Media Packet
1,053 items across 6 categories — press, broadcast, stage, and paperwork. Captured, displayed, and archived for posterity.
165 items · 2016
Press
The Parallax published an analysis of the Uber data breach cover-up and the distinction between legitimate bug bounty payments and extortion. Casey Ellis examines how the circumstances surrounding Uber's handling of the breach illustrate the ethical and legal boundaries in responsible vulnerability disclosure.
Press
Troy Hunt's blog post examines bug bounty programs as a component of addressing data breaches, published on his security website in December 2016. Casey Ellis is featured discussing how coordinated vulnerability disclosure and bug bounties contribute to improving organizational security practices and breach prevention.
Press
SC Magazine published an in-depth report on Yahoo's disclosure of a second major data breach in 2016 affecting more than one billion user accounts. Casey Ellis commented on the security incident and its implications for the affected users and the company's disclosure practices.
Press
HackRead published coverage in December 2016 of the data breach affecting more than one billion Yahoo user accounts. The report included Casey Ellis's commentary on the incident and its security implications.
Press
TechBeacon published an article featuring advice from cybersecurity leaders on three key ways organizations can become more proactive in application security efforts. Casey Ellis contributes perspectives on strategies for shifting toward proactive rather than reactive app security practices.
Press
Yahoo! published a 2016 article examining how bug bounty programs have become standard practice in response to widespread digital insecurity. Casey Ellis discusses the role of coordinated vulnerability disclosure and bug bounties in strengthening organizational security posture.
Press
An opinion piece published in The Australian offers advice for Australian entrepreneurs seeking success in the U.S. market. Casey Ellis draws on his experience building technology companies to outline practical steps for international expansion and navigating the American business landscape.
Press
The Parallax published an article titled "When to disclose a zero-day vulnerability" examining the ethical and practical dilemmas researchers face in vulnerability disclosure decisions. Casey Ellis contributes perspective on the timing and responsible approach to disclosing zero-day vulnerabilities.
Press
A Business Insider Australia article from November 2016 reports on a networking group formed by Australian expatriates in Silicon Valley to support newcomers. Casey Ellis is identified as a key member of the group helping Australian professionals build connections in the technology industry.
Press
A November 2016 SC Magazine article reports on a data breach at Madison Square Garden that exposed payment card information from customers who purchased tickets or merchandise at the venue. Casey Ellis commented on the incident's implications for event venue security practices and customer data protection standards.
Stage
A video from the Passcode Security of Things Forum features a discussion on bug bounties and their role in securing critical infrastructure. Ellis examines how coordinated vulnerability disclosure programs can strengthen defenses in systems essential to public safety and national security.
Press
An NBC News article from October 2016 examines security risks created by rapid Internet of Things expansion and whether the industry has adequately addressed them. Casey Ellis discusses the gap between IoT deployment speed and security maturity, highlighting challenges organizations face in protecting connected devices at scale.
Press
A Sydney Morning Herald article covers widespread service disruptions affecting PayPal, Twitter, and other major platforms following a cyberattack on DNS provider Dyn that spread across multiple continents. Casey Ellis provided analysis on the scale and impact of the attack, contributing context on the significance of the incident for internet infrastructure security.
Press
The Christian Science Monitor published an article in October 2016 explaining how a DDoS attack against DNS provider Dyn disrupted major websites including Netflix, Twitter, and Spotify. Casey Ellis provided analysis on the attack's scope and the infrastructure vulnerabilities it exposed.
Press
USA Today published an article on the 2016 Dyn DDoS attack that explained how hackers hijacked unsecured household devices like DVRs to form a botnet. Casey Ellis discusses the security vulnerabilities in smart devices that enabled the attack and the broader implications for internet infrastructure protection.
Press
A Washington Post article reports on a massive distributed denial-of-service attack against DNS provider Dyn that caused widespread outages across Twitter, Spotify, Reddit, and other major internet services. Casey Ellis provided analysis and commentary on the attack's impact on internet infrastructure and the security implications for affected platforms.
Stage
OWASP AppSecUSA published a stage presentation titled "Your License for Bug Hunting Season" in October 2016. Casey Ellis discusses how security researchers can legally and responsibly pursue bug bounty hunting and vulnerability disclosure work.
Stage
A presentation on building bug bounty programs was delivered at the 17th Annual AT&T Cyber Security Conference in October 2016. Casey Ellis discussed the design and implementation of effective bug bounty initiatives as a security strategy.
Press
An ECT News Network article from October 2016 examines security and safety issues highlighted by a Facebook executive's incident in Brazil. Casey Ellis is cited regarding the broader implications for corporate security practices and risk management in emerging markets.
Stage
Autoblog UPSHIFT published "The Good, The Bad, The Ugly Of Connected Cars," a stage talk from October 2016. Casey Ellis discusses security considerations and vulnerabilities in connected vehicle systems, addressing the benefits and risks as automotive technology becomes increasingly networked.
Press
Automotive News Europe reported on Tesla releasing a software patch to address a bug that exposed vehicles to hacking vulnerabilities. Casey Ellis participated in the security research disclosure that prompted the fix.
Press
CNBC's Nightly Business Report from September 22, 2016 featured a segment on Tesla's response to recently discovered hacking vulnerabilities. Casey Ellis contributed analysis on the security implications and Tesla's remediation approach to the reported vulnerabilities.
Stage
BrightTalk hosted a stage presentation titled "The Bug Bounty Tipping Point: Strength in Numbers" in September 2016. Casey Ellis discussed how the collective participation of security researchers in bug bounty programs creates measurable security improvements at scale.
Press
The Telegraph reported on Tesla's rapid patching of a software vulnerability that Chinese security researchers had demonstrated could enable remote vehicle control. Casey Ellis commented on the significance of the bug fix and Tesla's response to the security disclosure.
Broadcast
The CyberWire Daily Podcast episode from September 20, 2016, covers cybersecurity news including a Tesla vulnerability and patch. Casey Ellis is interviewed about the vulnerability disclosure and the importance of responsible reporting in automotive security research.
Press
Automotive News reported on Tesla's rapid software patch addressing a vulnerability that could have enabled remote access to vehicle systems. Casey Ellis contributed security research that helped identify the flaw and informed Tesla's remediation efforts.
Press
Bloomberg reported on Tesla's over-the-air software update that patched a vulnerability in its vehicles discovered by security researchers. Casey Ellis contributed to the identification and disclosure of the hacking vulnerability that Tesla addressed through the update.
Press
Tesla released a software patch to address a vulnerability that allowed remote vehicle control, as reported by the Chicago Tribune in September 2016. Casey Ellis contributed analysis on the security implications of the flaw and the importance of coordinated vulnerability disclosure in automotive systems.
Press
Fedscoop published an interview with Casey Ellis on the "Hack the Pentagon" bug bounty program and its role in government cybersecurity. Ellis discusses how coordinated bug bounty initiatives can address workforce gaps and strengthen defensive capabilities across federal agencies.
Press
Industry Week reported in September 2016 that Tesla fixed a software bug exposing hacking vulnerabilities in its systems. Casey Ellis contributed to the reporting by highlighting how Tesla's collaboration with security researchers strengthened its vulnerability disclosure process and product security practices.