Carl Livitt is a Bishop Fox alumnus. He was a Principal Researcher at Bishop Fox with decades of experience in mobile and application security, hardware and embedded devices, reverse engineering, and global-scale penetration testing.
Carl is credited with the discovery of many vulnerabilities within both commercial and open-source software. He was brought in as a third-party expert to lead the team that confirmed several security issues with St. Jude Medical implantable devices. His work eventually led to an official communication from the FDA.
Carl has served as a contributing author to Hacking Exposed Web Applications 3rd Edition as well as a technical advisor for Network Security Assessment 1st Edition. He has been interviewed on NPR and quoted in publications including USA Today and eWeek. Carl co-authored the iOS reverse engineering framework iSpy, which was featured at Black Hat USA's Tools Arsenal.
From Carl Livitt
Blog / Technical Research
A More Complete Exploit for Fortinet CVE-2022-42475
May 17, 2023
Blog / Technical Research
Creating an Exploit: SolarWinds Vulnerability CVE-2021-35211
Jan 13, 2022
Blog / Technical Research
Zero-Day Collaboration: Working With Imperva to Eliminate a Critical Exposure
Jan 11, 2022
Blog / Industry
On Apple, Encryption, and Privacy: A Word About Decryption
Mar 31, 2016
Blog / Technical Research
Rethinking & Repackaging iOS Apps: Part 2
May 04, 2015
Blog / Technical Research
Rethinking & Repackaging iOS Apps: Part 1
Feb 24, 2015
Blog / Industry
LinkedIn 'Intro'duces Insecurity
Oct 23, 2013
Blog / Industry
Guide to Hardening Your Firefox Browser in OS X
May 22, 2013
Blog / Technical Research
SSL Key Generation Weaknesses
Mar 08, 2012
Blog / Advisories
Oracle WebLogic Node Manager allows arbitrary configuration via UNC path
Oct 12, 2010
