To get in touch about speaking at your event, email [email protected]
Media Packet · Press
843 items
843 items
Press
Digital Journal published an article examining Apple's iOS security research device program and its implications for vulnerability discovery. Casey Ellis analyzes the motivations behind Apple's initiative to distribute specially-configured iPhones to security researchers and assesses the program's potential impact on device security.
Press
Digital Journal published an article examining Apple's iOS security research device program and its implications for vulnerability discovery. Casey Ellis analyzes the program's motivations and potential impact on the security research community's ability to identify weaknesses in Apple's platform.
Press
SC Magazine published an article examining legal lessons from Uber's security breach incident and the importance of transparent bug bounty program governance. Casey Ellis discusses how organizations must establish clear, legally compliant bug bounty policies to protect both researchers and the company from liability and misunderstandings.
Press
Infosecurity Magazine reported on charges filed against Uber's former Chief Security Officer over an alleged breach cover-up. Casey Ellis commented on the case's implications for the CISO role and the responsibility of security leaders in corporate governance.
Press
Secure World Expo published an industry news item on federal charges against Uber's former Chief Security Officer for a data breach cover-up. Casey Ellis commented on the case and connected it to the broader evolution of vulnerability disclosure ethics and corporate accountability standards.
Press
SC Magazine reported on FireEye's decision to open its previously private bug bounty program to external security researchers. Casey Ellis contributed to the piece as a bug bounty program expert offering perspective on the company's shift toward broader vulnerability disclosure practices.
Press
A Wall Street Journal article from August 2020 examines potential technology policy shifts under a Biden-Harris administration, addressing antitrust enforcement, data privacy regulation, and Section 230 reform. Casey Ellis contributes perspective on how these policy areas could reshape the technology sector's regulatory landscape.
Press
Bugcrowd hosted a webinar in August 2020 on vulnerability economics and the business impact of security flaws in software. Casey Ellis presented a framework for understanding how organizations should value and prioritize the remediation of discovered vulnerabilities.
Press
Silicon Angle reported on a data exposure incident affecting medical software company Adit, in which 3.1 million patient records were discovered unsecured online. Casey Ellis helped identify the exposure and coordinated its disclosure to the company and relevant authorities.
Press
Clearance Jobs covered the virtual DEF CON 28 hacking conference, which brought together independent hackers and defense officials to strengthen national security practices. Casey Ellis participated in the event, contributing to discussions between the hacker community and government representatives on vulnerability disclosure and defensive security improvements.
Press
Digital Journal published an article examining whether violations of website terms of service should be prosecuted as crimes under the Computer Fraud and Abuse Act. Casey Ellis contributed perspective to the legal debate surrounding enforcement of privacy obligations and the scope of computer fraud statutes.
Press
Google Project Zero shifted its vulnerability disclosure policy away from patch-time requirements to a standardized 90-day deadline, according to Threatpost. Casey Ellis analyzed the implications of the policy change and its effects on the vulnerability disclosure landscape.
Press
Apple launched a Security Research Device Program providing specially configured iPhones to vetted security researchers, as reported by SC Magazine. Casey Ellis was among the trusted hackers selected to receive a research phone to identify iOS vulnerabilities.
Press
Digital Journal published an article on a critical vulnerability in SAP's RECON software that could allow unauthenticated attackers unrestricted access to enterprise resource planning systems. Casey Ellis warned about the severity of the flaw and its potential impact on organizations relying on SAP infrastructure.
Press
SC Magazine published an article on a critical 10/10 severity vulnerability in an SAP application affecting approximately 40,000 customers. Casey Ellis commented on the risk and implications of the flaw for organizations using the affected SAP systems.
Press
Innovation Bay hosted an online panel discussion on cybersecurity challenges and the current state of digital security for individuals and organizations. Casey Ellis participated in the discussion, sharing perspective on security challenges facing the broader industry.
Press
SC Magazine published an article in which Casey Ellis argues that human hackers will outperform artificial intelligence in offensive security tactics for approximately a decade. Ellis contends that human creativity and intuition provide advantages over AI systems in identifying and exploiting security vulnerabilities.
Press
A Bugcrowd study published on OpenPR.de examines how protecting critical infrastructure requires combining human and artificial intelligence. Casey Ellis provides perspective on the importance of leveraging both human ingenuity and AI systems to strengthen security defenses against evolving threats.
Press
A Betanews article examines the limits of artificial intelligence in cybersecurity defense. Casey Ellis argues that AI tools alone cannot match the creativity and adaptability of human attackers, and that effective defense requires combining automated systems with human expertise and ingenuity.
Press
Computer Weekly published an article examining the growing recognition of neurodiversity among ethical hackers and security professionals. Casey Ellis comments on how neurodivergent individuals bring distinct advantages to creative problem-solving and security research within the hacking community.
Press
A Bugcrowd report published by Business Wire examines the role of human expertise and artificial intelligence in protecting critical infrastructure. Casey Ellis emphasizes that effective security requires combining human ingenuity with AI-powered solutions rather than relying on either approach alone.
Press
The Daily Swig reports on a Bugcrowd study showing India as the leading country for security researchers on the platform. Casey Ellis discusses the findings and India's emergence as a major hub for bug bounty hunters participating in coordinated vulnerability disclosure.
Press
Cointelegraph reported on an Israeli software firm's decision to pay a 250,000 dollar Bitcoin ransom following a ransomware attack. Casey Ellis commented on the difficult trade-offs companies face when deciding whether to pay ransom demands versus other response options.
Press
Forbes published a roundup of 16 software development trends expected to shape the tech industry, featuring input from members of its Technology Council. Casey Ellis contributed a prediction on a key trend poised to influence software development practices.
Press
The Daily Swig published an article examining how US computer crime laws lag behind evolving practices in penetration testing and ethical hacking. Casey Ellis discusses how the Computer Fraud and Abuse Act creates legal uncertainty for security researchers conducting authorized testing in good faith.
Press
A Bugcrowd webinar from June 2020 examines supply chain attacks and their impact on critical infrastructure sectors. Casey Ellis discusses how vulnerabilities in third-party components create security risks across transportation and related industries.
Press
The Next Web's Pardon the Intrusion newsletter covered the story of Marcus Hutchins, the security researcher who stopped the WannaCry ransomware attack. Casey Ellis was featured in the edition discussing the incident and its significance to the security community.
Press
BuiltIn published an explainer article on bug bounty hunting, its mechanics, and the growing corporate reliance on bounty programs to identify security vulnerabilities. Casey Ellis is cited as a key figure in the bug bounty space who helped establish the industry's credibility and practices.
Press
Forbes published a roundup of 15 technology tools designed to support remote worker productivity, featuring guidance from its Technology Council expert panel. Casey Ellis contributed a recommendation for a tool that helps remote teams maintain efficiency while working from distributed locations.
Press
An article in Silicon Angle features security professionals discussing key takeaways from Verizon's 2020 Data Breach Investigations Report. Ellis contributes analysis of the report's findings alongside other security experts examining trends and implications in the data.