Casey Ellis, on the record.
1,355 items across 6 categories: press, broadcast, stage, and paperwork. Captured, displayed, and archived for posterity.
How to Turn Off Facebook’s Two-Factor Authentication Change
This WIRED article from November 16, 2023, explains how to turn off Meta's automatic trust for frequently used devices in Facebook's updated two-factor authentication process. Casey Ellis, founder and chief strategy officer at Bugcrowd, says that automatic device trust locks in long-term access to logged-in accounts, and he is uneasy about the change.
IBM: New Gootloader Variant Moves Laterally and Is Harder to Detect
Security Boulevard reports on a new Gootloader variant using a different method for command-and-control and lateral movement, making it harder for enterprise defenses to detect. Casey Ellis, chief strategy officer at Bugcrowd, calls the operation a very organized and thoughtful initial access broker whose opportunistic SEO deployment suits that attack model.
European reaction to Biden’s Executive Order on AI
The November 1, 2023 SC Media UK article on European reactions to Biden's Executive Order on AI covers a US order ensuring AI systems are extensively vetted before public release. Casey Ellis, CTO and founder of Bugcrowd, says the order reflects a proactive approach to managing AI's promise while mitigating its risks.
Global AI Cybersecurity Agreement Signed At Turing's Bletchley Park
This Dark Reading article from November 2023 covers a global agreement on AI cybersecurity signed at Bletchley Park, the British home of WWII codebreakers. Casey Ellis, founder and CTO of Bugcrowd, says the agreement shows global leaders taking a proactive approach to developing safe AI, calling the Bletchley Declaration a significant step forward.
BOLD TALKS with Casey Ellis founder of Bugcrowd
BOLD Talks is a 2023 broadcast video interview, hosted on YouTube and published by the BOLD Awards on October 27, 2023. In this episode of the series, Casey Ellis is featured as a guest speaker, and the program identifies him as the founder of the crowdsourced security platform Bugcrowd.
The EU’s Cyber Resilience Act needs some fine-tuning
This SC Media perspective column, dated October 16, 2023, is titled "The EU's Cyber Resilience Act needs some fine-tuning" and is written by Casey Ellis, Bugcrowd co-founder and CTO. Casey argues that the EU's proposed vulnerability disclosure rules could limit ethical researchers' access to VDP testing and invite attacks on exposed vulnerabilities.
Dave Gerry and Casey Ellis - TechSpective Podcast 119 - YouTube
TechSpective Podcast 119 features Dave Gerry and Casey Ellis discussing artificial intelligence's role in cybersecurity. Ellis examines how AI affects attack costs, expands access to technical expertise, and enables automation of reconnaissance and lateral movement tactics.
MGM Resorts Refused to Pay Ransom but Lost $100 Million in Wake of Cyberattack
A Gizmodo article from October 6, 2023, reports that MGM Resorts declined to pay a ransom after a September cyberattack that cost about $100 million. Casey Ellis, a cybersecurity expert, tells News3 Las Vegas that the cost is a lot of money, and that MGM's ability to recover suggests its defenses were not sufficient.
Russian Firm Looks to Corner the Market on Mobile Zero-Day Exploits With Standing Offer of up to $20 Million - CPO Magazine
This October 2023 CPO Magazine article covers Operation Zero, a Russian firm offering up to $20 million for mobile zero-day exploits. Casey Ellis, founder and CTO of Bugcrowd, notes these sales are highly regional and says dealing with Operation Zero would violate technology and financial transfer sanctions.
New EU vulnerability disclosure rules deemed an "unnecessary risk"
This IT Pro article from October 2023 examines how disclosure rules in the EU Cyber Resilience Act could affect security research. Casey Ellis, founder and CTO of Bugcrowd and a signatory to an open letter, told ITPro the rules could have a chilling effect on good-faith researchers and white hat hackers.
Russian Company Offers $20m For Non-NATO Mobile Exploits
This Infosecurity Magazine article, dated September 29, 2023, covers Operation Zero, a Russian firm offering up to $20 million for non-NATO mobile exploits. Casey Ellis, founder and CTO of Bugcrowd, says working with the firm would breach US technology and financial transfer sanctions, and calls the $20 million offer irrationally high for a full mobile chain.
Hackers Let Loose on Voting Gear Ahead of US Election Season
This Dark Reading article from September 2023 covers ethical hackers given voluntary access to voting scanners, ballot markers, and electronic pollbooks. Casey Ellis, founder and CTO of Bugcrowd, says in an emailed statement that security research happens whether vendors invite it or not, and that this approach makes the democratic process more resilient.
Hacker Conversations: Casey Ellis, Hacker and Ringmaster at Bugcrowd
This SecurityWeek interview, published September 19, 2023, is part of its Hacker Conversations series, written by Kevin Townsend. Casey Ellis, founder, chairman and CTO of Bugcrowd, explains his own definition of a hacker and discusses the crowdsourced ethical hacking platform that runs bug bounty programs for organizations.
The Future of Cybersecurity: Generative AI and its Implications
The Data Exchange with Ben Lorica published this September 14, 2023 podcast episode on generative AI and cybersecurity. Casey Ellis, Founder, Chair and CTO of Bugcrowd, discusses the security implications of AI and insights from the company's "Inside the Mind of a Hacker 2023" report on hacker motivations and specializations.
CoC Asks SEC for More Time to Implement Cyber Reporting Rule
This August 2023 Security Boulevard article reports that the U.S. Chamber of Commerce asked the SEC for more time to implement its proposed cyber incident reporting rules. Casey Ellis, founder and CTO of Bugcrowd, says the concerns are valid but near-total opacity stops shareholders from managing their own risk.
