To get in touch about speaking at your event, email [email protected]
Media Packet
1,066 items across 6 categories — press, broadcast, stage, and paperwork. Captured, displayed, and archived for posterity.
1,066 items
Press
TechCrunch published a story on Facebook's plan to alert third-party developers about vulnerable code in their applications. Casey Ellis commented on the initiative, noting its significance for improving security awareness across the developer ecosystem.
Press
ITWire published a feature in which Casey Ellis outlines a strategic approach to combating the global ransomware problem. Ellis describes the multifaceted solutions he would implement if positioned to address ransomware at scale.
Press
Digital Journal published an article examining Apple's iOS security research device program and its implications for vulnerability discovery. Casey Ellis analyzes the motivations behind Apple's initiative to distribute specially-configured iPhones to security researchers and assesses the program's potential impact on device security.
Press
Digital Journal published an article examining Apple's iOS security research device program and its implications for vulnerability discovery. Casey Ellis analyzes the program's motivations and potential impact on the security research community's ability to identify weaknesses in Apple's platform.
Press
SC Magazine published an article examining legal lessons from Uber's security breach incident and the importance of transparent bug bounty program governance. Casey Ellis discusses how organizations must establish clear, legally compliant bug bounty policies to protect both researchers and the company from liability and misunderstandings.
Press
Infosecurity Magazine reported on charges filed against Uber's former Chief Security Officer over an alleged breach cover-up. Casey Ellis commented on the case's implications for the CISO role and the responsibility of security leaders in corporate governance.
Press
Secure World Expo published an industry news item on federal charges against Uber's former Chief Security Officer for a data breach cover-up. Casey Ellis commented on the case and connected it to the broader evolution of vulnerability disclosure ethics and corporate accountability standards.
Press
SC Magazine reported on FireEye's decision to open its previously private bug bounty program to external security researchers. Casey Ellis contributed to the piece as a bug bounty program expert offering perspective on the company's shift toward broader vulnerability disclosure practices.
Press
A Wall Street Journal article from August 2020 examines potential technology policy shifts under a Biden-Harris administration, addressing antitrust enforcement, data privacy regulation, and Section 230 reform. Casey Ellis contributes perspective on how these policy areas could reshape the technology sector's regulatory landscape.
Press
Bugcrowd hosted a webinar in August 2020 on vulnerability economics and the business impact of security flaws in software. Casey Ellis presented a framework for understanding how organizations should value and prioritize the remediation of discovered vulnerabilities.
Press
Silicon Angle reported on a data exposure incident affecting medical software company Adit, in which 3.1 million patient records were discovered unsecured online. Casey Ellis helped identify the exposure and coordinated its disclosure to the company and relevant authorities.
Press
Clearance Jobs covered the virtual DEF CON 28 hacking conference, which brought together independent hackers and defense officials to strengthen national security practices. Casey Ellis participated in the event, contributing to discussions between the hacker community and government representatives on vulnerability disclosure and defensive security improvements.
Press
Digital Journal published an article examining whether violations of website terms of service should be prosecuted as crimes under the Computer Fraud and Abuse Act. Casey Ellis contributed perspective to the legal debate surrounding enforcement of privacy obligations and the scope of computer fraud statutes.
Press
Google Project Zero shifted its vulnerability disclosure policy away from patch-time requirements to a standardized 90-day deadline, according to Threatpost. Casey Ellis analyzed the implications of the policy change and its effects on the vulnerability disclosure landscape.
Broadcast
Hakluke published a video interview with Casey Ellis on July 31, 2020. Ellis discusses his career path as a developer, the influence of a book on his decision to work remotely, and how that shift enabled him to pursue additional interests.
Press
Apple launched a Security Research Device Program providing specially configured iPhones to vetted security researchers, as reported by SC Magazine. Casey Ellis was among the trusted hackers selected to receive a research phone to identify iOS vulnerabilities.
Press
Digital Journal published an article on a critical vulnerability in SAP's RECON software that could allow unauthenticated attackers unrestricted access to enterprise resource planning systems. Casey Ellis warned about the severity of the flaw and its potential impact on organizations relying on SAP infrastructure.
Press
SC Magazine published an article on a critical 10/10 severity vulnerability in an SAP application affecting approximately 40,000 customers. Casey Ellis commented on the risk and implications of the flaw for organizations using the affected SAP systems.
Papers
A Harvard Belfer Centre paper examines vulnerability rediscovery rates and collision dynamics in government disclosure processes. Casey Ellis contributes analysis on how security researchers and vendors encounter duplicate vulnerability reports, informing policy discussions around coordinated disclosure timelines and resource allocation.
Press
Innovation Bay hosted an online panel discussion on cybersecurity challenges and the current state of digital security for individuals and organizations. Casey Ellis participated in the discussion, sharing perspective on security challenges facing the broader industry.
Press
SC Magazine published an article in which Casey Ellis argues that human hackers will outperform artificial intelligence in offensive security tactics for approximately a decade. Ellis contends that human creativity and intuition provide advantages over AI systems in identifying and exploiting security vulnerabilities.
Press
A Bugcrowd study published on OpenPR.de examines how protecting critical infrastructure requires combining human and artificial intelligence. Casey Ellis provides perspective on the importance of leveraging both human ingenuity and AI systems to strengthen security defenses against evolving threats.
Press
A Betanews article examines the limits of artificial intelligence in cybersecurity defense. Casey Ellis argues that AI tools alone cannot match the creativity and adaptability of human attackers, and that effective defense requires combining automated systems with human expertise and ingenuity.
Press
Computer Weekly published an article examining the growing recognition of neurodiversity among ethical hackers and security professionals. Casey Ellis comments on how neurodivergent individuals bring distinct advantages to creative problem-solving and security research within the hacking community.
Press
A Bugcrowd report published by Business Wire examines the role of human expertise and artificial intelligence in protecting critical infrastructure. Casey Ellis emphasizes that effective security requires combining human ingenuity with AI-powered solutions rather than relying on either approach alone.
Press
The Daily Swig reports on a Bugcrowd study showing India as the leading country for security researchers on the platform. Casey Ellis discusses the findings and India's emergence as a major hub for bug bounty hunters participating in coordinated vulnerability disclosure.
Press
Cointelegraph reported on an Israeli software firm's decision to pay a 250,000 dollar Bitcoin ransom following a ransomware attack. Casey Ellis commented on the difficult trade-offs companies face when deciding whether to pay ransom demands versus other response options.
Press
Forbes published a roundup of 16 software development trends expected to shape the tech industry, featuring input from members of its Technology Council. Casey Ellis contributed a prediction on a key trend poised to influence software development practices.
Press
The Daily Swig published an article examining how US computer crime laws lag behind evolving practices in penetration testing and ethical hacking. Casey Ellis discusses how the Computer Fraud and Abuse Act creates legal uncertainty for security researchers conducting authorized testing in good faith.
Press
A Bugcrowd webinar from June 2020 examines supply chain attacks and their impact on critical infrastructure sectors. Casey Ellis discusses how vulnerabilities in third-party components create security risks across transportation and related industries.