• Michael Ansaldo
    Contributing Writer Security Buzz

    Michael Ansaldo is a veteran technology and business journalist with experience covering cybersecurity and a range of IT topics. His work has appeared in numerous publications including Wired, Enterprise.nxt, PCWorld, Computerworld, TechHive, GreenBiz, Mac|Life, and Executive Travel.

    Michael has also created and managed editorial and social media programs for leading global brands, such as HP, Samsung, and Verizon.

Articles by Michael Ansaldo
FBI FLASH Alert Salesforce
FBI Warns of New Salesforce Data Extortion Campaigns
September 30, 2025
The FBI has issued a FLASH alert warning of new data theft and extortion campaigns aimed at Salesforce users. Investigators say two cybercriminal groups are breaking into Salesforce instances through social engineering schemes and compromised…
Read More >
Cursor IDE developer code autorun
New Vulnerability Exposes Developers to Silent Code Execution
September 26, 2025
Developers using the popular AI-powered code editor Cursor may be exposing themselves to silent attacks the moment they open a project. Oasis Security uncovered a critical vulnerability that, unlike the typical IDE flaws rooted in…
Read More >
npm worm supply chain credential theft
How a Self-Propagating npm Attack Is Hunting Developer Secrets
September 23, 2025
A developer runs a routine update, the kind that happens dozens of times a week. Nothing unusual flashes on the screen. But buried inside the new package is a hidden file called bundle.js. The moment…
Read More >
SentinelOne Observo AI
SentinelOne Acquires Observo AI to Drive Autonomous SOC Evolution
September 19, 2025
SentinelOne is moving deeper into the race to build the autonomous security operations center. The company has acquired Observo AI, a young firm known for its AI-native approach to managing security data pipelines. The deal…
Read More >
CISA KEV TP-Link WhatsApp
CISA Flags Actively Exploited Flaws in TP-Link Devices and WhatsApp
September 15, 2025
The Cybersecurity and Infrastructure Security Agency has added two more entries to its Known Exploited Vulnerabilities catalog, the list of bugs it says pose significant risk to the federal enterprise. Inclusion on the KEV means…
Read More >
Ultraviolet Cyber Black Duck
UltraViolet Makes a Bet on Unified Offense-Defense for the AI Code Era
September 13, 2025
UltraViolet Cyber has acquired Black Duck’s Application Security Testing services business, a move that expands its portfolio and signals a shift in how software security will be delivered. The timing is notable: enterprises are churning…
Read More >
Black Duck embedded software supply chain AI
AI Risks and Supply Chain Demands Redefine the Future
September 06, 2025
The embedded software industry is in the middle of a major reset. According to Black Duck’s State of Embedded Software Quality and Safety 2025 report, AI tools are changing how code is written, tested, and…
Read More >
OT security Dragos
The Hidden Cost of OT Cyber Disruption
September 01, 2025
Operational technology has become a prime target for cyberattacks, and the stakes are growing. These are the systems behind factories, power grids, and transit networks. When they fail, the disruption spreads well beyond the IT…
Read More >
Exchange server vulnerabilities
Tens of Thousands of Exchange Servers Still Unpatched, Leaving Cloud Domains at Risk
August 22, 2025
In April, Microsoft disclosed CVE-2025-53786, a high-severity flaw in on-premises Exchange Server that can give attackers a direct route to compromising connected Microsoft cloud environments. Four months later, more than 29,000 Exchange servers exposed to…
Read More >
Menlo Security GenAI phishing deepfake risk
Menlo Security Reveals How GenAI Tools Are Reshaping Work—and Risk
August 16, 2025
Generative AI is reshaping how people work. In January 2025 alone, Menlo Security recorded 10.53 billion visits to AI-related websites. That’s a 50% jump from just 11 months earlier. And most of that activity—an estimated…
Read More >
Commvault Satori
Commvault’s Satori Cyber Deal: From Backup to AI Governance Pioneer
August 11, 2025
Commvault is making a strategic move to expand beyond its core backup and recovery roots. The company announced plans to acquire Satori Cyber, a data security platform focused on access control and governance. The deal…
Read More >
FIDO PoisonSeed
FIDO Isn’t Broken—But PoisonSeed Found a Way Around It
July 31, 2025
FIDO (Fast IDentity Online) security keys have earned their reputation as one of the strongest defenses against phishing and account takeover. Built on hardware-backed cryptography, they make it nearly impossible for attackers to steal credentials…
Read More >
ServiceNow SaaS security
Inside the ServiceNow Count(er) Strike Vulnerability
July 25, 2025
ServiceNow has become a backbone of enterprise IT, helping organizations manage everything from HR workflows to IT service delivery. Its cloud-based platform touches nearly every department in large organizations, making it a central hub for…
Read More >
Snyk Invariant Labs agentic AI
Snyk Acquires Invariant Labs to Defend Agentic AI Systems
July 17, 2025
Snyk has acquired Invariant Labs, an AI security research firm specializing in agentic systems, in a move to secure the next generation of intelligent software. Large language models (LLMs) and agentic AI architectures are rapidly…
Read More >
CISA KEV exploited vulnerabilities
CISA Flags Four Actively Exploited Vulnerabilities—Some Nearly a Decade Old
July 15, 2025
On July 7, the Cybersecurity and Infrastructure Security Agency (CISA) added four new entries to its Known Exploited Vulnerabilities (KEV) catalog. What stands out about the vulnerabilities isn’t the number, it’s the age. The oldest…
Read More >
Brother devices printers vulnerabilities
Critical Vulnerabilities in Brother Devices Expose Millions to Remote Attacks
July 06, 2025
Security researchers at Rapid7 have disclosed eight newly discovered vulnerabilities affecting more than 689 models of Brother devices, including printers, scanners, and label makers. While these kinds of vulnerabilities rarely grab headlines, the scope of…
Read More >
Salesforce low-code vulnerabilities
Salesforce Industry Cloud Vulnerabilities Highlight Hidden Dangers of Low-Code Platforms
June 24, 2025
Low-code platforms like Salesforce’s Industry Cloud promise to speed up digital transformation by making it easier for organizations to build and deploy apps. With tools like OmniStudio, employees can quickly create workflows and interfaces tailored…
Read More >
Qualys Linux core dumps
New Vulnerabilities in Linux Core Dump Handlers Expose Password Hashes
June 23, 2025
Security researchers at Qualys have discovered two new vulnerabilities in popular Linux core dump handlers that could let local attackers extract sensitive data—including password hashes—from crashed programs. The flaws, tracked as CVE-2025-5054 and CVE-2025-4598, affect…
Read More >
Subscribe for the Latest News

"*" indicates required fields

This field is for validation purposes and should be left unchanged.
Consent*
Webinars
PAM and compliance, are you doing it right?
Register Now
Establishing a Proactive Third-Party Risk Management Strategy with Avon
Register Now
Identity Security Essentials: Protecting Against Modern Cyberthreats
Register Now