To get in touch about speaking at your event, email [email protected]
Media Packet
1,066 items across 6 categories — press, broadcast, stage, and paperwork. Captured, displayed, and archived for posterity.
1,066 items
Press
Popular Science published an explainer on bug bounty programs, how they operate, and their role in cybersecurity. Casey Ellis is quoted discussing why organizations use bounties to find vulnerabilities and the economic incentives that drive security researchers to participate.
Press
The Street published an article on biometric technology adoption at sports and entertainment venues for ticketing, payments, and personalized experiences. Casey Ellis is cited discussing security implications and best practices for implementing biometric systems at large public events.
Press
Fortune reported on more than 80 CFOs pushing back against new SEC sustainability reporting rules. Casey Ellis was among the signatories raising concerns about the proposed regulatory requirements and their operational impact.
Press
BankInfoSecurity reported on a critical remote code execution vulnerability discovered in the H2 database console that shares architectural similarities with the Log4Shell flaw. The report detailed how the vulnerability in H2's console component could enable attackers to execute arbitrary code remotely, drawing comparisons to the widespread Log4Shell incident that had recently affected numerous organizations.
Press
ZDNet published a January 2022 article covering JFrog researchers' discovery of a critical JNDI vulnerability in H2 database consoles comparable to Log4Shell. Casey Ellis contributed analysis on the vulnerability's significance and broader security implications for enterprise database environments.
Press
Protocol published an article examining six critical security flaws discovered in Microsoft Azure over the previous year and their implications for cloud platform security. Casey Ellis commented on the vulnerabilities and Microsoft's responsibility to address the systemic challenges underlying these discoveries.
Press
The Daily Swig reported on revisions the U.S. Commerce Department made to its rules governing the export of hacking tools following feedback from security researchers and practitioners. Casey Ellis contributed to the public consultation process that influenced the policy adjustments.
Press
A Washington Post article from January 2022 examines Texas primary election results and the state's security measures and audit processes. The piece discusses election integrity concerns and Texas's approach to addressing them through result verification and oversight.
Press
SC Media reported on a Los Angeles County Metropolitan Transportation Authority initiative to offer riders a free mobile security app for protecting connections on public Wi-Fi. Casey Ellis contributed security guidance for the program, helping the transit agency strengthen protections for commuters accessing the network.
Press
SC Media reported in December 2021 on a cryptomining campaign that conducted 125 attacks during Q3 2021 to hijack victims' computing resources for cryptocurrency mining. Casey Ellis contributed analysis on the campaign's methods and impact on targeted organizations.
Press
VentureBeat published an article in December 2021 examining the timing of Log4j patching priorities following critical vulnerability disclosures. Ellis offers perspective on the relative urgency of applying version 2.17.1 updates versus earlier critical patches for organizations managing vulnerability response.
Press
VentureBeat published a press item on Microsoft's launch of new Defender capabilities for identifying and remediating Log4j vulnerabilities in endpoint systems. Casey Ellis is quoted discussing the importance of the tooling in addressing the critical vulnerability landscape facing security teams.
Press
An SC Media article details the discovery of another denial-of-service vulnerability in the Log4j library requiring additional patching for affected systems. Casey Ellis comments on the security implications and remediation efforts needed to address the newly identified flaw.
Press
Threatpost published an article examining the rising tide of global cyberattacks in 2021 and the sophisticated threats posed by nation-state hacking groups. Casey Ellis provided analysis on the evolving threat landscape and the implications of state-sponsored cyber operations for organizations worldwide.
Press
A ZDNet article warns of cryptomining malware embedded in illegal torrents of Spider-Man: No Way Home circulating online. Casey Ellis discusses the security risks posed by malware-laden downloads and advises users on safe file-sharing practices.
Press
PortSwigger's Daily Swig reported on how bug bounty platforms managed an influx of thousands of Log4j vulnerability submissions from security researchers in December 2021. Casey Ellis commented on the surge in reports and the operational challenges platforms faced processing the volume of disclosures related to the critical logging library vulnerability.
Press
Mint reported on a White House summit convening tech industry leaders to address open-source software security following the Log4j vulnerability crisis. Casey Ellis participated in discussions about strengthening protections for critical open-source infrastructure.
Press
An SC Media article from December 2021 describes how attackers exploited the Log4j vulnerability to compromise and disable email servers at Belgium's Ministry of Defense. Casey Ellis commented on the incident's significance for critical infrastructure security and the urgent need for organizations to patch the widely-exploited vulnerability.
Press
VentureBeat published an article on the Log4j vulnerability warning that its full impact would unfold over an extended period as attackers locate vulnerable systems. Casey Ellis discusses the ongoing threat landscape and the delayed consequences organizations would face from the widespread nature of the flaw.
Press
SC Media published Casey Ellis's analysis of the Log4Shell vulnerability in December 2021, examining why the flaw created a perfect storm of easy exploitation and rapid spread. Ellis explores the conditions that enabled the vulnerability to proliferate quickly across software ecosystems and become exceptionally difficult to contain.
Press
A ThreatPost article from December 2021 reports on Apache's patch for a denial-of-service vulnerability in Log4j discovered after the initial Log4Shell remote code execution flaw. Casey Ellis discusses the implications of the patching process and the challenges organizations face in securing the widely-used logging library against emerging threats.
Press
Infosecurity Magazine reported on the Department of Homeland Security's launch of "Hack DHS," its inaugural bug bounty program designed to identify vulnerabilities across federal systems. Casey Ellis contributed expertise to the initiative as a recognized voice in coordinated vulnerability disclosure and bug bounty program design.
Press
WRAL TechWire reported on the U.S. federal government's launch of the "Hack DHS" bug bounty program, which offers up to $5,000 for identifying security vulnerabilities. Casey Ellis discussed the program's significance for strengthening federal cybersecurity defenses through crowdsourced vulnerability discovery.
Press
TechTimes reported on security efforts to develop a protective "vaccine" against the Log4Shell vulnerability for systems unable to patch immediately. Casey Ellis contributed to these efforts aimed at providing interim protection for exposed users against active exploitation of the critical logging flaw.
Press
A Security Boulevard article from December 2021 covers the discovery of a second Log4j vulnerability, CVE-2021-45046, that surfaced shortly after the initial disclosure and required additional patching. Casey Ellis commented on the implications of the chained flaw and the challenges organizations faced in securing their systems against successive Log4j exploits.
Press
CPO Magazine published a report on the discovery of EwDoor, a botnet targeting AT&T VoIP servers that potentially infected up to 100,000 devices, as identified by Chinese security researchers. Casey Ellis commented on the security implications and threat landscape revealed by the botnet's widespread reach and targeting of critical communications infrastructure.
Press
Dark Reading published a technical guide on identifying servers vulnerable to the Log4j flaw. Casey Ellis contributed advice and methods to help system administrators detect the vulnerability across their infrastructure.
Press
Dark Reading published an analysis on how bug bounty programs are evolving to prioritize critical vulnerabilities with higher payouts. Casey Ellis discusses the strategic shift toward incentivizing researchers to focus on the most impactful security flaws rather than volume-based submissions.
Press
TechRepublic published an article examining the record number of security vulnerabilities disclosed in 2021. Casey Ellis provides insight into the factors driving the surge in vulnerability disclosures and their implications for the security industry.
Press
ZDNet published a report on NIST data showing that 2021 saw 18,378 vulnerabilities discovered, continuing a fifth consecutive year of record numbers. Casey Ellis commented on the vulnerability landscape and the implications of sustained increases in reported security flaws.