• Michael Ansaldo
    Contributing Writer Security Buzz

    Michael Ansaldo is a veteran technology and business journalist with experience covering cybersecurity and a range of IT topics. His work has appeared in numerous publications including Wired, Enterprise.nxt, PCWorld, Computerworld, TechHive, GreenBiz, Mac|Life, and Executive Travel.

    Michael has also created and managed editorial and social media programs for leading global brands, such as HP, Samsung, and Verizon.

Articles by Michael Ansaldo
Open Secure AI Alliance NVIDIA https://www.pexels.com/photo/hands-of-team-standing-together-6203631/
Open Secure AI Alliance Targets Security Risks Exposed by Hugging Face Breach
August 21, 2026
NVIDIA says it and more than 100 organizations, including Microsoft, IBM, CrowdStrike, Dell Technologies, Palo Alto Networks, HPE, Red Hat, and Hugging Face, have formed the Open Secure AI Alliance to develop and share open…
Read More >
Cosmos DB CosmosEscape https://www.pexels.com/photo/view-of-a-galaxy-20881655/
CosmosEscape Flaw Could Have Exposed Every Azure Cosmos DB Account
August 12, 2026
A vulnerability chain in Microsoft Azure Cosmos DB could have allowed an attacker to read or modify customer databases across the service, according to research published by Wiz. Dubbed CosmosEscape, the chain began with a…
Read More >
Threatdown AI security https://www.pexels.com/photo/crop-cyber-spy-hacking-system-while-typing-on-laptop-5935794/
Criminal AI Is Easier to Find—and Harder to Monitor
August 07, 2026
In its new Cybercrime in the Age of AI report, ThreatDown points to a January 2026 attack on a Mexican municipal water utility as evidence that AI can help attackers work faster and beyond their…
Read More >
AvePoint State of AI report https://www.pexels.com/photo/abstract-digital-circuit-with-futuristic-lighting-30547571/
AvePoint Report Finds AI Adoption Outpacing Enterprise Oversight
July 27, 2026
Organizations are rapidly expanding the use of AI agents even as their ability to monitor and govern the technology falls behind, according to AvePoint’s 2026 State of AI report. The study surveyed 750 enterprise leaders…
Read More >
cryptomining AI gateways https://www.pexels.com/photo/close-up-shot-of-a-bitcoin-buried-in-the-ground-5980921/
Cryptomining on AI Gateway Shows Cloud Risks Moving Into AI Stack
July 21, 2026
Darktrace researchers said they observed cryptomining activity on an AWS EC2 instance tied to Amazon Bedrock access, highlighting how familiar cloud security risks are extending into enterprise AI infrastructure. The June 12 activity involved an…
Read More >
OT cybersecurity Fortinet https://www.pexels.com/photo/ageing-plant-357440/
OT Security Ratings Fall as Visibility Improves
July 13, 2026
Industrial organizations may be getting a clearer view of their cybersecurity risk, and the picture is not as reassuring as many previously believed. Fortinet’s 2026 State of Operational Technology and Cybersecurity Report found a sharp…
Read More >
Five Eyes Chinese intelligence job recruiters https://www.pexels.com/photo/chinese-national-flag-waving-against-clear-blue-sky-32469234/
Five Eyes Warns Chinese Intelligence Is Using Job Platforms to Recruit Sources
July 06, 2026
Chinese military intelligence operatives are posing as online recruiters to reach people with sensitive government or military knowledge, according to a joint warning from the Five Eyes intelligence-sharing alliance. The joint advisory from the United…
Read More >
Rokarolla Android Zimperium https://www.pexels.com/photo/young-businessman-using-phone-and-credit-card-30535634/
Rokarolla Malware Can Block Alerts and Manipulate Android Banking Sessions
June 30, 2026
Zimperium researchers have identified an Android banking trojan that targets 217 banking and cryptocurrency apps and can help attackers manipulate infected phones during fraud attempts. The malware, called Rokarolla, is distributed through malicious websites that…
Read More >
Dataminr Handala water breach https://www.pexels.com/photo/water-flowing-from-pipes-17882783/
Handala’s Cal Water Breach Claim Exposes Hidden Risk in Utility Networks
June 20, 2026
Threat intelligence firm Dataminr reported that Handala, an Iran-linked threat actor, claimed it breached California Water Service and published stolen data from the utility. The evidence released so far, however, points to a narrower compromise…
