• Michael Ansaldo
    Contributing Writer Security Buzz

    Michael Ansaldo is a veteran technology and business journalist with experience covering cybersecurity and a range of IT topics. His work has appeared in numerous publications including Wired, Enterprise.nxt, PCWorld, Computerworld, TechHive, GreenBiz, Mac|Life, and Executive Travel.

    Michael has also created and managed editorial and social media programs for leading global brands, such as HP, Samsung, and Verizon.

Articles by Michael Ansaldo
Brother devices printers vulnerabilities
Critical Vulnerabilities in Brother Devices Expose Millions to Remote Attacks
July 06, 2025
Security researchers at Rapid7 have disclosed eight newly discovered vulnerabilities affecting more than 689 models of Brother devices, including printers, scanners, and label makers. While these kinds of vulnerabilities rarely grab headlines, the scope of…
Read More >
Salesforce low-code vulnerabilities
Salesforce Industry Cloud Vulnerabilities Highlight Hidden Dangers of Low-Code Platforms
June 24, 2025
Low-code platforms like Salesforce’s Industry Cloud promise to speed up digital transformation by making it easier for organizations to build and deploy apps. With tools like OmniStudio, employees can quickly create workflows and interfaces tailored…
Read More >
Qualys Linux core dumps
New Vulnerabilities in Linux Core Dump Handlers Expose Password Hashes
June 23, 2025
Security researchers at Qualys have discovered two new vulnerabilities in popular Linux core dump handlers that could let local attackers extract sensitive data—including password hashes—from crashed programs. The flaws, tracked as CVE-2025-5054 and CVE-2025-4598, affect…
Read More >
Securonix ThreatQuotient acquisition threat intelligence
Securonix Doubles Down on Threat Intelligence with ThreatQuotient Acquisition
June 16, 2025
Securonix has acquired threat intelligence company ThreatQuotient, a move aimed at strengthening its position as security threats grow more sophisticated and dynamic. The deal brings ThreatQuotient’s ThreatQ platform under the Securonix umbrella, expanding its ability…
Read More >
Kettering health ransomware
Ransomware Hits Ohio Hospital Network
June 09, 2025
A ransomware attack has knocked out key systems across Kettering Health, a nonprofit network of 14 hospitals and more than 120 outpatient facilities in western Ohio. The incident triggered a large-scale technology outage, forcing the…
Read More >
Zscaler Red Canary
Zscaler’s Red Canary Acquisition Signals Bold AI-Driven Future for Security Operations
June 06, 2025
Zscaler has announced plans to acquire Red Canary, a well-regarded managed detection and response (MDR) provider, in a deal valued at $675 million plus equity for employees. The acquisition is expected to close in August…
Read More >
Cellular 5114845 1280
TeleMessage Breach Undermines Secure Messaging for Government Officials
May 22, 2025
TeleMessage, a secure messaging app used by government officials, has suspended all operations following claims by hackers that they breached the company’s internal systems. According to a report by NBC News, the attackers say they…
Read More >
Proofpoint Hornetsecurity
Proofpoint Bets Big on the SMB Market with Hornetsecurity Acquisition
May 17, 2025
Proofpoint is making a billion-dollar bet on the small and midsize business market. The cybersecurity firm announced plans to acquire Hornetsecurity, a German-based provider of Microsoft 365 cloud security tools for SMBs and managed service…
Read More >
Binary 1187198 1280
Zero-Day Suspected in SAP NetWeaver Attacks
May 13, 2025
A newly uncovered attack is targeting SAP NetWeaver systems. According to researchers at ReliaQuest, threat actors are exploiting what appears to be a previously unknown vulnerability to quietly drop lightweight JSP web shells onto fully…
Read More >
Cybersecurity Information Sharing Act
Cybersecurity Sharing at a Crossroads as Senators Push to Extend Key Law
May 01, 2025
A key pillar of the nation’s cyber defense is on the clock. The Cybersecurity Information Sharing Act (CISA) of 2015 is set to expire in September, and lawmakers are scrambling to renew it before the…
Read More >
AbyssWorker EDR API
How Malicious Drivers Are Silencing Endpoint Security
April 03, 2025
Endpoint detection and response (EDR) tools are the first line of defense against malware on modern networks. They monitor system activity in real-time, flag suspicious behavior, and help security teams contain threats before they spread.…
Read More >
KoSpy APT37 North Korea
KoSpy Unmasked: North Korea’s APT37 Expands Mobile Surveillance Operations
April 02, 2025
North Korea’s state-sponsored hackers have added a powerful new tool to their cyber arsenal. According to researchers at Lookout, a newly discovered Android spyware strain called KoSpy is actively being used to spy on mobile…
Read More >
AI malicious code DeepSeek Tenable
Tenable Reveals How DeepSeek Can Write Keyloggers and Ransomware (With a Little Help)
March 24, 2025
Tenable’s latest research highlights a growing concern in cybersecurity: the role of AI in developing malicious code. Researchers tested DeepSeek, a generative AI model, to see whether it could create malware. With the right prompts—specifically…
Read More >
Go ecosystem malware typosquatting
Typosquatting in the Go Ecosystem
March 14, 2025
Software supply chain attacks have become a growing concern for developers and security teams alike. Instead of targeting individual systems, attackers compromise widely used components, allowing them to spread malware through trusted software channels. One…
Read More >
open source OSSRA
Report Reveals Open Source Security Crisis
March 06, 2025
Open-source software (OSS) has become the backbone of modern applications, driving innovation across industries from finance to manufacturing. However, the latest Open Source Security and Risk Analysis (OSSRA) report from Black Duck reveals a sobering…
Read More >
VPN brute force DDoS
2.8 Million IPs Target VPN and Security Devices
February 24, 2025
A massive brute force attack is hammering VPNs and security appliances, with attackers using nearly 3 million IP addresses to flood these devices with credential-guessing attempts. According to reports, the attack has been ongoing for…
Read More >
AttackIQ breach simulation security posture management DeepSurface
AttackIQ Acquires DeepSurface to Expand Cyber Threat Exposure Management Capabilities
February 18, 2025
AttackIQ has built its reputation as a leader in Breach and Attack Simulation (BAS), helping organizations test and validate their security controls against known threats. Its platform enables security teams to assess their defenses, identify…
Read More >
ransomware agentic AI Malwarebytes
AI, Ransomware, and the Escalating Cybersecurity Battlefield in 2025
February 07, 2025
Cybersecurity in 2025 is caught in a tug-of-war between innovation and exploitation. The rise of agentic AI—AI that can operate autonomously, make decisions, and interact with systems—has reshaped both cyber defense and cybercrime. Security teams…
Read More >
Subscribe for the Latest News
Webinars
Surviving Cloud Attacks: A Practical Blueprint for Cloud Resilience
Register Now
AI Sprawl: The Untested Attack Surface
Register Now
Holistic Visibility and Recovery for Cyber Resilience
Register Now