Casey Ellis, on the record.
1,355 items across 6 categories: press, broadcast, stage, and paperwork. Captured, displayed, and archived for posterity.
San Francisco Moscone Center sees 40,000 people for cybersecurity-focused RSA Conference
CBS News Bay Area reported in May 2024 on the RSA Conference at San Francisco's Moscone Center, which drew over 40,000 attendees from 130 countries. The article covered the annual gathering of cybersecurity experts and entrepreneurs focused on industry trends and developments.
Flaw in R Creates Supply Chain Security Risks
The New Stack article, published May 2, 2024, reports that threat actors could exploit a vulnerability in the R programming language to insert malicious code, according to HiddenLayer. Bugcrowd founder Casey Ellis says open source code gives attackers a broader target space and urges developers to be careful with R.
UnitedHealth CEO Confirms Breach Tied to Stolen Credentials, No MFA
Infosecurity Magazine's May 2024 article reports that UnitedHealth CEO Andrew Witty told a House subcommittee that a breach stemmed from stolen credentials and no MFA. Casey Ellis, Bugcrowd's founder, says MFA would likely have prevented the attack chain, since any remote access tool with a leaked credential and no MFA could be the entry point.
Change Healthcare, compromised by stolen credentials, did not have MFA turned on
This Cybersecurity Dive article, published April 30, 2024, reports that Change Healthcare was compromised by stolen credentials on a remote access portal lacking multifactor authentication. Casey Ellis, founder of Bugcrowd, says MFA would likely have prevented the attack chain and that the software itself was probably not the initial access problem.
Nigeria, Romania, Russia, U.S. Among Top Cybercrime Nations
This Security Boulevard article, published April 24, 2024, ranks Russia, Ukraine, China, the United States, and Nigeria among the top cybercrime-producing nations. Casey Ellis, founder and chief strategy officer at Bugcrowd, says Russia's cybercrime ecosystem operates alongside state interests and calls Ukraine a hotbed of technical proficiency.
5G Hackathons – Casey Ellis – BTS #28
This broadcast segment from Security Weekly, distributed by SC Media, is titled "5G Hackathons" and was published on April 24, 2024. Casey discusses his recent involvement in an event that brought hackers and 5G technology together, and how bug bounty programs can improve the security of "things.
5G Hackathons - Casey Ellis - BTS #28
Below the Surface episode 28, published by Eclypsium and Security Weekly, features Casey Ellis discussing 5G hackathons and security challenges in emerging wireless infrastructure. Ellis addresses vulnerabilities in 5G environments and the role of coordinated security testing in identifying and addressing risks before widespread deployment.
Critical infrastructure may be the subject of disruptive cyberattacks
This Security Magazine article from March 2024 covers a White House warning that critical infrastructure may be targeted by attackers, along with security leaders' insights. Casey Ellis, Founder and Chief Strategy Officer at Bugcrowd, says poor infrastructure security and difficult modernization give attackers opportunity, while means and motive drive the threat.
Bugcrowd to accelerate global growth following capital raise - interview with founder Casey Ellis
Bugcrowd founder Casey Ellis discusses the company's $102 million capital raise led by General Catalyst in an interview with MySecurity Marketplace. Ellis outlines plans to accelerate global expansion and scale the platform's AI-powered crowdsourced security capabilities across new markets.
The Magnet Goblin group is leveraging one-day vulnerabilities
Security Magazine's March 21, 2024 article examines the Magnet Goblin threat actor group and its use of one-day vulnerabilities, drawing on reports from security vendors. Casey Ellis, founder and Chief Strategy Officer at Bugcrowd, is quoted noting that nation-state and financially motivated attackers have increasingly targeted 1-day and n-day vulnerabilities since 2020.
QNAP systems announces patches for several vulnerabilities
A March 2024 Security Magazine article reports that QNAP Systems released patches for several product vulnerabilities, including a critical flaw that could allow unauthenticated device access. Casey Ellis, Founder and Chief Strategy Officer at Bugcrowd, praises QNAP's proactive patching and alerts, noting that complex NAS software raises the likelihood of vulnerabilities.
Bugcrowd snaps up $102M for a 'bug bounty' security platform that taps 500K+ hackers | TechCrunch
This TechCrunch article from February 12, 2024, reports on Bugcrowd's $102 million purchase of a bug bounty security platform and the company's growth to more than 500,000 hackers. Casey Ellis, who co-founded Bugcrowd in Australia with Chris Raethke and Sergei Belokamen, is still with the company as chief strategy officer.
Bugcrowd raises $102 million to boost AI-powered crowdsourced security platform - Help Net Security
Help Net Security published this February 12, 2024 article reporting that Bugcrowd raised $102 million in strategic growth funding for its AI-powered crowdsourced security platform. Casey Ellis, Bugcrowd's Chief Strategy Officer, says the investment positions the platform, customers, and hacker community for growth toward the goal of helping defenders protect themselves and their users.
Bugcrowd Raises $102 Million
This SecurityWeek article from February 12, 2024 reports that Bugcrowd raised $102 million in strategic growth funding to accelerate growth and improve its platform. Casey Ellis, Bugcrowd founder and chief strategy officer, says the partnership enables the next phase of the category Bugcrowd pioneered and positions the platform, customers, and hacker community for growth.
Memory Safe: Casey Ellis
A Decipher Security Podcast episode titled Memory Safe features Casey Ellis, founder and CTO of Bugcrowd, discussing imposter syndrome and security concepts. Ellis explores his experience in the field and perspectives on building secure systems through practical insight.
