Casey Ellis, on the record.
1,355 items across 6 categories: press, broadcast, stage, and paperwork. Captured, displayed, and archived for posterity.
Tesla Fixes Critical Remote Hack Vulnerability
Threatpost published an article in September 2016 documenting Tesla's patch for a critical remote hacking vulnerability affecting its vehicles. The piece emphasized the role of Tesla's bug bounty program in identifying and resolving the security flaw before widespread exploitation.
Tesla fixes software bug that exposed hacking vulnerabilities
A Washington Post article from September 2016 covers Tesla's repair of a software bug that exposed hacking vulnerabilities in its vehicles. Casey Ellis contributed analysis on the security implications and remediation steps taken by the automaker to address the discovered flaws.
Tesla Fixes Software Bug That Exposed Hacking Vulnerabilities
Yahoo! Finance reported on Tesla deploying an over-the-air software update to address security vulnerabilities discovered by ethical hackers. Casey Ellis contributed analysis of the incident and the broader implications for automotive cybersecurity practices in the connected vehicle industry.
Engaging Researchers for Vulnerability Testing
A panel discussion on engaging researchers for vulnerability testing was featured at the Billington 7th Annual Cybersecurity Summit in 2016. Casey Ellis participated in the discussion on building effective relationships between organizations and security researchers conducting vulnerability assessments.
Hackers get big paychecks from multiple sources
A 2016 article in The Hill examines how ethical hackers earn substantial income through multiple bug bounty programs and sources. Casey Ellis is quoted discussing the financial incentives and market dynamics that enable hackers to make significant paychecks from coordinated vulnerability disclosure and reward platforms.
8 Unusual Bug Bounty Programs Offering Big Bucks
PC Magazine published an article examining eight unconventional bug bounty programs with substantial financial rewards. Casey Ellis is cited for his perspective on the ethical dimensions of vulnerability disclosure practices in security research.
8 Unusual Bug Bounty Programs Offering Big Bucks
SecurityWatch published an article in PCMag examining eight unconventional bug bounty programs that offer substantial financial rewards from both traditional and non-traditional technology companies. Casey Ellis is cited for his perspective on how bug bounty initiatives have expanded beyond software vendors to create security research opportunities across diverse industries.
Medical device security ignites an ethics firestorm
CIO Asia published an article examining the ethical debate around vulnerability disclosure methods used by MedSec regarding St. Jude Medical devices. Casey Ellis contributed perspective on the security and disclosure practices at the center of the controversy.
Medical device security ignites an ethics firestorm
A Computerworld article examines the ethical controversy surrounding MedSec's vulnerability disclosure practices for medical devices. Casey Ellis discusses the tensions between responsible disclosure and immediate patient safety in the medical device security landscape.
Medical device security ignites an ethics firestorm
Computerworld Singapore published an article examining the controversy over MedSec's disclosure of vulnerabilities in St. Jude Medical cardiac devices. Casey Ellis commented on the ethical dimensions of the disclosure approach and its implications for medical device security practices.
Medical device security ignites an ethics firestorm
CSO published an article examining the ethical controversy surrounding MedSec's disclosure of vulnerabilities in St. Jude Medical devices through a partnership with an investment firm. Casey Ellis comments on the security and disclosure implications of this approach to medical device vulnerability handling.
Medical device security disclosure ignites an ethics firestorm
Hackbusters published a 2016 article examining the ethics controversy surrounding MedSec's disclosure of security vulnerabilities in St. Jude Medical devices. Casey Ellis weighed in on the responsible disclosure debate and the tension between researcher independence and coordinated vendor engagement in medical device security.
Medical device security ignites an ethics firestorm
CIO AU published an article examining the ethical controversy surrounding MedSec's approach to disclosing medical device vulnerabilities. Casey Ellis commented on the tension between responsible disclosure and the need to drive urgent security improvements in medical device manufacturers.
Medical device security ignites an ethics firestorm
Computerworld AU published an article examining the ethical debate surrounding MedSec's disclosure of security vulnerabilities in St. Jude Medical devices. Casey Ellis contributed perspective on the tensions between responsible disclosure practices and the urgency of addressing medical device security risks.
Medical device security ignites an ethics firestorm
CSO AU published an article examining the ethical debate surrounding vulnerability disclosure methods in medical devices, prompted by MedSec's approach to reporting flaws in St. Jude Medical products. Casey Ellis contributed perspective on the tensions between responsible disclosure practices and the urgent need for patient safety in connected medical device security.
