• Jeff Pike
    Contributing Writer Security Buzz

    After majoring in journalism at Northeastern University and working for The Boston Globe, Jeff Pike has collaborated with technical experts in the IT industry for more than 30 years. His technology expertise ranges from cybersecurity to networking, the cloud, and user productivity. Major industry players Jeff has written for include Microsoft, Cisco, Dell, AWS, and Google.

Articles by Jeff Pike
SonicWall vulnerabilities https://www.pexels.com/photo/a-computer-generated-image-of-a-city-with-lights-18337612/
Chained Vulnerabilities Exploited in SonicWall Appliances
October 16, 2026
SonicWall recently confirmed the active exploitation of two chained vulnerabilities in its Secure Mobile Access (SMA) 1000 appliances. Attackers were already operating before any fix existed, as SonicWall discovered both flaws internally while investigating a…
Read More >
F5 fileless rootkit https://www.pexels.com/photo/vibrant-geometric-abstract-3d-blocks-design-34268918/
Fileless Rootkit Hides Malicious Script on F5 Servers
September 21, 2026
New research from Sophos X-Ops dismantles a core assumption behind years of web shell detection: that malicious code must eventually touch disk. That assumption went out the door when Sophos X-Ops discovered a Linux rootkit…
Read More >
NemoClaw NVIDIA AI agent https://www.pexels.com/photo/close-up-shot-of-lobster-claw-8352775/
Just One Website Visit Silently Hijacks NVIDIA AI Agent
September 13, 2026
It wasn’t phishing or a stolen credential. It was just a browser tab opened by a researcher. That’s all it took to seize control of a sandboxed NVIDIA AI coding agent. Recently disclosed by Oasis…
Read More >
Google post quantum cryptography PQC https://www.pexels.com/photo/visual-representation-of-magnetic-field-lines-38032287/
Google Cloud Maps Migration for Post-Quantum Cryptography
August 25, 2026
Securing infrastructure and services against the cryptographically relevant quantum computer of the future presents a major concern for the IT industry. Every encrypted connection will present a liability. The nation-state adversaries and organized threat actors…
Read More >
Pathlock AI agents https://www.pexels.com/photo/data-codes-through-eyeglasses-577585/
AI Agents Approving Transactions Enterprises Can't See
August 14, 2026
Enterprise AI has quietly crossed a threshold. What began as a productivity layer for summarizing data and drafting reports has evolved into a class of digital workers with real authority, according to new research from…
Read More >
PromptFiction Claude https://www.pexels.com/photo/3d-render-graphics-12939554/
PromptFiction Turns Claude Feature Into Attack Vector
August 04, 2026
The debate continues over whether hackers can trick AI agents into betraying users. Meanwhile, Oasis Security recently announced an unsettling finding. New research on the Claude Desktop agent not only found that a convenience feature…
Read More >
Fortiguard AsyncRAT malware https://www.pexels.com/photo/close-up-shot-of-a-person-using-a-laptop-5475755/
Malware Campaign Uses AI Hype to Spread AsyncRAT
July 14, 2026
A new FortiGuard Labs investigation reveals a malware campaign built entirely around a contradiction. The campaign uses the promise of AI education to deliver an Asynchronous Remote Access Trojan (AsyncRAT)—while also bearing the unmistakable fingerprints…
Read More >
FTC bank fraud scams https://www.pexels.com/photo/1-us-dollar-bill-163056/
Fake Banks and Phantom Agencies Draining Billions from U.S. Bank Accounts
July 01, 2026
New Federal Trade Commission (FTC) data shows how imposter scams have become the most reported form of fraud in the U.S. Financial losses nearly tripled from 2020 to 2025, and last year, Americans lost $3.5…
Read More >
executive order AI https://www.pexels.com/photo/usa-presidential-office-4338046/
Trump Executive Order Creates New Security Bargain Between Government and AI Industry
June 17, 2026
