Media Packet · Press
845 items
845 items
Press
Bugcrowd hosted a webinar on a zero-day vulnerability affecting multiple Apple products, published on August 24, 2022. Casey Ellis participated in the discussion of CVE-2022-32893 and its implications for Apple users and security teams.
Press
Dark Reading published an article on Twitter's security practices based on whistleblower Peiter Zatko's complaint to regulators. Zatko characterized Twitter's security posture as a nightmare marked by mismanagement and inadequate safeguards for user data.
Press
Protocol published an article examining the security and business implications of Twitter's whistleblower complaint from the company's former head of security. Casey Ellis commented on the incident and its broader significance for platform security practices and accountability.
Press
The Zero Day Initiative announced a policy change regarding disclosure of vulnerabilities with faulty or incomplete patches, as reported by Duo Security. Casey Ellis noted the initiative's shift to provide clearer timelines and expectations for vendors releasing defective patches to address coordination gaps.
Press
IT Security Guru reported on multiple DDoS attacks targeting Taiwan following House Speaker Nancy Pelosi's arrival in the country. Casey Ellis commented on the incident's geopolitical implications and the operational security challenges such coordinated attacks pose to critical infrastructure during politically sensitive events.
Press
A Channel Futures report covers the U.S. government's decision to double its reward to $10 million for information on North Korean state-sponsored cyberattackers. The piece documents the government's escalating efforts to identify and hold accountable those responsible for major cyber operations attributed to North Korea.
Press
Security Boulevard published an opinion piece by Casey Ellis examining the relationship between software developers and security researchers and their need for stronger collaboration. Ellis argues that builders and breakers must work together more effectively to improve overall software security outcomes.
Press
A Wall Street Journal article from July 2022 examines the practice of cryptocurrency firms negotiating directly with hackers following thefts, offering them financial incentives to return most of the stolen funds. Casey Ellis is cited on the rationale behind such negotiations and their implications for security practices in the crypto industry.
Press
A Computer Weekly news item addresses security concerns following discovery of a critical vulnerability in Atlassian's Confluence software. Casey Ellis comments on the vulnerability's implications and the importance of prompt remediation for affected organizations.
Press
Channel Futures reported that T-Mobile agreed to pay $350 million to settle a class-action lawsuit stemming from a major data breach. Casey Ellis commented on the settlement's implications for corporate accountability and data protection standards in the telecommunications industry.
Press
TheStreet published an article comparing the security and privacy features of messaging apps including Signal and WhatsApp. Casey Ellis contributed analysis on how these platforms protect user data and the technical differences in their encryption approaches.
Press
A CISO Series article examines how current geopolitical and social events directly impact organizational security posture and threat landscape. Casey Ellis discusses the connection between real-world events and evolving security risks that organizations must monitor and address in their defense strategies.
Press
Ars Technica reported on a critical vulnerability in Atlassian's Confluence software stemming from a hardcoded password that Atlassian warned was likely to be actively exploited. Casey Ellis contributed analysis on the security implications and exploitation risk of the flaw for the article.
Press
The Record by Recorded Future reported on Atlassian's advisory regarding multiple critical vulnerabilities in its products being potentially exploited in the wild, including a hardcoded password flaw. Casey Ellis commented on the significance of the vulnerabilities and their potential impact on affected organizations.
Press
Fed Scoop reported on the U.S. Department of Labor's launch of a 120-day Cybersecurity Apprenticeship Sprint to address the shortage of cyber professionals. Casey Ellis contributed to the initiative as part of efforts to expand apprenticeship pathways in the cybersecurity field.
Press
Dark Reading published an analysis of the LAPSUS$ extortion group and their operational tactics in July 2022. The article examines the group's social engineering and data theft methods, with Casey Ellis contributing insight on the persistence of the threat despite the group's irregular activity patterns.
Press
Silicon Angle reported in July 2022 on the U.S. Departments of Labor and Commerce launching a new cybersecurity apprenticeship program designed to address a significant workforce shortage. Casey Ellis contributed perspective on the initiative's potential to build a stronger pipeline of skilled cybersecurity professionals into the market.
Press
Security Magazine published a piece on the Cybersecurity Apprenticeship Sprint, a federal initiative designed to build the U.S. cybersecurity workforce through registered apprenticeships. Ellis contributed to the effort as an advocate for practical, hands-on training models that address the cybersecurity skills gap.
Press
A Security Boulevard article from July 2022 covers the Cyber Safety Review Board's inaugural report examining the Log4j vulnerability and its sustained threat to organizations. Casey Ellis contributed to the CSRB's findings on Log4j's systemic risk and the need for coordinated remediation efforts across the technology sector.
Press
Business Insider published a 2022 article on building a cybersecurity career resume amid industry talent shortages. Casey Ellis discusses the skills and qualifications employers seek when hiring for high-paying roles in the field.
Press
Business Insider published a careers article on landing high-paying cybersecurity roles in the US job market. Casey Ellis contributed advice on résumé strategies and in-demand skills needed to address the industry's talent shortage.
Press
Security Magazine published an article examining the collaborative response from the global cybersecurity community to the Log4j vulnerability crisis. The piece highlights the collective efforts and dedication demonstrated by security professionals in addressing this widespread threat.
Press
Bank Info Security published "Crime Watch: Why Are Ransomware Attacks Intensifying?" discussing ransomware trends and the Cyber Safety Review Board's Log4j vulnerability investigation. Casey Ellis contributes analysis on the escalating ransomware threat landscape and factors driving increased attack frequency against organizations.
Press
Duo Security published coverage of the Cyber Safety Review Board's report on the Log4j vulnerability, which characterizes the flaw as an endemic risk to critical infrastructure. Casey Ellis contributed analysis on how attacker exploitation methods will continue to adapt and evolve over time.
Press
A July 2022 article in The Record by Recorded Future examines concerns among security leaders following Joe Sullivan's conviction, with worry that CISOs will face increased legal liability for breaches. Casey Ellis is quoted discussing the risks of scapegoating security executives and the need for clearer accountability frameworks across organizations and boards.
Press
Tech Radar reported on the U.S. Department of Defense's launch of "Hack U.S.," a bug bounty program that crowdsources security testing to ethical hackers. Casey Ellis contributed to the coverage by discussing how coordinated vulnerability disclosure and bug bounty initiatives strengthen defense systems against emerging threats.
Press
A report from The Record by Recorded Future covers warnings from cybersecurity researchers and the NSA regarding active exploitation of a critical Zyxel firewall vulnerability. The alert details the remotely exploitable flaw and advises organizations on mitigation steps to protect their network infrastructure from ongoing attacks.
Press
VentureBeat reported on the Department of Defense's launch of a new bug bounty program focused on strengthening security collaboration with ethical hackers. Casey Ellis contributed to the announcement, supporting the DoD's effort to engage the broader security research community in identifying and addressing vulnerabilities across federal systems.
Press
TechNews World published a 2022 article on the expanding appeal of bug bounty hunting as a career path for security professionals. The piece explores how competitive payouts and flexible work arrangements draw security talent to the bug bounty model.
Press
Security Week reported on the emergence of LockBit 3.0 ransomware in June 2022, noting the operation's unusual creation of its own bug bounty program to identify flaws in its malware. Casey Ellis commented on the development as part of industry analysis of the ransomware threat landscape and emerging tactics used by criminal operations.