• Michael Ansaldo
    Contributing Writer Security Buzz

    Michael Ansaldo is a veteran technology and business journalist with experience covering cybersecurity and a range of IT topics. His work has appeared in numerous publications including Wired, Enterprise.nxt, PCWorld, Computerworld, TechHive, GreenBiz, Mac|Life, and Executive Travel.

    Michael has also created and managed editorial and social media programs for leading global brands, such as HP, Samsung, and Verizon.

Articles by Michael Ansaldo
Dataminr ThreatConnect
Dataminr Acquires ThreatConnect for $290M in Push for Agentic AI
October 24, 2025
Dataminr is buying ThreatConnect for $290 million, a move that signals more than just another cybersecurity merger. The deal brings together Dataminr’s strength in real-time insights from public data with ThreatConnect’s expertise in internal threat…
Read More >
Insider Risk Report Fortinet
The Human Factor in Cybersecurity
October 21, 2025
Cybersecurity headlines tend to focus on the outside world—state-sponsored hackers, ransomware gangs, and criminal networks. But Fortinet’s latest Insider Risk Report, produced in partnership with Cybersecurity Insiders, shifts the focus to what’s happening inside organizations.…
Read More >
AI classroom students Keeper Security
AI in the Classroom: Promise, Peril, and the Growing Cybersecurity Gap
October 13, 2025
Artificial intelligence has moved into classrooms faster than most schools can keep up. Teachers use it to grade assignments, plan lessons, and spark student creativity. Students use it for research, writing help, and coding projects.…
Read More >
Barracuda phishing OAuth Microsoft
Phishing Gangs Expand Targets to Microsoft, Google, and Twilio
October 06, 2025
Phishing has always been a moving target, but the latest data shows just how fast attackers are evolving. Email-based scams that once relied on crude tricks are now weaponizing trusted services, slipping past filters, and…
Read More >
FBI FLASH Alert Salesforce
FBI Warns of New Salesforce Data Extortion Campaigns
September 30, 2025
The FBI has issued a FLASH alert warning of new data theft and extortion campaigns aimed at Salesforce users. Investigators say two cybercriminal groups are breaking into Salesforce instances through social engineering schemes and compromised…
Read More >
Cursor IDE developer code autorun
New Vulnerability Exposes Developers to Silent Code Execution
September 26, 2025
Developers using the popular AI-powered code editor Cursor may be exposing themselves to silent attacks the moment they open a project. Oasis Security uncovered a critical vulnerability that, unlike the typical IDE flaws rooted in…
Read More >
npm worm supply chain credential theft
How a Self-Propagating npm Attack Is Hunting Developer Secrets
September 23, 2025
A developer runs a routine update, the kind that happens dozens of times a week. Nothing unusual flashes on the screen. But buried inside the new package is a hidden file called bundle.js. The moment…
Read More >
SentinelOne Observo AI
SentinelOne Acquires Observo AI to Drive Autonomous SOC Evolution
September 19, 2025
SentinelOne is moving deeper into the race to build the autonomous security operations center. The company has acquired Observo AI, a young firm known for its AI-native approach to managing security data pipelines. The deal…
Read More >
CISA KEV TP-Link WhatsApp
CISA Flags Actively Exploited Flaws in TP-Link Devices and WhatsApp
September 15, 2025
The Cybersecurity and Infrastructure Security Agency has added two more entries to its Known Exploited Vulnerabilities catalog, the list of bugs it says pose significant risk to the federal enterprise. Inclusion on the KEV means…
Read More >
Ultraviolet Cyber Black Duck
UltraViolet Makes a Bet on Unified Offense-Defense for the AI Code Era
September 13, 2025
UltraViolet Cyber has acquired Black Duck’s Application Security Testing services business, a move that expands its portfolio and signals a shift in how software security will be delivered. The timing is notable: enterprises are churning…
Read More >
Black Duck embedded software supply chain AI
AI Risks and Supply Chain Demands Redefine the Future
September 06, 2025
The embedded software industry is in the middle of a major reset. According to Black Duck’s State of Embedded Software Quality and Safety 2025 report, AI tools are changing how code is written, tested, and…
Read More >
OT security Dragos
The Hidden Cost of OT Cyber Disruption
September 01, 2025
Operational technology has become a prime target for cyberattacks, and the stakes are growing. These are the systems behind factories, power grids, and transit networks. When they fail, the disruption spreads well beyond the IT…
Read More >
Exchange server vulnerabilities
Tens of Thousands of Exchange Servers Still Unpatched, Leaving Cloud Domains at Risk
August 22, 2025
In April, Microsoft disclosed CVE-2025-53786, a high-severity flaw in on-premises Exchange Server that can give attackers a direct route to compromising connected Microsoft cloud environments. Four months later, more than 29,000 Exchange servers exposed to…
Read More >
Menlo Security GenAI phishing deepfake risk
Menlo Security Reveals How GenAI Tools Are Reshaping Work—and Risk
August 16, 2025
Generative AI is reshaping how people work. In January 2025 alone, Menlo Security recorded 10.53 billion visits to AI-related websites. That’s a 50% jump from just 11 months earlier. And most of that activity—an estimated…
Read More >
Commvault Satori
Commvault’s Satori Cyber Deal: From Backup to AI Governance Pioneer
August 11, 2025
Commvault is making a strategic move to expand beyond its core backup and recovery roots. The company announced plans to acquire Satori Cyber, a data security platform focused on access control and governance. The deal…
Read More >
FIDO PoisonSeed
FIDO Isn’t Broken—But PoisonSeed Found a Way Around It
July 31, 2025
FIDO (Fast IDentity Online) security keys have earned their reputation as one of the strongest defenses against phishing and account takeover. Built on hardware-backed cryptography, they make it nearly impossible for attackers to steal credentials…
Read More >
ServiceNow SaaS security
Inside the ServiceNow Count(er) Strike Vulnerability
July 25, 2025
ServiceNow has become a backbone of enterprise IT, helping organizations manage everything from HR workflows to IT service delivery. Its cloud-based platform touches nearly every department in large organizations, making it a central hub for…
Read More >
Snyk Invariant Labs agentic AI
Snyk Acquires Invariant Labs to Defend Agentic AI Systems
July 17, 2025
Snyk has acquired Invariant Labs, an AI security research firm specializing in agentic systems, in a move to secure the next generation of intelligent software. Large language models (LLMs) and agentic AI architectures are rapidly…
Read More >
Subscribe for the Latest News

"*" indicates required fields

This field is for validation purposes and should be left unchanged.
Consent*
Webinars
Establishing a Proactive Third-Party Risk Management Strategy with Avon
Register Now
No More Weak Links: Unleashing NDR and SASE for Hybrid Networks
Register Now
Identity Security Essentials: Protecting Against Modern Cyberthreats
Register Now