Media Packet

Casey Ellis, on the record.

1,042 items across 6 categories — press, broadcast, stage, and paperwork. Captured, displayed, and archived for posterity.

12 items · 2023

Press

Critical Cisco SMB Router Flaw Allows Authentication Bypass, PoC Available Critical Cisco SMB Router Flaw Allows Authentication Bypass, PoC Available Critical Cisco SMB Router Flaw Allows Authentication Bypass, PoC Available

A Dark Reading article details a critical authentication bypass vulnerability in Cisco small-to-medium business routers with publicly available proof-of-concept exploit code. Casey Ellis contributed security analysis and context on the vulnerability's impact and remediation guidance for affected organizations.

Broadcast

Dave Gerry and Casey Ellis - TechSpective Podcast 119 - YouTube

TechSpective Podcast 119 features Dave Gerry and Casey Ellis discussing artificial intelligence's role in cybersecurity. Ellis examines how AI affects attack costs, expands access to technical expertise, and enables automation of reconnaissance and lateral movement tactics.

Stage

All Your Vulns Are Belong to Terms and Conditions

A talk titled "All Your Vulns Are Belong to Terms and Conditions" was presented at DEF CON 31 in August 2023. Casey Ellis examines how vulnerability disclosure policies and legal frameworks shape the security research landscape and researcher protections.

Stage

Hungry, Hungry Hackers: A Hacker's Eye-view of the Food Supply

A talk at BSidesLV in August 2023, "Hungry, Hungry Hackers: A Hacker's Eye-view of the Food Supply" examines security vulnerabilities in food systems from an attacker's perspective. Casey Ellis discusses the threat landscape facing the food supply chain and the importance of addressing critical security gaps in this essential infrastructure.

Press

A Breach at LastPass Has Password Lessons for Us All

A New York Times article examines lessons from the LastPass breach and the role of password managers in cybersecurity. Casey Ellis discusses how password managers remain effective security tools despite recent high-profile compromises and outlines practices for mitigating breach risk.

Broadcast

RSAC Interview w/ Casey Ellis & Dave Gerry, Bugcrowd

An April 2023 SiliconANGLE theCUBE broadcast features Casey Ellis and Dave Gerry from Bugcrowd discussing the company's crowdsourced security model. Ellis and Gerry explain how the platform enables individuals to earn income through bug bounty work while addressing growing market demand for vulnerability discovery at scale.

Press

Five Guys Data Breach Puts HR Data Under a Heat Lamp

Dark Reading published coverage of a data breach at Five Guys that exposed sensitive human resources data. Casey Ellis commented on the incident, discussing the security implications and response measures for restaurant chain data breaches.

Press

The U.S. Still Needs Cybersecurity Pros Despite All the Tech Layoffs

Clearance Jobs published an article examining cybersecurity job demand in the U.S. amid tech sector layoffs. Casey Ellis discusses the continued need for skilled cybersecurity professionals despite industry workforce reductions and broader economic pressures on hiring.

Press

How AI and DAST can mitigate security risks

SC Magazine published an article examining how artificial intelligence and dynamic application security testing can reduce security vulnerabilities. Casey Ellis discusses the intersection of AI and DAST technologies and their role in strengthening application security defenses against emerging threats.

Patents

Automated Prediction Of Cybersecurity Vulnerabilities

A patent filed in January 2023 describes an automated system for predicting cybersecurity vulnerabilities in IT assets by linking technology traits to known vulnerability data within a graph database. The technique uses ontologies and discovery tools to map attack surfaces and identify potential vulnerabilities for bug-bounty program targets, with results delivered through a service-oriented architecture.

Press

Cisco: No Fixes for Small Business Router Vulnerabilities

A Channel Futures report documents Cisco's decision to leave critical vulnerabilities unpatched in several end-of-life small business routers, recommending customer migration to newer hardware instead. Casey Ellis commented on the security implications of the vendor's approach and the risks posed to organizations still operating the affected devices.

Press

Cisco warns of two critical vulnerabilities in end-of-life routers

Teiss published a press item covering Cisco's warning about two critical vulnerabilities in end-of-life routers that will not receive patches. Casey Ellis is quoted commenting on the security implications and risk management considerations for organizations still operating the affected equipment.