To get in touch about speaking at your event, email [email protected]
Media Packet
1,042 items across 6 categories — press, broadcast, stage, and paperwork. Captured, displayed, and archived for posterity.
165 items · 2016
Press
TechCrunch published an opinion piece by Casey Ellis on September 20, 2016, addressing ethical concerns in security research and disclosure practices. Ellis argues against researchers short-selling a company's stock before revealing vulnerabilities, referencing the St. Jude Medical and MedSec situation as a cautionary example.
Press
The Record reported in September 2016 that Tesla released a software update to fix a bug exposing its vehicles to potential hacking vulnerabilities. Casey Ellis contributed insight on the security implications and Tesla's response to the discovered flaw.
Press
Threatpost published an article in September 2016 documenting Tesla's patch for a critical remote hacking vulnerability affecting its vehicles. The piece emphasized the role of Tesla's bug bounty program in identifying and resolving the security flaw before widespread exploitation.
Press
A Washington Post article from September 2016 covers Tesla's repair of a software bug that exposed hacking vulnerabilities in its vehicles. Casey Ellis contributed analysis on the security implications and remediation steps taken by the automaker to address the discovered flaws.
Press
Yahoo! Finance reported on Tesla deploying an over-the-air software update to address security vulnerabilities discovered by ethical hackers. Casey Ellis contributed analysis of the incident and the broader implications for automotive cybersecurity practices in the connected vehicle industry.
Stage
A panel discussion on engaging researchers for vulnerability testing was featured at the Billington 7th Annual Cybersecurity Summit in 2016. Casey Ellis participated in the discussion on building effective relationships between organizations and security researchers conducting vulnerability assessments.
Press
A 2016 article in The Hill examines how ethical hackers earn substantial income through multiple bug bounty programs and sources. Casey Ellis is quoted discussing the financial incentives and market dynamics that enable hackers to make significant paychecks from coordinated vulnerability disclosure and reward platforms.
Press
PC Magazine published an article examining eight unconventional bug bounty programs with substantial financial rewards. Casey Ellis is cited for his perspective on the ethical dimensions of vulnerability disclosure practices in security research.
Press
SecurityWatch published an article in PCMag examining eight unconventional bug bounty programs that offer substantial financial rewards from both traditional and non-traditional technology companies. Casey Ellis is cited for his perspective on how bug bounty initiatives have expanded beyond software vendors to create security research opportunities across diverse industries.
Press
CIO Asia published an article examining the ethical debate around vulnerability disclosure methods used by MedSec regarding St. Jude Medical devices. Casey Ellis contributed perspective on the security and disclosure practices at the center of the controversy.
Press
A Computerworld article examines the ethical controversy surrounding MedSec's vulnerability disclosure practices for medical devices. Casey Ellis discusses the tensions between responsible disclosure and immediate patient safety in the medical device security landscape.
Press
Computerworld Singapore published an article examining the controversy over MedSec's disclosure of vulnerabilities in St. Jude Medical cardiac devices. Casey Ellis commented on the ethical dimensions of the disclosure approach and its implications for medical device security practices.
Press
CSO published an article examining the ethical controversy surrounding MedSec's disclosure of vulnerabilities in St. Jude Medical devices through a partnership with an investment firm. Casey Ellis comments on the security and disclosure implications of this approach to medical device vulnerability handling.
Press
Hackbusters published a 2016 article examining the ethics controversy surrounding MedSec's disclosure of security vulnerabilities in St. Jude Medical devices. Casey Ellis weighed in on the responsible disclosure debate and the tension between researcher independence and coordinated vendor engagement in medical device security.
Press
CIO AU published an article examining the ethical controversy surrounding MedSec's approach to disclosing medical device vulnerabilities. Casey Ellis commented on the tension between responsible disclosure and the need to drive urgent security improvements in medical device manufacturers.
Press
Computerworld AU published an article examining the ethical debate surrounding MedSec's disclosure of security vulnerabilities in St. Jude Medical devices. Casey Ellis contributed perspective on the tensions between responsible disclosure practices and the urgency of addressing medical device security risks.
Press
CSO AU published an article examining the ethical debate surrounding vulnerability disclosure methods in medical devices, prompted by MedSec's approach to reporting flaws in St. Jude Medical products. Casey Ellis contributed perspective on the tensions between responsible disclosure practices and the urgent need for patient safety in connected medical device security.
Press
PCWorld AU published an article examining the ethics debate surrounding MedSec's disclosure of vulnerabilities in St. Jude Medical devices. Casey Ellis contributed perspective on the security disclosure controversy and its implications for responsible vulnerability handling in the medical device industry.
Press
TechWorld AU published an article examining the ethical implications of MedSec's vulnerability disclosure tactics targeting St. Jude Medical devices. Casey Ellis commented on the responsible disclosure debate and the tensions between security researcher accountability and the need for device manufacturers to address vulnerabilities.
Press
CIO published an article examining the ethical controversy surrounding MedSec's disclosure of security flaws in St. Jude Medical devices. Casey Ellis discusses the tension between responsible disclosure practices and the public health implications of vulnerabilities in medical equipment.
Press
ITWorld published an article examining the ethics controversy surrounding MedSec's approach to disclosing vulnerabilities in medical devices. Casey Ellis discusses the tension between responsible disclosure practices and the urgent need to address security gaps in healthcare infrastructure.
Press
Network World published an article examining the ethical debate around MedSec's disclosure of vulnerabilities in St. Jude Medical devices. Casey Ellis is cited as a security professional weighing in on the responsible disclosure practices and industry implications of the vulnerability announcement.
Press
PCWorld published an article on the ethical controversy surrounding MedSec's vulnerability disclosure approach for St. Jude Medical devices. Casey Ellis commented on the disclosure methods and the broader implications for responsible security research in the medical device industry.
Press
SC Magazine reported on MedSec's unconventional approach to disclosing a medical device vulnerability, which included partnering with a short-selling firm to publicize the flaw. Casey Ellis commented on the disclosure strategy and its implications for responsible vulnerability handling in the medical device industry.
Press
A 2016 article in SC Magazine examines the growing trend of hackers targeting news organizations and exploiting media infrastructure. Casey Ellis discusses how attacks on journalists and newsrooms represent a shift in threat landscape that affects public information flow and editorial independence.
Stage
Node Summit 2016 published a talk by Casey Ellis on Vimeo titled "Welcome to the blue team! Creating 'oh shit' moments for fun and profit." Ellis discusses how developers can proactively identify security flaws in their own code before attackers find them.
Press
Christian Science Monitor's Passcode section published an article in August 2016 examining how bug bounty programs have become standard practice for companies addressing digital security vulnerabilities. Casey Ellis discusses the evolution of bug bounties as a security mechanism and their role in helping organizations identify and remediate software flaws at scale.
Press
The Parallax published an analysis in August 2016 examining Apple's decision to launch a bug bounty program and its significance for the security industry. Casey Ellis discusses why the initiative represented an important shift in how the company engages with external security researchers.
Stage
A presentation titled Unpacking Bug Bounties and Vulnerability Disclosure was delivered at the 2016 Black Hat CISO Summit. Casey Ellis discussed the mechanics and best practices of bug bounty programs and structured vulnerability disclosure processes for security teams.
Press
SD Times reported on enterprises increasingly partnering with Bugcrowd to leverage its hacker community for finding software vulnerabilities. The article highlighted how organizations use the platform's crowdsourced approach to identify and address security bugs at scale.