S06E06 - Bug Bounties Unleashed: A Deep Dive into Infosec with Casey Ellis, Founder of BugCrowd
This podcast episode, published August 24, 2023 by The RSnake Show on Apple Podcasts, features a conversation recorded in Las Vegas during Black Hat. In it, Casey explains how he moved into bug bounties, built BugCrowd, changed the economics of bug finding, and shares views on AI's fragility in security, entrepreneurship, and mentoring.
All Your Vulns Are Belong to Terms and Conditions
A talk titled "All Your Vulns Are Belong to Terms and Conditions" was presented at DEF CON 31 in August 2023. Casey Ellis examines how vulnerability disclosure policies and legal frameworks shape the security research landscape and researcher protections.
Joint Advisory Warns of Threat From IDOR Vulnerabilities
This Security Boulevard article reports on a joint ACSC, CISA and NSA advisory warning that insecure direct object reference (IDOR) flaws pose a major threat. Casey Ellis, founder and CTO of Bugcrowd, is quoted calling IDOR simple to abuse, since editing a number in a user's URL can expose another user's data.
Hungry, Hungry Hackers: A Hacker's Eye-view of the Food Supply
A talk at BSidesLV in August 2023, "Hungry, Hungry Hackers: A Hacker's Eye-view of the Food Supply" examines security vulnerabilities in food systems from an attacker's perspective. Casey Ellis discusses the threat landscape facing the food supply chain and the importance of addressing critical security gaps in this essential infrastructure.
CISA, Australia warn of IDOR vulnerabilities after major breaches
The Record published this July 28, 2023 news article on a joint CISA and Australian agency warning about IDOR vulnerabilities that let attackers alter or delete data. BugCrowd CTO Casey Ellis says changing a number in a URL can expose another user's data, and suggests the Optus breach likely prompted the advisory's timing.
The Rise of QR Codes Spurs Rise in 'Fresh Phish'
A July 2023 Security Boulevard article reports on INKY research showing attackers increasingly use QR codes to phish credentials. Casey Ellis, founder and CTO at Bugcrowd, says QR codes are inherently untrustworthy, yet the COVID-19 pandemic pushed them into highly trusted uses, which makes them an attractive delivery vehicle for attackers.
Hackers: We won't let artificial intelligence get the better of us | Computer Weekly
This Computer Weekly article from ComputerWeekly.com, published in July 2023, examines how artificial intelligence is changing the work of ethical hackers. Casey Ellis, Bugcrowd founder and CTO, says hacking is now seen as a skill and notes that under-18 participation rose from 3% to 6% year-on-year.
Inside the Mind of the Hacker: Report Shows Speed and Efficiency of Hackers in Adopting New Technologies
SecurityWeek published this 2023 article on Bugcrowd's Inside the Mind of the Hacker report, which shows how quickly hackers adopt new technologies, such as AI, to aid their hunting. Casey Ellis, Bugcrowd's founder and CTO, says AI should be viewed against hacking's history, noting Metasploit was built for good but also used for bad.
AI will outperform the average hacker in five years - say hackers - BetaNews
BetaNews published a July 2023 article on Bugcrowd's "In the Mind of a Hacker" report, which surveyed 1,000 white hat hackers and found 55 percent expecting AI to outperform the average hacker within five years. Casey Ellis, Bugcrowd's founder and CTO, asks what generative AI will mean for the human element.
Fear, Loathing, and Responsible Disclosure
This podcast episode titled Fear, Loathing, and Responsible Disclosure was released on July 11, 2023 by DEATH Labs: Cyber Threats and Research by Netenrich. Casey appears as a guest, co-founder of Bugcrowd and Disclose.io, discussing bug bounty programs, AI vulnerabilities, and how hackers make the world more secure.
ChatGPT’s maker has over 4,500 hackers looking for bugs
This June 23, 2023 article from The Record reports OpenAI's bug bounty drew over 4,500 researchers, trailing only Tesla. Casey Ellis, founder and CTO of Bugcrowd, says the noisy early response let Bugcrowd train less-skilled hackers, and he calls OpenAI a natural fit for bounties as a newer firm that seeks outside feedback.
Buggin' out w/ Casey John Ellis
This is a broadcast podcast episode from Trimarc Happy Hour, published June 22, 2023 on Apple Podcasts and titled "Buggin' out w/ Casey John Ellis." In the roughly one-hour conversation, Casey John Ellis, founder of Bugcrowd, talks about software bugs and all things bug-related on the show.
New KeePass Password Manager Exploit Can Draw a Plaintext Master Password From a Memory Dump - CPO Magazine
This CPO Magazine press article, published May 29, 2023, reports on a newly disclosed KeePass password manager exploit that can reconstruct a plaintext master password from traces left in system memory if that memory is dumped. Casey Ellis is credited in this press coverage, though no statement from him is attributed here.
KeePass master password manager at risk as users await patch
This Cybersecurity Dive article from May 23, 2023, covers a KeePass flaw that can expose master passwords typed directly into the app before a patch arrives. Casey Ellis, founder and CTO at Bugcrowd, says ransomware and malvertising make access to victim machines readily achievable, and he expects attackers to exploit KeePass before users patch.
Why Cybersecurity is a Human Problem and Talking Open Source AI with Casey Ellis of Bugcrowd
This podcast episode from The Scale Up Show, published May 14, 2023, features Casey Ellis of Bugcrowd discussing open source AI. In it, Casey, Bugcrowd's CEO, discusses AI and security with Ryan, explains the company's business model, and describes why OpenAI picked Bugcrowd as a partner to test its AI.