• Michael Ansaldo
    Contributing Writer Security Buzz

    Michael Ansaldo is a veteran technology and business journalist with experience covering cybersecurity and a range of IT topics. His work has appeared in numerous publications including Wired, Enterprise.nxt, PCWorld, Computerworld, TechHive, GreenBiz, Mac|Life, and Executive Travel.

    Michael has also created and managed editorial and social media programs for leading global brands, such as HP, Samsung, and Verizon.

Articles by Michael Ansaldo
AttackIQ breach simulation security posture management DeepSurface
AttackIQ Acquires DeepSurface to Expand Cyber Threat Exposure Management Capabilities
February 18, 2025
AttackIQ has built its reputation as a leader in Breach and Attack Simulation (BAS), helping organizations test and validate their security controls against known threats. Its platform enables security teams to assess their defenses, identify…
Read More >
ransomware agentic AI Malwarebytes
AI, Ransomware, and the Escalating Cybersecurity Battlefield in 2025
February 07, 2025
Cybersecurity in 2025 is caught in a tug-of-war between innovation and exploitation. The rise of agentic AI—AI that can operate autonomously, make decisions, and interact with systems—has reshaped both cyber defense and cybercrime. Security teams…
Read More >
Sophos mobile access appliance
Critical Flaw Puts Secure Mobile Access Appliances at Risk
February 04, 2025
SonicWall has issued an urgent warning about a newly discovered zero-day vulnerability, CVE-2025-23006, in its Secure Mobile Access (SMA) 1000 Series appliances. This flaw leaves affected devices open to full system compromise, enabling attackers to…
Read More >
Web 8989999 1280
The Expanding Reach of Chinese Cyber Espionage in U.S. Telecommunications
January 21, 2025
A recent wave of cyberespionage has exposed the vulnerabilities of U.S. telecommunications networks. Dubbed "Salt Typhoon" by Microsoft, this campaign, attributed to Chinese hackers, infiltrated at least eight major telecommunications companies, including AT&T and Verizon.…
Read More >
Cloak ransomware Halcyon
Cloak Ransomware: The Rising Threat with Advanced Disruption Techniques
January 15, 2025
The Cloak ransomware group emerged in late 2022 and has quickly become a major cybersecurity threat. By targeting small- to medium-sized businesses (SMBs) across Europe and Asia, Cloak has made a significant impact with its…
Read More >
Rockstar 2FA MFA phishing
Rockstar 2FA: The New Face of Phishing-as-a-Service and MFA Exploitation
January 08, 2025
Phishing-as-a-service (PhaaS) has turned phishing from a niche skill into a scalable, accessible business model. Rockstar 2FA, a new entrant in this market, takes things further by employing adversary-in-the-middle (AiTM) techniques to bypass multi-factor authentication…
Read More >
DocuSign API security phishing scam
DocuSign Impersonation Attacks Exploit Trust in Government Communications
January 02, 2025
DocuSign is the centerpiece of an alarming new wave of phishing scams. These schemes mimic communications from government agencies, such as state licensing boards and municipal offices, preying on the trust businesses place in these…
Read More >
Microsoft AD CVE-2024-49019
Privilege Escalation Time Bomb: Microsoft AD CS Vulnerability Puts Domains at Risk
December 17, 2024
A newly uncovered flaw in Microsoft’s Active Directory Certificate Services (AD CS), CVE-2024-49019, exposes enterprise domains to significant risk. By exploiting misconfigured certificate templates, attackers can escalate privileges to Domain Administrator, gaining unrestricted control over…
Read More >
Jet 2736962 1280
The Dream Job Scam: Iranian Hackers Target Aerospace Sector with Sophisticated Cyber Espionage
December 11, 2024
The promise of a dream job is a powerful lure. For employees in the aerospace and defense industries, it’s also become a dangerous one. An advanced cyber-espionage campaign, dubbed the Iranian "Dream Job" scam, has…
Read More >
identity fraud deepfake artificial intelligence
AI's Role in the Evolution of Identity Fraud
December 03, 2024
Identity fraud has entered a new era thanks to the rise of artificial. Once a manual, labor-intensive endeavor, identity fraud has evolved into a sophisticated, AI-enabled industry. According to the 2025 Identity Fraud Report, digital…
Read More >
FIDO Alliance passkeys passwords
From Frustration to Security: How Passkeys Are Transforming the Way We Log In
November 21, 2024
Passwords have been a cornerstone of digital authentication for decades, but their flaws are becoming increasingly apparent. According to the FIDO Alliance's latest report, "password pain" has led 42% of consumers to abandon purchases due…
Read More >
RaaS ransomware-as-a-service
RaaS Revolution: How Ransomware-as-a-Service is Escalating the Corporate Cybersecurity Arms Race
November 18, 2024
Ransomware has evolved from isolated, opportunistic attacks into a sprawling, professionalized industry. Today, cybercriminals have access to Ransomware-as-a-Service (RaaS) platforms that provide powerful tools and infrastructure, making it possible for even novice attackers to launch…
Read More >
cybersecurity training CybSafe
The Overconfidence Trap: How Skipped Cybersecurity Training is Leaving Businesses Exposed
November 08, 2024
Cybersecurity training access has increased for the first time in four years, yet a quarter of employees still skip it entirely—often due to overconfidence, according to a new global study. The findings come from CybSafe's…
Read More >
ConfusedPilot
ConfusedPilot Attack: The Alarming New Threat to AI Systems Like Microsoft Copilot
October 31, 2024
A novel attack method is making AI systems vulnerable to manipulation and misinformation, with significant implications for businesses relying on AI-driven tools. A newly discovered attack on AI systems lets anyone with access to add…
Read More >
cybersecurity skills gap
Critical Cyber Skills Shortage Exposes Businesses to New Threats: How AI and Upskilling Are the Frontline Defense
October 25, 2024
The cybersecurity landscape is evolving at breakneck speed, but there's a problem: the talent pool isn't keeping up. According to the 2023 ISC2 Cybersecurity Workforce Study, despite a global cybersecurity workforce of 5.5 million professionals,…
Read More >
AI phishing
AI is Supercharging Phishing: Why Traditional Defenses Can’t Keep Up
October 23, 2024
Cybersecurity experts are sounding the alarm: AI-driven phishing attacks are bypassing traditional defenses and duping even the most vigilant employees. A recent study reveals that over 60% of users fall victim to AI-generated phishing emails,…
Read More >
phishing AI deepfakes
From Phishing to Deepfakes: The New Face of Social Engineering
October 16, 2024
For decades, phishing attacks have been the bread and butter of cybercrime. Most of us have encountered the familiar signs—an email with a suspicious link or a message from a “bank” urgently asking for your…
Read More >
AI malware cybersecurity
AI-Enabled Malware: The Next Evolution in Cyber Threats
October 07, 2024
Artificial intelligence is transforming cybersecurity. Unfortunately, security professionals aren’t the only ones using it. Cybercriminals now employ AI-enabled malware, a new breed of cyberattacks that can adapt, learn, and strike faster. This emerging threat creates…
Read More >
Subscribe for the Latest News

"*" indicates required fields

Consent*
This field is for validation purposes and should be left unchanged.
Webinars
NO POSTS