President Trump's June 2nd executive order on artificial intelligence marks a meaningful pivot. Previously, his administration maintained a hands-off posture toward the AI industry. While this order does not yet impose regulatory mandates, it constructs…
Read More >
Twill Typhoon Darktrace https://www.pexels.com/photo/an-abstract-artwork-5870930/
Twill Typhoon Modular Backdoor Rewrites Rules of Detection
June 01, 2026
Chinese-nexus threat actors have long demonstrated patience and operational sophistication. But newly-released research by Darktrace marks something more consequential than another well-executed intrusion. A Twill Typhoon attack documents an adversary that has engineered tooling to…
Read More >
PocketOS Cursor agent database https://www.pexels.com/photo/a-man-in-red-shirt-covering-his-face-3760043/
When Agents Decide to "Fix" It: The Governance Gap in Autonomous AI
May 19, 2026
All it took was the time to read this sentence, or about nine seconds. An AI coding agent wiped out months of customer data essential to the PocketOS SaaS platform and its car rental clients.…
Read More >
Nexcorium DVR https://www.pexels.com/photo/camera-de-surveillance-25391056/
DVRs Now Turning Into DDoS Attack Infrastructures
May 04, 2026
The IoT attack surface has never been larger—or more neglected. This trend was captured by FortiGuard Labs, which tracked a campaign in which a Mirai-variant botnet (dubbed Nexcorium) exploits CVE-2024-3721. The command injection vulnerability found…
Read More >
Ivanti vulnerability exploit https://www.pexels.com/photo/black-metal-padlock-706500/
Ivanti Exploitation Underscores the Fragility of Mobile Infrastructures
April 18, 2026
The active exploitation (CVE-2026-1340) of the Ivanti Endpoint Manager Mobile solution lays bare an uncomfortable irony at the heart of enterprise security: The platforms organizations deploy to govern and protect mobile devices have become high-value…
Read More >
Sysdig Langflow AI
AI Pipeline Code Flaw Exposes Patch Cycle Times
April 03, 2026
The cybersecurity community has long operated under an implicit assumption: When security alert organizations disclose a vulnerability, defenders have at least a few days—perhaps weeks—to assess, test, and deploy a patch before attackers catch up.…
Read More >
Salesforce ShinyHunters
Cybercrime Group Targets Salesforce Misconfigurations
March 23, 2026
A renewed cyberattack campaign on Salesforce by the cybercrime group ShinyHunters highlights a key consideration for security teams. Simple configuration mistakes can expose enterprise data—at scale. As this recent campaign unfolded, Salesforce warned customers about…
Read More >
Pexels Duncanoluwaseun 226232
Open-Source Risk Accelerating Faster Than Governance
March 09, 2026
The latest Open Source Security and Risk Analysis (OSSRA) report issued by Black Duck reveals a sharp escalation in software supply chain risk. Driven by explosive dependency growth, duplicated components, and AI-generated code, open-source vulnerabilities…
Read More >
Chrome extensions LayerX
Somebody Is Watching: AI Weaponizes Fake Chrome Extensions to Spy on Users
February 26, 2026
The promise of productivity has turned AI tools into effective lures for cybercriminals. Researchers at LayerX Security recently exposed AiFrame, a coordinated campaign of 30 malicious Chrome browser extensions that impersonated well-known AI assistants in…
Read More >
Netwrix cybersecurity identity security
Identity: The New Data Perimeter in the Age of Agentic AI
February 10, 2026
A new forecast from Netwrix Security Research Lab argues that the next wave of cybersecurity disruption will not come from new exploits, but rather from scaled attacks. “Soon, cybersecurity will stop being a people-scaling problem…
Read More >
Subscribe for the Latest News
Webinars
Prevent AI-driven attacks with Koi Agentic Endpoint Security
Register Now
Preemptive Cyber Defense: Prove Security Agents Before the Attack
Register Now
You Are Securing AI. Can You Prove Your AI Is Secure?
Register Now