Episode 8: The Bounty Mindset: Understanding the Psychology of Bug Bounty Hunters with Casey Ellis, Founder and Chief Strategy Officer of Bugcrowd
CyberPsych published this video podcast episode on January 16, 2024, focusing on the psychology of bug bounty hunters. Casey Ellis, founder and Chief Strategy Officer of Bugcrowd, discusses with Dr. Stacy Thayer the motivations behind bug bounties, what makes a good hunter, and why people join bounty programs.
Hunters + Unicorns Special Edition
This Special Edition episode of the Hunters and Unicorns podcast, published by Hunters and Unicorns on January 12, 2024, features Casey Ellis and Bugcrowd CEO Dave Gerry. Ellis recounts how he built Bugcrowd, a platform for ethical hackers, and the pair discuss the company's move beyond its founder-led roots.
LLM series - Bugcrowd: A vulnerability rating taxonomy for LLMs
This Computer Weekly Developer Network interview, published by Computer Weekly on 5 January 2024, covers Bugcrowd's Vulnerability Rating Taxonomy for Large Language Models. Casey Ellis, Bugcrowd's founder and chief strategy officer, says the taxonomy helps frame AI security discussions and, through white hat scrutiny, could improve LLM security, transparency, and trust.
Hacker Heroes – Casey Ellis – PSW Vault
This Security Weekly podcast segment, distributed by SC Media on January 3, 2024, is an interview called Hacker Heroes featuring Casey Ellis. Casey, founder and CTO of Bugcrowd, discusses crowdsourced cybersecurity, the platform he built, and his mission to democratize cybersecurity in response to the evolving threat landscape.
Hacker Heroes - Casey Ellis - PSW Vault - YouTube
A Security Weekly video interview examines bug bounty program management and the relationship between organizations and security researchers. Ellis discusses building trust in bounty programs through clear expectations, appropriate rewards, and respectful treatment of hackers.
The Adversarial Podcast - Casey Ellis appearance
The Adversarial Podcast features an appearance by Casey Ellis discussing cybersecurity strategy and threat assessment. Ellis addresses how organizations can tailor their security approaches to match their specific threat profiles and operational context.
Top 100 Innovators (2024) issued by the Australian
The Australian's "The List: Top 100 Innovators 2024" named Casey Ellis among 100 Australian inventors and entrepreneurs recognized for innovation. Ellis was highlighted for his work founding Bugcrowd and advancing cybersecurity innovation, including his transition into a strategic growth role at the company in late 2023.
#87 - Hacker History: The Colonial Pipeline
The Cybersecurity Defenders Podcast, published December 28, 2023, is an episode recounting the May 2021 Colonial Pipeline ransomware attack that halted operations and led to a ransom payment. Casey Ellis, Founder and CSO at Bugcrowd, joins as a guest to help tell the story of the attack and its aftermath.
Inside Bugcrowd's plans to “demystify” AI security with new vulnerability reporting scheme
This IT Pro article, published December 20, 2023, examines Bugcrowd's plan to add vulnerabilities in large language models to its Vulnerability Rating Taxonomy (VRT). In it, chief strategy officer Casey Ellis says the standardized approach helps demystify the technology, broaden hacker participation, and create more transparent vulnerability reporting.
The Unlikely Romance of Hackers and Government Suitors
This Dark Reading commentary from December 14, 2023, examines how most federal infrastructure is managed by contractors and how hackers and government officials interact. Casey Ellis, principal at Tall Poppy Group, argues that decades of hacker community education and Capitol Hill partnership produced bills like this one.
Critical Cisco SMB Router Flaw Allows Authentication Bypass, PoC Available Critical Cisco SMB Router Flaw Allows Authentication Bypass, PoC Available Critical Cisco SMB Router Flaw Allows Authentication Bypass, PoC Available
A Dark Reading article details a critical authentication bypass vulnerability in Cisco small-to-medium business routers with publicly available proof-of-concept exploit code. Casey Ellis contributed security analysis and context on the vulnerability's impact and remediation guidance for affected organizations.
401 Access Denied Podcast Ep. 94
This broadcast episode, Ep. 94 of the 401 Access Denied Podcast, was published by 401 Access Denied on November 29, 2023. Casey Ellis, founder of Bugcrowd, appears as a guest alongside host Joseph Carson to discuss coordinated vulnerability disclosure and its evolution within the cybersecurity field.
Why transparency and accountability are important in cyber security | Computer Weekly
This opinion column, titled "Why transparency and accountability are important in cyber security," was published by ComputerWeekly.com on 21 November 2023. Casey Ellis, founder and chief strategy officer at Bugcrowd, argues that accepting human fallibility with good grace could improve cyber standards, and he opens by invoking Auguste Kerckhoffs and Claude Shannon.
Hacking is not a crime, criminal activity is
IT Pro, a technology news publisher, ran this 2023 press piece arguing that the law should draw a clearer line between ethical hacking and cyber crime. Casey Ellis, founder of the crowdsourced security platform Bugcrowd, warns that weak legal protection could discourage ethical hackers and urges the UK to mirror US reforms.
Cyber Incident at DP World Australia Shut Down Port Operations, Backed Up 30,000 Shipping Containers - CPO Magazine
This CPO Magazine article covers a cyber incident at DP World Australia that shut down port operations and backed up about 30,000 shipping containers. Casey Ellis, founder and Chief Strategy Officer at Bugcrowd, says the outsized effect of such an attack on markets and supply chains is what makes this target unique.