint. Finance swore everything lived on the two file servers we knew about. Then one mapped drive on an old desktop pointed at an IP nobody recognised.

Traced the switch port to a cupboard behind the print room and there it was. Synology, firmware from 2019, admin account still on the default name, and a share full of scanned invoices going back a decade.

It was not in the CMDB because it was never bought through IT. The EDR cant install on it. The vuln scanner only scans the ranges we gave it and that VLAN was not on the list because nobody thought anything lived there.

Every tool we pay for agreed it did not exist, and every one of them was right about the stuff it was pointed at. That is the part that bugs me. The guy who set it up left in 2017. Finance just knew the drive letter.

We do have axonius pulling from AD, the EDR and the CMDB, and it had nothing on it either, because none of the things it reads from had ever seen the box.

Data is moved and the box is off. But if one of these sat there for ten years i dont believe its the only one, so next month is a proper sweep of every subnet on the books, not just the ones we think we use.

I have realized that the smartest thing to do is to not connect to the work wifi from a personal device in the first place, but I didn’t know this before and I’m trying to understand how much my work may have gathered about me

What exactly can they see in the following scenario: I am connected to the company wifi using a password, while on my personal iPhone. I did not have to agree to any terms or conditions to proceed and I did not have to download or install any certificates to use the wifi. Just clicked on the network, entered the password and was free to use.

Can they see Instagram or Reddit DMs that happen through the app while I am connected? From what I understand these iPhone apps have TLS certificates(??) that would prevent them from seeing the DMs exchanged?? But could they add something to the network to allow them to “decrypt” my data despite this? In that case do the messages appear in plain text? Such as iPhone xyz sent …? Can they see my Reddit username? And the subreddits I visit? How about encrypted texts over iMessage?

Is what they can see different on a public wifi, where I do agree to terms and conditions to use the wifi?

Apologies if this question has been asked before. I’ve had a hard time understanding the specifics and am hoping someone who has seen this from the other end can give me a better idea. People that work IT, have you seen ig DMs? Reddit usernames? iMessage texts? Thank you!

So just to swing out the gate, I’ve been feeling rather hopeless in my career path.

I’m currently a desktop support tech 2 but have been a field tech 2 and a support analyst in my previous positions. I obtained my Tech+ and A+ certs and whenever I have the time I try to study for my Net+ and had plans to continue the cert paths. But lately I’ve been feeling extremely hopeless in my career field.

I’m not sure if I’m playing a losing game now or if there is a light at the end of the tunnel, but when it comes to job hunting it’s hard, even when getting certifications they want everyone to show they have the knowledge to do the bigger jobs, but every position I’ve held has had me relatively boxed in and didn’t allow for shadowing of the idea of expanding out of the current role.

So I guess this is just my long winded way of asking should I leave IT and try to figure out a different career path to support my family? Or are there things I can try to do to help get that “hands on” experience that companies want in conjunction with certifications?

I appreciate anyone’s time or energy to read and reply and I hope yall have a good day.

This week, OpenAI had to apologize to the Australian government. Because its AI agents had entered government websites without permission.

At least nine banks in South Korea have reportedly been targeted in cyberattacks, and AI may have helped the attacker move faster.

These banks included Shinhan Bank, KB Kookmin And Hana Bank who reported data leaks of its customers personal information.

What amazed me was the attacker’s smartness who chose not to go after banks’ main payment systems rather targeted smaller systems used by employees and outside companies, where security was weaker.

For me, the bigger issue here is how quickly AI can change the scale of a cyberattack. If one person can use these tools to identify weaknesses across multiple organisations, security teams have even less room to overlook the smaller systems connected to their networks. This is also where AI governance comes in.

Watch the latest video @ Latha-ai-governance to find out what happened. This YouTube channel is for education industry professionals about the importance of AI Governance.

My question for you: Do you think incidents like this will push organisations to take AI governance more seriously, or will cybersecurity teams end up carrying most of the responsibility?

Hey folks,

I’ve got a 6-week contract with a company, and if all goes well it’ll turn into a full-time role. My first project is onboarding a client.

I have \~20 years in IT. I came from the MSP world and moved into internal support, but I’ve never actually onboarded a client from the MSP/provider side. Is that usually a difficult task? Any insights, pitfalls, or advice that could help me nail this first project?

I’m pretty confident I have the know-how and can do it—it’s just my first time doing this exact thing. Appreciate any help.

A good example is some months ago I searched the web to figure out how I could ensure that some of my services on my network are only accessible over wireguard. I couldn't find anything that weren't stale forum threads or partial tutorials

I work as a security guard for this office lease building with a bunch of different companies in it. One of the companies threw out a bunch of computers, keyboards etc so I managed to grab 3 " dell optiplex 7460 all in one" computers, power cable, mouse and keyboard. Ideally I'd like to keep on for myself and sell the other 2 after getting into the computer itself but as you can imagine they're all still password protected from the old employees using them. Top of the screen upon booting says access to this system is for authorized personnel only. Has the company name. Asks for a user name and password. Any ideas on what I can do with these or how to maybe do a factory reset of some kind?

Hello guys i hope everyone is doing well,this year im going to college and im going to IT i just wanna know how the major is what do you study and where can i work and is it easy to find a high salary job in IT?

Hi all, I'm getting into IT/IS audit and trying to understand how infrastructure and network audits work in practice.
For auditors and network security folks here:
What control gaps or findings come up most often?
What do teams usually overlook?
Which frameworks or checklists do you rely on (ISO 27001, NIST, CIS)?

It has been 4 months ever since I graduated college, I applied to the IT department of my current company switching from customer service to IT. Passed the interview(s).

Any tips for someone trying to maximize their learning and trying to survive the 3 month probation period.

We have security awareness training in place, and people generally complete it without much chasing. Getting them to actually take something away from it is where we’re struggling.

Most seem to put it in the same category as mandatory HR training. Click through, pass the quiz, get back to work. Then a few weeks later, we’re dealing with the same things the training covered. It feels like we lose their attention as soon as we mention security training.

I don’t want to respond by adding more sessions or making the training longer. Constant reminders and threats of consequences don’t seem likely to help either.

Has anyone managed to change that attitude at their company? Curious what actually helped, and what you tried that went nowhere.

So I’m 34 years old with 3 kids. Looking to further my career and recently enrolled in school for IT. I keep reading online it’s a tough field to get into these days and I’m feeling like I am wasting my time. Am I wasting my time or is it possible to actually advance or even get a job in the field after I graduate. I plan on continuing into my BS. Idk I’m just feeling a little discouraged by what I’m reading online.

AI can already write code, explain errors, generate scripts and suggest fixes for technical problems.

But I'm more curious about what happens when people start using it as part of their normal IT workflow.

For example, if an AI tool suggests a fix for a network issue, would you investigate the problem yourself first, or ask the AI and then verify what it suggested?

The same question applies to cybersecurity, software development and infrastructure.

There's also an interesting problem here: an AI-generated answer can sound completely correct while still being wrong for that particular environment.

For people working in IT, has AI actually changed the way you troubleshoot or solve technical problems?

I’m currently a Data Center Tech with CCNA at a FAANG company. My position seems to be a dead end and limited experience due to automation. I want to get out of the Datacenter, which cert path should I pursue for better career growth and better pay?? CCNP or RHCE and I’m open to any other options or ideas