Bloomberg Strengthens Cybersecurity Coverage with Experienced Journalist O’Neill
- Bloomberg News adds a cybersecurity reporter in Washington.
- Patrick Howell O’Neill, a veteran security journalist, joins to cover the beat.
- He comes from MITRE, where he was lead cyber operations analyst.
Bloomberg News has hired Patrick Howell O’Neill as a cybersecurity reporter based in Washington, D.C. He started on June 2, 2025. The hire adds depth to coverage of hacking and government cyber policy.
Who O’Neill is
O’Neill returns to journalism after a stint at MITRE, where he was lead cyber operations analyst, and before that he spent years covering security as a reporter and editor. He has seen the beat from both sides.
Why Bloomberg wants the coverage
Cyberattacks now move markets. They shut down companies and drive policy fights in Washington, and Bloomberg’s readers, from investors to executives, want fast and accurate reporting on that risk from someone close to the agencies and lawmakers involved.
Know what matters before your first meeting.
Weekday mornings. Five minutes. What changed in security, why it matters.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
What he will cover
O’Neill’s beat spans threats, the government response and the business of security, including the market for hacking tools.
What it adds
Security stories reward reporters who can read a technical advisory and also get officials on the phone. Analyst experience helps sort real incidents from hype.
More reporting muscle in Washington
Bloomberg is investing in a growing beat. Readers get another experienced reporter watching the agencies and the attackers.
Newer CyberExperts coverage on this topic
This article still works as background. If you want the current picture, start with the freshest related coverage below and today's brief.
Citrix NetScaler CVE-2026-19490: The Auth Bypass That Went From PoC to Probes in a Day
CVE-2026-19490 is a CVSS 9.3 NetScaler Gateway/AAA auth bypass. A public PoC on Sept 2 was followed by live probes within a...
PaperCut NG/MF: The Print Server That Learned Remote Code Execution Again
CVE-2026-81578 and CVE-2026-82078 chain to pre-auth RCE on PaperCut Application Server. Confirm Emergency Patch Release 2, restrict admin exposure, and hunt like...
JFrog Artifactory CVE-2026-82329: Empty Join Key, Full Admin Token, Busy Scanners
CVE-2026-82329 lets attackers forge Artifactory admin tokens via a deterministic empty join key. Mass scanning peaked near 406,000 attempts; patch fixed builds...
Friday’s brief: GitLab’s 10.0 fix, then VeloCloud attacks, a poisoned LiteLLM release and PHP2Shell logs to check
The fastest way to catch up on what changed after this article was published.
Start your morning with the signal that matters.
Get the biggest cybersecurity developments, why they matter, and where to go deeper on CyberExperts.
By subscribing you agree to our Privacy Policy.
Free. Weekdays. Built for operators.