Read More >
FIFA World Cup 2026 phishing https://www.pexels.com/photo/close-up-of-official-argentine-soccer-ball-on-field-30986212/
Cybercriminals Targeted the 2026 FIFA World Cup Before Play Even Began
June 15, 2026
Cybercriminals began building infrastructure to target the 2026 FIFA World Cup well before the first match was played, according to a new report from Fortinet’s FortiGuard Labs. The company said it tracked FIFA-themed cyber activity…
Read More >
Zscaler Symmetry AI security https://www.pexels.com/photo/abstract-blue-geometric-3d-wallpaper-design-28428591/
Zscaler’s Symmetry Deal Targets AI’s Growing Access-Control Problem
June 12, 2026
Zscaler has announced plans to acquire Symmetry Systems, a move aimed at giving enterprises better visibility into how AI agents, service accounts, and other non-human identities access applications and data. The proposed acquisition would add…
Read More >
Cyera Genie AI https://www.pexels.com/photo/brass-oil-lamp-on-the-table-20122586/
Cyera’s $50M Genie Deal Signals the Rush for AI Security Startups
June 04, 2026
Cyera has acquired Genie Security, a five-person Israeli cybersecurity startup founded only months ago, in a deal reportedly worth about $50 million, underscoring how quickly larger security companies are moving to buy young teams building…
Read More >
Claude Code credential stealer https://www.pexels.com/photo/illuminated-keyboard-with-digital-code-display-37694202/
Fake Claude Code Page Turns Trusted Developer Workflow Into Credential-Stealing Attack
May 26, 2026
A fake Claude Code installation page promoted through sponsored search results delivered an undocumented credential stealer by mimicking a familiar developer workflow, according to new research from Ontinue. Victims looking for Claude Code installation instructions…
Read More >
SAP supply chain npm https://www.pexels.com/photo/close-up-of-codes-on-a-computer-screen-4976712/
SAP npm Compromise Exposes Credential Risk in Build Pipelines
May 15, 2026
Malicious versions of four SAP-related npm packages exposed developer machines and CI/CD systems to possible credential theft. Rather than targeting production SAP servers directly, the attack reached into the build pipeline used to create and…
Read More >
taxes phishing IRS https://www.pexels.com/photo/close-up-shot-of-a-document-through-a-magnifying-glass-7821673/
Tax Phishing Is Moving From Personal Inboxes to the Workplace
May 12, 2026
Tax phishing has long been easy to dismiss as a seasonal consumer scam: fake IRS emails, refund bait, audit threats, and other lures aimed at people anxious about filing deadlines. New research from Hoxhunt suggests…
Read More >
Okta vishing LevelBlue https://www.pexels.com/photo/gold-condenser-microphone-near-laptop-computer-755416/
Okta Vishing Attacks Put Identity Help Desks in the Crosshairs
May 05, 2026
A new report from LevelBlue’s SpiderLabs team warns that threat actors are increasingly using voice phishing, or vishing, to manipulate Okta authentication processes, including MFA resets and new-device enrollment. Rather than relying only on malicious…
Read More >
UNC6783 social engineering cybersecurity https://www.pexels.com/photo/close-up-of-hands-typing-on-laptop-keyboard-indoors-36175215/
UNC6783 Is Turning Enterprise Support Channels into Extortion Entry Points
April 24, 2026
Google Threat Intelligence Group (GTIG) says a financially motivated threat cluster it tracks as UNC6783 is targeting business process outsourcers, help desks, and other enterprise support teams as an entry point into larger organizations. The…
Read More >
Modbus OT operational technology critical infrastructure https://www.pexels.com/photo/high-voltage-power-lines-at-sunset-28912010/
How a 40-Year-Old Protocol Is Leaving Critical Infrastructure Exposed
April 20, 2026
A decades-old industrial communications protocol still used to connect controllers, sensors, and monitoring equipment is leaving some critical infrastructure systems exposed online. Researchers at Comparitech said they identified 179 likely real industrial control system devices…
Read More >
Subscribe for the Latest News
Webinars
Managed, Secure, and AI-Ready: Why the Future of Work Starts in the Browser
Register Now
Stop AI-Fueled Impersonation Before It Leads to Account Takeover
Register Now
Hypervisor Freedom. Zero Cyber Risk: Unified Protection for Modern Infrastructure
Register Now