Casey Ellis, on the record.
1,355 items across 6 categories: press, broadcast, stage, and paperwork. Captured, displayed, and archived for posterity.
Cryptominer Attacks Ramp Up, Focus on Persistence
A Dark Reading article examines the escalation of cryptomining attacks and their shift toward establishing persistent access on compromised systems. Casey Ellis discusses the technical sophistication of these attacks and their implications for enterprise security infrastructure.
Experts Comments Linux Malware (Skidmap) Illicit Cryptocurrency Mining
Information Security Buzz published expert commentary on Skidmap, a Linux malware strain used for illicit cryptocurrency mining. Casey Ellis provided analysis of the malware's capabilities and threat implications for systems running Linux environments.
Risky Business #556 -- US Treasury targets DPRK crews, more details on Ukraine power hack
Risky Business episode 556, published by Risky Business on September 17, 2019, covers US Treasury sanctions against North Korean crews and new details on the Ukraine power grid attack. Casey Ellis provides commentary and analysis on the week's major cybersecurity events and developments.
Serious Hackers Wear TWO Black Hoodies
The CISO/Security Vendor Relationship Podcast episode "Serious Hackers Wear TWO Black Hoodies" features a discussion on cybersecurity professional realities. Casey Ellis addresses hacker stereotypes and contributes perspectives on the relationship between security vendors and enterprise security leaders.
How bug bounties are fueling hacker entrepreneurs
The Parallax published an article examining how bug bounty programs enable security researchers to build sustainable careers and businesses. Casey Ellis discusses the economic model of bug bounties and their role in creating opportunities for independent security professionals and entrepreneurs.
The Next Frontier: Aerospace and Space Cybersecurity Panel
A panel discussion on aerospace and space cybersecurity aired on C-SPAN from the 10th Annual Billington Cybersecurity Summit. Casey Ellis participated in the discussion addressing security challenges in the aerospace and space sectors.
Apple's $1 million bug bounty makes a lot more sense after that iOS hacking spree
CyberScoop published an article examining Apple's $1 million bug bounty program in the context of a widespread iOS hacking campaign attributed to China. Casey Ellis is quoted discussing the economics of vulnerability disclosure and the competitive pressure Apple faces from exploit brokers offering substantial payments for zero-day exploits.
Industry Leaders Cite Need for Better Network Visibility in Federal IT Infrastructure
ExecutiveBiz published an article in August 2019 examining industry perspectives on network visibility gaps in federal IT infrastructure. Casey Ellis contributed insights on the need for improved visibility mechanisms within government technology systems.
How can the government improve its cyber posture?
The Fifth Domain published an article from Black Hat 2019 examining strategies for strengthening government cybersecurity posture. Casey Ellis contributed perspective on how federal agencies can enhance their defensive capabilities and security practices.
Risky Biz Soap Box: Casey Ellis on "match.com for hackers"
Risky Business published a Soap Box segment featuring Casey Ellis discussing the future of crowdsourced security. Ellis describes his vision for connecting security skills with organizational needs through a matchmaking platform model.
Bugcrowd and Bug Bounties | Cybrary | BlackHat 2019
A Cybrary video from BlackHat 2019 features Casey Ellis of Bugcrowd discussing the company's approach to security enablement. Ellis explains how bug bounty programs have gained adoption among senior corporate executives as a security practice.
Apple's New Bounty Program Has Huge Incentives, Big Risks
Dark Reading published an analysis of Apple's expanded bug bounty program and its large potential payouts alongside associated risks. Casey Ellis provided commentary on the incentive structure and implications of Apple's approach to vulnerability disclosure and researcher engagement.
Air Force cloud had 54 vulnerabilities before hackers found them
Federal News Network reported that the U.S. Air Force's cloud environment contained 54 vulnerabilities before security researchers identified them through the service's bug bounty program. Casey Ellis commented on how the program successfully enabled proactive discovery of these flaws rather than waiting for malicious actors to find them.
What government can do to keep its cyber workforce
An August 2019 article in The Fifth Domain examines strategies for the government to attract and retain cybersecurity personnel. Casey Ellis contributes commentary on workforce retention approaches in the federal cyber sector.
Air Force cloud had 54 vulnerabilities before hackers found them
Federal Drive with Tom Temin broadcast an episode on August 12, 2019 about an Air Force cloud system that contained 54 vulnerabilities before external researchers discovered them. Casey Ellis commented on the effectiveness of the Air Force's bug bounty program in identifying security issues ahead of potential attackers.