Medical device security ignites an ethics firestorm
PCWorld AU published an article examining the ethics debate surrounding MedSec's disclosure of vulnerabilities in St. Jude Medical devices. Casey Ellis contributed perspective on the security disclosure controversy and its implications for responsible vulnerability handling in the medical device industry.
Medical device security ignites an ethics firestorm
TechWorld AU published an article examining the ethical implications of MedSec's vulnerability disclosure tactics targeting St. Jude Medical devices. Casey Ellis commented on the responsible disclosure debate and the tensions between security researcher accountability and the need for device manufacturers to address vulnerabilities.
Medical device security ignites an ethics firestorm
CIO published an article examining the ethical controversy surrounding MedSec's disclosure of security flaws in St. Jude Medical devices. Casey Ellis discusses the tension between responsible disclosure practices and the public health implications of vulnerabilities in medical equipment.
Medical device security ignites an ethics firestorm
ITWorld published an article examining the ethics controversy surrounding MedSec's approach to disclosing vulnerabilities in medical devices. Casey Ellis discusses the tension between responsible disclosure practices and the urgent need to address security gaps in healthcare infrastructure.
Medical device security ignites an ethics firestorm
Network World published an article examining the ethical debate around MedSec's disclosure of vulnerabilities in St. Jude Medical devices. Casey Ellis is cited as a security professional weighing in on the responsible disclosure practices and industry implications of the vulnerability announcement.
Medical device security ignites an ethics firestorm
PCWorld published an article on the ethical controversy surrounding MedSec's vulnerability disclosure approach for St. Jude Medical devices. Casey Ellis commented on the disclosure methods and the broader implications for responsible security research in the medical device industry.
MedSec goes its own way with medical device flaw
SC Magazine reported on MedSec's unconventional approach to disclosing a medical device vulnerability, which included partnering with a short-selling firm to publicize the flaw. Casey Ellis commented on the disclosure strategy and its implications for responsible vulnerability handling in the medical device industry.
The media becomes the story as hackers focus efforts on news organizations
A 2016 article in SC Magazine examines the growing trend of hackers targeting news organizations and exploiting media infrastructure. Casey Ellis discusses how attacks on journalists and newsrooms represent a shift in threat landscape that affects public information flow and editorial independence.
Node Summit 2016 - Welcome to the blue team! Creating “oh shit” moments for fun and profit.
Node Summit 2016 published a talk by Casey Ellis on Vimeo titled "Welcome to the blue team! Creating 'oh shit' moments for fun and profit." Ellis discusses how developers can proactively identify security flaws in their own code before attackers find them.
Christian Science Monitor Passcode: In an age of digital insecurity, paying bug bounties becomes the norm
Christian Science Monitor's Passcode section published an article in August 2016 examining how bug bounty programs have become standard practice for companies addressing digital security vulnerabilities. Casey Ellis discusses the evolution of bug bounties as a security mechanism and their role in helping organizations identify and remediate software flaws at scale.
The Parallax: Why Apple's bug bounty is a big deal
The Parallax published an analysis in August 2016 examining Apple's decision to launch a bug bounty program and its significance for the security industry. Casey Ellis discusses why the initiative represented an important shift in how the company engages with external security researchers.
Unpacking bug bounties and vulnerability disclosure
A presentation titled Unpacking Bug Bounties and Vulnerability Disclosure was delivered at the 2016 Black Hat CISO Summit. Casey Ellis discussed the mechanics and best practices of bug bounty programs and structured vulnerability disclosure processes for security teams.
Enterprises partnering with Bugcrowd to hunt down software bugs
SD Times reported on enterprises increasingly partnering with Bugcrowd to leverage its hacker community for finding software vulnerabilities. The article highlighted how organizations use the platform's crowdsourced approach to identify and address security bugs at scale.
WELCOME TO THE BLUE TEAM! CREATING “OH SHIT” MOMENTS FOR FUN AND PROFIT.
A presentation at Node Summit in July 2016 titled "Welcome to the Blue Team! Creating 'Oh Shit' Moments for Fun and Profit." Casey Ellis discusses defensive security practices and methods for testing organizational readiness through simulated security events.
Uber Flaw Discovery Shows Why Bug Bountry Programs Are Important
A July 2016 eWEEK article examines a security flaw discovered at Uber and its implications for vulnerability disclosure programs. The piece uses the incident as a case study to illustrate why organizations benefit from maintaining active bug bounty initiatives to identify and address security gaps.