• Jeff Pike
    Jeff Pike
    Contributing Writer Security Buzz

    After majoring in journalism at Northeastern University and working for The Boston Globe, Jeff Pike has collaborated with technical experts in the IT industry for more than 30 years. His technology expertise ranges from cybersecurity to networking, the cloud, and user productivity. Major industry players Jeff has written for include Microsoft, Cisco, Dell, AWS, and Google.

Articles by Jeff Pike
Anthropic self-replicating AI https://www.pexels.com/photo/pattern-from-colorful-pawns-6990337/
Anthropic AI Models May Self-Replicate by End of Year
November 02, 2026
Anthropic recently conducted an internal study during which security specialists stress-tested small open-weight AI models. The team discovered these models can already handle most of the steps to copy themselves onto unfamiliar hardware and run…
Read More >
Anthropic cyber verification program https://www.pexels.com/photo/3d-colorful-bricks-12651144/
Anthropic Expands Cyber Verification Program to Provide Advanced Capabilities to a Broader Set of Defenders
October 26, 2026
Anthropic recently announced it has expanded its Cyber Verification Program, which makes advanced cybersecurity capabilities and reduced blocking classifiers available to qualifying security professionals. The program now features three access tiers: Defense Access covers SOC,…
Read More >
SonicWall vulnerabilities https://www.pexels.com/photo/a-computer-generated-image-of-a-city-with-lights-18337612/
Chained Vulnerabilities Exploited in SonicWall Appliances
October 16, 2026
SonicWall recently confirmed the active exploitation of two chained vulnerabilities in its Secure Mobile Access (SMA) 1000 appliances. Attackers were already operating before any fix existed, as SonicWall discovered both flaws internally while investigating a…
Read More >
F5 fileless rootkit https://www.pexels.com/photo/vibrant-geometric-abstract-3d-blocks-design-34268918/
Fileless Rootkit Hides Malicious Script on F5 Servers
September 21, 2026
New research from Sophos X-Ops dismantles a core assumption behind years of web shell detection: that malicious code must eventually touch disk. That assumption went out the door when Sophos X-Ops discovered a Linux rootkit…
Read More >
NemoClaw NVIDIA AI agent https://www.pexels.com/photo/close-up-shot-of-lobster-claw-8352775/
Just One Website Visit Silently Hijacks NVIDIA AI Agent
September 13, 2026
It wasn’t phishing or a stolen credential. It was just a browser tab opened by a researcher. That’s all it took to seize control of a sandboxed NVIDIA AI coding agent. Recently disclosed by Oasis…
Read More >
Google post quantum cryptography PQC https://www.pexels.com/photo/visual-representation-of-magnetic-field-lines-38032287/
Google Cloud Maps Migration for Post-Quantum Cryptography
August 25, 2026
Securing infrastructure and services against the cryptographically relevant quantum computer of the future presents a major concern for the IT industry. Every encrypted connection will present a liability. The nation-state adversaries and organized threat actors…
Read More >
Pathlock AI agents https://www.pexels.com/photo/data-codes-through-eyeglasses-577585/
AI Agents Approving Transactions Enterprises Can't See
August 14, 2026
Enterprise AI has quietly crossed a threshold. What began as a productivity layer for summarizing data and drafting reports has evolved into a class of digital workers with real authority, according to new research from…
Read More >
PromptFiction Claude https://www.pexels.com/photo/3d-render-graphics-12939554/
PromptFiction Turns Claude Feature Into Attack Vector
August 04, 2026
The debate continues over whether hackers can trick AI agents into betraying users. Meanwhile, Oasis Security recently announced an unsettling finding. New research on the Claude Desktop agent not only found that a convenience feature…
Read More >
Fortiguard AsyncRAT malware https://www.pexels.com/photo/close-up-shot-of-a-person-using-a-laptop-5475755/
Malware Campaign Uses AI Hype to Spread AsyncRAT
July 14, 2026
