• Michael Ansaldo
    Contributing Writer Security Buzz

    Michael Ansaldo is a veteran technology and business journalist with experience covering cybersecurity and a range of IT topics. His work has appeared in numerous publications including Wired, Enterprise.nxt, PCWorld, Computerworld, TechHive, GreenBiz, Mac|Life, and Executive Travel.

    Michael has also created and managed editorial and social media programs for leading global brands, such as HP, Samsung, and Verizon.

Articles by Michael Ansaldo
AbyssWorker EDR API
How Malicious Drivers Are Silencing Endpoint Security
April 03, 2025
Endpoint detection and response (EDR) tools are the first line of defense against malware on modern networks. They monitor system activity in real-time, flag suspicious behavior, and help security teams contain threats before they spread.…
Read More >
KoSpy APT37 North Korea
KoSpy Unmasked: North Korea’s APT37 Expands Mobile Surveillance Operations
April 02, 2025
North Korea’s state-sponsored hackers have added a powerful new tool to their cyber arsenal. According to researchers at Lookout, a newly discovered Android spyware strain called KoSpy is actively being used to spy on mobile…
Read More >
AI malicious code DeepSeek Tenable
Tenable Reveals How DeepSeek Can Write Keyloggers and Ransomware (With a Little Help)
March 24, 2025
Tenable’s latest research highlights a growing concern in cybersecurity: the role of AI in developing malicious code. Researchers tested DeepSeek, a generative AI model, to see whether it could create malware. With the right prompts—specifically…
Read More >
Go ecosystem malware typosquatting
Typosquatting in the Go Ecosystem
March 14, 2025
Software supply chain attacks have become a growing concern for developers and security teams alike. Instead of targeting individual systems, attackers compromise widely used components, allowing them to spread malware through trusted software channels. One…
Read More >
open source OSSRA
Report Reveals Open Source Security Crisis
March 06, 2025
Open-source software (OSS) has become the backbone of modern applications, driving innovation across industries from finance to manufacturing. However, the latest Open Source Security and Risk Analysis (OSSRA) report from Black Duck reveals a sobering…
Read More >
VPN brute force DDoS
2.8 Million IPs Target VPN and Security Devices
February 24, 2025
A massive brute force attack is hammering VPNs and security appliances, with attackers using nearly 3 million IP addresses to flood these devices with credential-guessing attempts. According to reports, the attack has been ongoing for…
Read More >
AttackIQ breach simulation security posture management DeepSurface
AttackIQ Acquires DeepSurface to Expand Cyber Threat Exposure Management Capabilities
February 18, 2025
AttackIQ has built its reputation as a leader in Breach and Attack Simulation (BAS), helping organizations test and validate their security controls against known threats. Its platform enables security teams to assess their defenses, identify…
Read More >
ransomware agentic AI Malwarebytes
AI, Ransomware, and the Escalating Cybersecurity Battlefield in 2025
February 07, 2025
Cybersecurity in 2025 is caught in a tug-of-war between innovation and exploitation. The rise of agentic AI—AI that can operate autonomously, make decisions, and interact with systems—has reshaped both cyber defense and cybercrime. Security teams…
Read More >
Sophos mobile access appliance
Critical Flaw Puts Secure Mobile Access Appliances at Risk
February 04, 2025
SonicWall has issued an urgent warning about a newly discovered zero-day vulnerability, CVE-2025-23006, in its Secure Mobile Access (SMA) 1000 Series appliances. This flaw leaves affected devices open to full system compromise, enabling attackers to…
Read More >
Web 8989999 1280
The Expanding Reach of Chinese Cyber Espionage in U.S. Telecommunications
January 21, 2025
A recent wave of cyberespionage has exposed the vulnerabilities of U.S. telecommunications networks. Dubbed "Salt Typhoon" by Microsoft, this campaign, attributed to Chinese hackers, infiltrated at least eight major telecommunications companies, including AT&T and Verizon.…
Read More >
Cloak ransomware Halcyon
Cloak Ransomware: The Rising Threat with Advanced Disruption Techniques
January 15, 2025
The Cloak ransomware group emerged in late 2022 and has quickly become a major cybersecurity threat. By targeting small- to medium-sized businesses (SMBs) across Europe and Asia, Cloak has made a significant impact with its…
Read More >
Rockstar 2FA MFA phishing
Rockstar 2FA: The New Face of Phishing-as-a-Service and MFA Exploitation
January 08, 2025
Phishing-as-a-service (PhaaS) has turned phishing from a niche skill into a scalable, accessible business model. Rockstar 2FA, a new entrant in this market, takes things further by employing adversary-in-the-middle (AiTM) techniques to bypass multi-factor authentication…
Read More >
DocuSign API security phishing scam
DocuSign Impersonation Attacks Exploit Trust in Government Communications
January 02, 2025
DocuSign is the centerpiece of an alarming new wave of phishing scams. These schemes mimic communications from government agencies, such as state licensing boards and municipal offices, preying on the trust businesses place in these…
Read More >
Microsoft AD CVE-2024-49019
Privilege Escalation Time Bomb: Microsoft AD CS Vulnerability Puts Domains at Risk
December 17, 2024
A newly uncovered flaw in Microsoft’s Active Directory Certificate Services (AD CS), CVE-2024-49019, exposes enterprise domains to significant risk. By exploiting misconfigured certificate templates, attackers can escalate privileges to Domain Administrator, gaining unrestricted control over…
Read More >
Jet 2736962 1280
The Dream Job Scam: Iranian Hackers Target Aerospace Sector with Sophisticated Cyber Espionage
December 11, 2024
The promise of a dream job is a powerful lure. For employees in the aerospace and defense industries, it’s also become a dangerous one. An advanced cyber-espionage campaign, dubbed the Iranian "Dream Job" scam, has…
Read More >
identity fraud deepfake artificial intelligence
AI's Role in the Evolution of Identity Fraud
December 03, 2024
Identity fraud has entered a new era thanks to the rise of artificial. Once a manual, labor-intensive endeavor, identity fraud has evolved into a sophisticated, AI-enabled industry. According to the 2025 Identity Fraud Report, digital…
Read More >
FIDO Alliance passkeys passwords
From Frustration to Security: How Passkeys Are Transforming the Way We Log In
November 21, 2024
Passwords have been a cornerstone of digital authentication for decades, but their flaws are becoming increasingly apparent. According to the FIDO Alliance's latest report, "password pain" has led 42% of consumers to abandon purchases due…
Read More >
RaaS ransomware-as-a-service
RaaS Revolution: How Ransomware-as-a-Service is Escalating the Corporate Cybersecurity Arms Race
November 18, 2024
Ransomware has evolved from isolated, opportunistic attacks into a sprawling, professionalized industry. Today, cybercriminals have access to Ransomware-as-a-Service (RaaS) platforms that provide powerful tools and infrastructure, making it possible for even novice attackers to launch…
Read More >
Subscribe for the Latest News

"*" indicates required fields

This field is for validation purposes and should be left unchanged.
Consent*
Webinars
2026 Security Predictions
Register Now
Fast, Secure, Resilient: Modernizing Application Security at Scale
Register Now
Secure Smarter: AI Security at Scale with Shopify, AWS and HackerOne
Register Now