• Michael Ansaldo
    Contributing Writer Security Buzz

    Michael Ansaldo is a veteran technology and business journalist with experience covering cybersecurity and a range of IT topics. His work has appeared in numerous publications including Wired, Enterprise.nxt, PCWorld, Computerworld, TechHive, GreenBiz, Mac|Life, and Executive Travel.

    Michael has also created and managed editorial and social media programs for leading global brands, such as HP, Samsung, and Verizon.

Articles by Michael Ansaldo
Exchange server vulnerabilities
Tens of Thousands of Exchange Servers Still Unpatched, Leaving Cloud Domains at Risk
August 22, 2025
In April, Microsoft disclosed CVE-2025-53786, a high-severity flaw in on-premises Exchange Server that can give attackers a direct route to compromising connected Microsoft cloud environments. Four months later, more than 29,000 Exchange servers exposed to…
Read More >
Menlo Security GenAI phishing deepfake risk
Menlo Security Reveals How GenAI Tools Are Reshaping Work—and Risk
August 16, 2025
Generative AI is reshaping how people work. In January 2025 alone, Menlo Security recorded 10.53 billion visits to AI-related websites. That’s a 50% jump from just 11 months earlier. And most of that activity—an estimated…
Read More >
Commvault Satori
Commvault’s Satori Cyber Deal: From Backup to AI Governance Pioneer
August 11, 2025
Commvault is making a strategic move to expand beyond its core backup and recovery roots. The company announced plans to acquire Satori Cyber, a data security platform focused on access control and governance. The deal…
Read More >
FIDO PoisonSeed
FIDO Isn’t Broken—But PoisonSeed Found a Way Around It
July 31, 2025
FIDO (Fast IDentity Online) security keys have earned their reputation as one of the strongest defenses against phishing and account takeover. Built on hardware-backed cryptography, they make it nearly impossible for attackers to steal credentials…
Read More >
ServiceNow SaaS security
Inside the ServiceNow Count(er) Strike Vulnerability
July 25, 2025
ServiceNow has become a backbone of enterprise IT, helping organizations manage everything from HR workflows to IT service delivery. Its cloud-based platform touches nearly every department in large organizations, making it a central hub for…
Read More >
Snyk Invariant Labs agentic AI
Snyk Acquires Invariant Labs to Defend Agentic AI Systems
July 17, 2025
Snyk has acquired Invariant Labs, an AI security research firm specializing in agentic systems, in a move to secure the next generation of intelligent software. Large language models (LLMs) and agentic AI architectures are rapidly…
Read More >
CISA KEV exploited vulnerabilities
CISA Flags Four Actively Exploited Vulnerabilities—Some Nearly a Decade Old
July 15, 2025
On July 7, the Cybersecurity and Infrastructure Security Agency (CISA) added four new entries to its Known Exploited Vulnerabilities (KEV) catalog. What stands out about the vulnerabilities isn’t the number, it’s the age. The oldest…
Read More >
Brother devices printers vulnerabilities
Critical Vulnerabilities in Brother Devices Expose Millions to Remote Attacks
July 06, 2025
Security researchers at Rapid7 have disclosed eight newly discovered vulnerabilities affecting more than 689 models of Brother devices, including printers, scanners, and label makers. While these kinds of vulnerabilities rarely grab headlines, the scope of…
Read More >
Salesforce low-code vulnerabilities
Salesforce Industry Cloud Vulnerabilities Highlight Hidden Dangers of Low-Code Platforms
June 24, 2025
Low-code platforms like Salesforce’s Industry Cloud promise to speed up digital transformation by making it easier for organizations to build and deploy apps. With tools like OmniStudio, employees can quickly create workflows and interfaces tailored…
Read More >
Qualys Linux core dumps
New Vulnerabilities in Linux Core Dump Handlers Expose Password Hashes
June 23, 2025
Security researchers at Qualys have discovered two new vulnerabilities in popular Linux core dump handlers that could let local attackers extract sensitive data—including password hashes—from crashed programs. The flaws, tracked as CVE-2025-5054 and CVE-2025-4598, affect…
Read More >
Securonix ThreatQuotient acquisition threat intelligence
Securonix Doubles Down on Threat Intelligence with ThreatQuotient Acquisition
June 16, 2025
Securonix has acquired threat intelligence company ThreatQuotient, a move aimed at strengthening its position as security threats grow more sophisticated and dynamic. The deal brings ThreatQuotient’s ThreatQ platform under the Securonix umbrella, expanding its ability…
Read More >
Kettering health ransomware
Ransomware Hits Ohio Hospital Network
June 09, 2025
A ransomware attack has knocked out key systems across Kettering Health, a nonprofit network of 14 hospitals and more than 120 outpatient facilities in western Ohio. The incident triggered a large-scale technology outage, forcing the…
Read More >
Zscaler Red Canary
Zscaler’s Red Canary Acquisition Signals Bold AI-Driven Future for Security Operations
June 06, 2025
Zscaler has announced plans to acquire Red Canary, a well-regarded managed detection and response (MDR) provider, in a deal valued at $675 million plus equity for employees. The acquisition is expected to close in August…
Read More >
Cellular 5114845 1280
TeleMessage Breach Undermines Secure Messaging for Government Officials
May 22, 2025
TeleMessage, a secure messaging app used by government officials, has suspended all operations following claims by hackers that they breached the company’s internal systems. According to a report by NBC News, the attackers say they…
Read More >
Proofpoint Hornetsecurity
Proofpoint Bets Big on the SMB Market with Hornetsecurity Acquisition
May 17, 2025
Proofpoint is making a billion-dollar bet on the small and midsize business market. The cybersecurity firm announced plans to acquire Hornetsecurity, a German-based provider of Microsoft 365 cloud security tools for SMBs and managed service…
Read More >
Binary 1187198 1280
Zero-Day Suspected in SAP NetWeaver Attacks
May 13, 2025
A newly uncovered attack is targeting SAP NetWeaver systems. According to researchers at ReliaQuest, threat actors are exploiting what appears to be a previously unknown vulnerability to quietly drop lightweight JSP web shells onto fully…
Read More >
Cybersecurity Information Sharing Act
Cybersecurity Sharing at a Crossroads as Senators Push to Extend Key Law
May 01, 2025
A key pillar of the nation’s cyber defense is on the clock. The Cybersecurity Information Sharing Act (CISA) of 2015 is set to expire in September, and lawmakers are scrambling to renew it before the…
Read More >
AbyssWorker EDR API
How Malicious Drivers Are Silencing Endpoint Security
April 03, 2025
Endpoint detection and response (EDR) tools are the first line of defense against malware on modern networks. They monitor system activity in real-time, flag suspicious behavior, and help security teams contain threats before they spread.…
Read More >
Subscribe for the Latest News
Webinars
Scaling Secure Development: Modern Code Security Without Slowing Innovation
Register Now
AI SOC Made Real: Autonomous Cloud Threat Ops at Machine Speed
Register Now
Banking on Identity with Practical Playbooks for Resilience
Register Now