• PJ Bradley
    PJ Bradley
    Contributing Writer Security Buzz

    PJ Bradley is a writer from southeast Michigan with a Bachelor's degree in history from Oakland University. She has a background in school-age care and experience tutoring college history students.

    Currently, PJ is focused on building a career in higher education while freelancing as a writer. A lover of literature and art, she dedicates much of her free time to creative writing and reading.

Articles by PJ Bradley
FBI 630 million credentials identity security passwords
A Wake-Up Call on Credential Theft
December 31, 2025
A recent body of 630 million compromised credentials has been recovered by the FBI from multiple devices belonging to one suspect. This is a rare occurrence even by modern standards. While the scale of cybercrime…
Read More >
email security email bombing
Email Is Still the Front Door—Attackers Are Just Using More Rooms Now
December 30, 2025
In recent years, a common belief has arisen that email is becoming less relevant as an attack vector. With attackers increasingly favoring tactics leveraging AI, cloud-native applications, and social engineering via voice and video, the…
Read More >
agentic browsers security Gartner
Agentic Browsers Promise Productivity—But Gartner Says They’re Too Dangerous to Touch
December 29, 2025
One of the most prominent current trends in the AI explosion of recent years is the rapid rise of agentic browsers like Arc, Opera AI, and others, positioning themselves as “AI-powered productivity engines.” These tools…
Read More >
GeminiJack AI vulnerability security
What GeminiJack Reveals About Enterprise Risk
December 23, 2025
Recent years have seen not only an explosion of AI popularity and capabilities, but a shift in usage, from AI as a productivity tool to AI as an interpreter that sits on top of Gmail,…
Read More >
EtherRAT React2Shell North Korea DPRK
EtherRAT Signals A Strategic Shift From DPRK Hackers
December 18, 2025
A critical vulnerability in React2Shell, tracked as CVE-2025-55182, was publicly disclosed on December 3rd, 2025, and a highly evolved implant appeared in the wild only two days later. This rapid exploitation window mirrors the accelerating…
Read More >
ShadyPanda supply chain cybersecurity
The Seven-Year Extension Supply-Chain Attack Hiding in Plain Sight
December 17, 2025
A threat actor known as ShadyPanda, which carried out two cyberthreat operations with a scope of seven years, has been identified by researchers at endpoint security company Koi. The campaigns notably take advantage of browser…
Read More >
ServiceNow Veza acquisition identity security
ServiceNow’s Veza Acquisition Signals the Next Phase of Identity-First Security
December 16, 2025
Cloud software company ServiceNow recently announced an agreement to acquire identity security startup Veza. Identity governance now sits at the heart of cybersecurity strategy, leading companies to make deals like this that combine the capabilities…
Read More >
ghost tapping NFC mobile security
How NFC Scammers Are Targeting Tap-to-Pay Shoppers
December 09, 2025
Many forms of cyberthreat surge every year around the holidays, with the massive shopping rush exacerbating risk in both online and in-person purchases. The prevalence of large crowds, heavy retail traffic, and mobile payment options…
Read More >
holiday season shopping cyberattacks
Holiday Cyberattacks Surge as Attackers Exploit the 2025 Shopping Season
December 05, 2025
As technology continues to advance and be increasingly integrated into varying areas of life, cyber risk becomes a more and more pressing area of concern. The 2025 holiday season represents the most aggressive alignment yet…
Read More >
governance risk digital transformation GRC
When Cloud Migration Outpaces Governance, Risk Follows Organizations into the Future
December 04, 2025
The tension between widespread, rapid adoption of cloud technology and the slower, more deliberate work of establishing governance creates a concerning gap that must be addressed. Advancements like multi-cloud, hybrid application environments multiply identity and…
Read More >
Palo Alto Networks Chronosphere observability
What the Palo Alto Networks-Chronosphere Deal Signals for the AI Era
December 02, 2025
In the era of AI-dominated systems, cloud applications at scale, and a tsunami of telemetry, industry leaders have increasingly turned to mergers and acquisitions to meet modern needs. The landscape of enterprise environments and advancing…
Read More >
GitLab prompt injection
GitLab’s AI Vulnerability Highlights the Dark Side of Prompt Injection
December 01, 2025
GitLab recently released new versions (18.5.2, 18.4.4, 18.3.6) of GitLab Community Edition (CE) and Enterprise Edition (EE) as an emergency patch for several new vulnerabilities. One of these vulnerabilities can enable attacks taking advantage of…
Read More >
Anthropic AI-automated attack
Inside the First Fully Autonomous Cyber-Espionage Campaign
November 25, 2025
The growth of AI in recent years has led to its widespread use for not only legitimate applications, but cybercriminal operations as well. Threat actors have increasingly turned to AI-enhanced tools for a variety of…
Read More >
cybersecurity AI CISO budgets
The Future of Cybersecurity: Trust, Autonomy, and the AI Arms Race
November 24, 2025
Insights from leaders like CISOs are a vital part of threat intelligence, important for organizations to follow in order to maintain effective defenses against an ever-shifting landscape of threats. The RSAC Conference recently released a…
Read More >
Qualys botnet web security
How Botnets Are Weaponizing the Modern Web
November 18, 2025
The threat landscape is always shifting, with traditional tactics and tools often reemerging as attack trends and technological advances make them more profitable once more. The Threat Research Unit (TRU) at Qualys recently discovered a…
Read More >
Zscaler SPLX AI lifecycle
Zscaler’s SPLX Acquisition Marks the Next Phase in AI Lifecycle Security
November 17, 2025
This year has seen a significant wave of AI-focused cybersecurity acquisitions as organizations increasingly seek to take advantage of the AI explosion to expand their capabilities and improve operations. With the growing prevalence of AI-empowered…
Read More >
Arkose Labs threat intelligence automation trust
How Automation Is Rewriting the Rules of Trust Online
November 17, 2025
A recent report from Arkose Labs, Enterprises Under Attack: Quarterly Threat Actor Patterns, reveals a number of trends differentiating Q2 2025 from Q1. The rise of AI and crime-as-a-service is reshaping the global threat landscape,…
Read More >
cargo theft supply chain Proofpoint
How Cybercriminals Are Turning Remote Access into Real-World Cargo Theft
November 11, 2025
Technological advances and evolving cybercriminal tactics are creating a new landscape of attacks, with updated goals and consequences. Whereas cybercrime traditionally has focused on more abstract aims—though still with significant real-life impacts—like data theft and…
Read More >
Subscribe for the Latest News
Webinars
Network Security in the AI Era: Limit Lateral Movement by Closing Policy Gaps and Governing Change
Register Now
Resilience Roadmap: Recovering from Modern Attacks
Register Now
Getting to the Shortlist: Tips and Tricks for Vetting Vendors
Register Now