Bugcrowd Paid Over $500K in Bug Bounties in One Week
Bleeping Computer reported that Bugcrowd paid out over $500,000 in bug bounties to researchers in a single week, marking a significant milestone for the platform. Casey Ellis, Bugcrowd's founder and CEO, commented on the achievement as a reflection of the growing security researcher community's effectiveness in identifying and reporting vulnerabilities.
Apple bug bounty expands to MacOS, offers $1 million iOS reward
TechTarget reported on Apple's expansion of its bug bounty program to include macOS and announcement of up to $1 million rewards for critical iOS vulnerabilities. Casey Ellis commented on the significance of Apple's increased commitment to security research incentives and vulnerability disclosure.
Bugcrowd University Expands Education and Training for Whitehat Hackers
Bugcrowd University, the company's educational platform for cybersecurity professionals, expanded its training offerings according to an announcement covered by Yahoo Finance. Casey Ellis, Bugcrowd's founder and CTO, oversaw the platform's growth to develop whitehat hacker talent and advance the security community's capabilities.
CyRise Sessions with Casey Ellis
CyRise Sessions podcast published an episode featuring Casey Ellis discussing cybersecurity startup development and industry innovation. Ellis shares perspectives on building a security company and approaches to driving innovation within the sector.
The Air Force sends good guys in to hack its cloud
The Fifth Domain reported on the U.S. Air Force's use of ethical hackers to test cloud security vulnerabilities through a bug bounty program. Casey Ellis discussed the program's approach to identifying and addressing cloud infrastructure weaknesses before malicious actors could exploit them.
BuzzFeed, Sony and How Not to Use Branded Items (Hint: Not Instead of Payment)
Promo Marketing Magazine published an article examining Sony's controversial practice of offering branded merchandise instead of cash payment for bug bounties. The piece uses Sony's approach as a cautionary example of mishandling security researcher compensation and brand partnerships.
The 26 Aussie tech founders rocking the US
ACS profiled 26 Australian tech founders who have built successful ventures in the United States in an August 2019 feature. Casey Ellis appears among the founders recognized for his work establishing Bugcrowd, a platform connecting organizations with security researchers.
Risky Business #549 -- FSB contractor breached, Equifax fined, NSO Group targets cloud
Risky Business podcast episode 549 covered major security breaches including an FSB contractor incident and the Equifax settlement. Casey Ellis discussed the week's security developments and their implications for the industry.
Risky Business #549 -- FSB contractor breached, Equifax fined, NSO Group targets cloud
Risky Business podcast episode 549 from July 2019 covers major security incidents including an FSB contractor breach and the Equifax settlement. Casey Ellis discusses these developments and other news stories from the week.
Have you patched BlueKeep yet?
Securiosity podcast episode from July 2019 featured Casey Ellis discussing the critical BlueKeep vulnerability affecting Windows systems. Ellis emphasized the importance of patching and outlined the risks organizations faced if they delayed addressing the flaw.
#026 Casey Ellis: I Enjoy Thinking Like a Criminal
Cyber Security Interviews published episode 026 featuring Casey Ellis on July 17, 2019. Ellis discusses the mindset needed for effective security work and the value of creative, adversarial thinking in the field.
Communication, communication – and politics: Iowa saga of cuffed infosec pros reveals pentest pitfalls
The Register published an analysis of the arrest of Coalfire penetration testers in Iowa and its implications for cybersecurity professionals. Ellis examines the legal risks penetration testers face when conducting authorized security assessments and the importance of clear communication and documentation to protect both testers and clients.
EA Origin security flaw potentially exposed data of 300 million players
BGR reported on a security flaw in EA's Origin platform that potentially exposed data for 300 million players. Casey Ellis commented on the risks associated with the vulnerability and its implications for player security.
A Origin That Could Have Exposed 300 Million Players To Account Takeovers
Information Security Buzz published expert commentary on a vulnerability in EA's Origin service that could have exposed 300 million player accounts to takeover attacks. Casey Ellis discussed the security flaw and its potential impact on the gaming platform's user base.
EA Origin Security Flaw Potentially Left 300 Million Players Exposed
A TechRaptor article from June 2019 details a significant security flaw in EA's Origin platform that potentially exposed 300 million player accounts to attack. Casey Ellis provides analysis on the vulnerability and its implications for the gaming platform's user base.