• PJ Bradley
    Contributing Writer Security Buzz

    PJ Bradley is a writer from southeast Michigan with a Bachelor's degree in history from Oakland University. She has a background in school-age care and experience tutoring college history students.

    Currently, PJ is focused on building a career in higher education while freelancing as a writer. A lover of literature and art, she dedicates much of her free time to creative writing and reading.

Articles by PJ Bradley
OpenAI Operator AI agent cyber exploit
AI Agents on Autopilot: OpenAI’s Operator Can Be Exploited for Cyberattacks
March 20, 2025
Artificial intelligence tools have been at the forefront of tech news lately, with organizations and individuals increasingly using them for a wide range of purposes. This surge in popularity has both been stoked by and…
Read More >
March Madness AI hackers cyber threat
March Madness, Cyber Sadness: How AI-Powered Hackers Are Scoring Big Against Businesses
March 18, 2025
With the start of the NCAA March Madness Tournament season, the social and cultural phenomenon has a presence in many workplaces. Up to 80 million tournament brackets are filled out each year, and many employees…
Read More >
Broadcom VMware vulnerability
Exploited Zero-Day Vulnerabilities in VMware Products
March 17, 2025
Global tech leader Broadcom published a critical security advisory on March 4th, 2025, regarding three new zero-day vulnerabilities in VMware ESXi, Workstation, Fusion, and other products. With varying levels of severity, the vulnerabilities can enable…
Read More >
Silk Typhoon China cloud apps
Silk Typhoon Targets IT Infrastructure and Cloud Apps
March 11, 2025
The threat group known as Silk Typhoon has been active since the 2021 exploitation of zero-day vulnerabilities in Microsoft Exchange servers. The group has a diverse attack history, partly as a result of their opportunistic…
Read More >
Ghost ransomware
Ghost Ransomware Strikes Globally
March 07, 2025
The United States Cybersecurity and Infrastructure Security Agency (CISA) and Federal Bureau of Investigation (FBI), in partnership with the Multi-State Information Sharing and Analysis Center (MS-ISAC), recently released a joint Cybersecurity Advisory warning of a…
Read More >
Open Source Project Security Baseline OSPS
Open Source Project Security Baseline Defines Minimum Security Requirements for Open Source Software
March 05, 2025
Open source software (OSS) forms the foundation of many steps in the software supply chain, so securing it is essential to safeguard vast and diverse networks and data. The Open Source Security Foundation (OpenSSF) is…
Read More >
API security
How a Single Vulnerability Exposed Millions of Airline Customers
February 26, 2025
In an overwhelmingly digital society, application programming interfaces (APIs) are essential for a wide range of online processes, from financial transactions to logging in on third-party sites using a connected platform. The very accessibility that…
Read More >
macOS infostealers
macOS Malware Surge: Infostealers Drive a 101% Spike in Attacks
February 20, 2025
Malware attacks on macOS systems have surged recently, with malicious activity especially focused on infostealers. Palo Alto Networks’ Unit 42 found that infostealers make up the largest part of macOS malware introduced in 2024. Some…
Read More >
ASP.Net machine keys
The Hidden Dangers of Publicly Disclosed ASP.NET Machine Keys
February 18, 2025
Microsoft has recently issued a notice warning of code injection attacks by an unknown threat actor taking advantage of publicly disclosed ASP.NET machine keys. These are cryptographic keys for encrypting and validating data in ASP.NET…
Read More >
Sneaky 2FA phishing kit
The Rise of Phishing-as-a-Service Targeting Microsoft 365 Accounts
February 14, 2025
Cybersecurity firm Sekoia recently spotted a new phishing kit using an Adversary-in-the-Middle (AitM) technique to target Microsoft 365 accounts. Discovered in December 2024, the Sneaky 2FA phishing kit is a sophisticated phishing-as-a-service (PhaaS) attack from…
Read More >
Homebrew AmosStealer malvertising
Homebrew Targeted in Malvertising Campaign Distributing AmosStealer Malware
February 10, 2025
The free, open-source software package management system Homebrew is a popular tool for simplifying the process of installing software on macOS and Linux systems. It is entirely run by volunteers and often benefits from user…
Read More >
PDF mishing mobile phishing
Cybercriminals Exploit Vulnerabilities in Mobile Phishing Campaign
February 07, 2025
Phishing has been a tried-and-true cyberattack tactic for decades, as it allows threat actors to adapt and expand their methods to take advantage of different technologies and evade many cybersecurity measures. Recent years have seen…
Read More >
CYE Solvo cloud security
CYE's Strategic Acquisition of Solvo: A Leap Forward in Multi-Cloud Security Management
February 01, 2025
Founded in 2012, CYE is a trusted cybersecurity partner to organizations across industries and around the globe. As a leader in cyber exposure management, CYE aims to improve customers’ cybersecurity posture and reduce risk. The…
Read More >
FCC cybersecurity telecommunications
FCC Proposes Cybersecurity Mandate to Combat Advanced Threats
January 22, 2025
In response to a recent rise in foreign and state-sponsored attacks threatening critical communications infrastructure, FCC Chairwoman Jessica Rosenworcel has proposed a new mandate to protect communications systems. Technological advances and geopolitical conflict contribute to…
Read More >
China-based threat actors
Inside the Four-Month Espionage Campaign by Suspected Chinese Threat Actors
January 16, 2025
In mid-2024, a large U.S. organization with sizeable operations in China was targeted by a persistent attack thought to originate from Chinese actors. The reported intrusion lasted four months, from April to August, with the…
Read More >
CVE-2014-2120 Cisco ASA vulnerability
Cisco ASA Vulnerability Resurfaces as Active Threat
January 07, 2025
A security vulnerability from ten years ago has recently been exploited in the wild again: CVE-2014-2120, first recognized in March 2014, is a vulnerability in Cisco Adaptive Security Appliance’s (ASA) WebVPN login page. In November…
Read More >
SLED cyber resilience
US SLED Leaders Struggle to Find Balance Between Innovation and Risk
December 30, 2024
Managed security service provider LevelBlue has released the 2024 LevelBlue Futures Report: Cyber Resilience in U.S. State and Local Government and Higher Education (SLED), exploring the state of cyber resilience in U.S. SLED institutions. The…
Read More >
Finastra data security breach
Finastra's Secure File Transfer Platform Breached: 400GB of Data at Risk
December 28, 2024
Finastra is a leading financial technology firm that serves over 8,000 institutions across the globe, providing software and services to 45 of the world’s top 50 banks. Reporting $1.9 billion in revenue last year, Finastra…
Read More >
Subscribe for the Latest News
Webinars
Scaling Secure Development: Modern Code Security Without Slowing Innovation
Register Now
AI SOC Made Real: Autonomous Cloud Threat Ops at Machine Speed
Register Now
Banking on Identity with Practical Playbooks for Resilience
Register Now