A new FortiGuard Labs investigation reveals a malware campaign built entirely around a contradiction. The campaign uses the promise of AI education to deliver an Asynchronous Remote Access Trojan (AsyncRAT)—while also bearing the unmistakable fingerprints…
Read More >
FTC bank fraud scams https://www.pexels.com/photo/1-us-dollar-bill-163056/
Fake Banks and Phantom Agencies Draining Billions from U.S. Bank Accounts
July 01, 2026
New Federal Trade Commission (FTC) data shows how imposter scams have become the most reported form of fraud in the U.S. Financial losses nearly tripled from 2020 to 2025, and last year, Americans lost $3.5…
Read More >
executive order AI https://www.pexels.com/photo/usa-presidential-office-4338046/
Trump Executive Order Creates New Security Bargain Between Government and AI Industry
June 17, 2026
President Trump's June 2nd executive order on artificial intelligence marks a meaningful pivot. Previously, his administration maintained a hands-off posture toward the AI industry. While this order does not yet impose regulatory mandates, it constructs…
Read More >
Twill Typhoon Darktrace https://www.pexels.com/photo/an-abstract-artwork-5870930/
Twill Typhoon Modular Backdoor Rewrites Rules of Detection
June 01, 2026
Chinese-nexus threat actors have long demonstrated patience and operational sophistication. But newly-released research by Darktrace marks something more consequential than another well-executed intrusion. A Twill Typhoon attack documents an adversary that has engineered tooling to…
Read More >
PocketOS Cursor agent database https://www.pexels.com/photo/a-man-in-red-shirt-covering-his-face-3760043/
When Agents Decide to "Fix" It: The Governance Gap in Autonomous AI
May 19, 2026
All it took was the time to read this sentence, or about nine seconds. An AI coding agent wiped out months of customer data essential to the PocketOS SaaS platform and its car rental clients.…
Read More >
Nexcorium DVR https://www.pexels.com/photo/camera-de-surveillance-25391056/
DVRs Now Turning Into DDoS Attack Infrastructures
May 04, 2026
The IoT attack surface has never been larger—or more neglected. This trend was captured by FortiGuard Labs, which tracked a campaign in which a Mirai-variant botnet (dubbed Nexcorium) exploits CVE-2024-3721. The command injection vulnerability found…
Read More >
Ivanti vulnerability exploit https://www.pexels.com/photo/black-metal-padlock-706500/
Ivanti Exploitation Underscores the Fragility of Mobile Infrastructures
April 18, 2026
The active exploitation (CVE-2026-1340) of the Ivanti Endpoint Manager Mobile solution lays bare an uncomfortable irony at the heart of enterprise security: The platforms organizations deploy to govern and protect mobile devices have become high-value…
Read More >
Sysdig Langflow AI
AI Pipeline Code Flaw Exposes Patch Cycle Times
April 03, 2026
The cybersecurity community has long operated under an implicit assumption: When security alert organizations disclose a vulnerability, defenders have at least a few days—perhaps weeks—to assess, test, and deploy a patch before attackers catch up.…
Read More >
Salesforce ShinyHunters
Cybercrime Group Targets Salesforce Misconfigurations
March 23, 2026
A renewed cyberattack campaign on Salesforce by the cybercrime group ShinyHunters highlights a key consideration for security teams. Simple configuration mistakes can expose enterprise data—at scale. As this recent campaign unfolded, Salesforce warned customers about…
Read More >
Pexels Duncanoluwaseun 226232
Open-Source Risk Accelerating Faster Than Governance
March 09, 2026
The latest Open Source Security and Risk Analysis (OSSRA) report issued by Black Duck reveals a sharp escalation in software supply chain risk. Driven by explosive dependency growth, duplicated components, and AI-generated code, open-source vulnerabilities…
Read More >
Subscribe for the Latest News
Webinars
What Actually Compromised Organizations in 2026? Everyone was watching AI. Attackers were using the basics.
Register Now
Network Security in the AI Era: Limit Lateral Movement by Closing Policy Gaps and Governing Change
Register Now
Resilience Roadmap: Recovering from Modern Attacks
Register Now