Casey Ellis, on the record.
1,355 items across 6 categories: press, broadcast, stage, and paperwork. Captured, displayed, and archived for posterity.
Inside the Mind of the Hacker: Report Shows Speed and Efficiency of Hackers in Adopting New Technologies
SecurityWeek published this 2023 article on Bugcrowd's Inside the Mind of the Hacker report, which shows how quickly hackers adopt new technologies, such as AI, to aid their hunting. Casey Ellis, Bugcrowd's founder and CTO, says AI should be viewed against hacking's history, noting Metasploit was built for good but also used for bad.
AI will outperform the average hacker in five years - say hackers - BetaNews
BetaNews published a July 2023 article on Bugcrowd's "In the Mind of a Hacker" report, which surveyed 1,000 white hat hackers and found 55 percent expecting AI to outperform the average hacker within five years. Casey Ellis, Bugcrowd's founder and CTO, asks what generative AI will mean for the human element.
Fear, Loathing, and Responsible Disclosure
This podcast episode titled Fear, Loathing, and Responsible Disclosure was released on July 11, 2023 by DEATH Labs: Cyber Threats and Research by Netenrich. Casey appears as a guest, co-founder of Bugcrowd and Disclose.io, discussing bug bounty programs, AI vulnerabilities, and how hackers make the world more secure.
ChatGPT’s maker has over 4,500 hackers looking for bugs
This June 23, 2023 article from The Record reports OpenAI's bug bounty drew over 4,500 researchers, trailing only Tesla. Casey Ellis, founder and CTO of Bugcrowd, says the noisy early response let Bugcrowd train less-skilled hackers, and he calls OpenAI a natural fit for bounties as a newer firm that seeks outside feedback.
Buggin' out w/ Casey John Ellis
This is a broadcast podcast episode from Trimarc Happy Hour, published June 22, 2023 on Apple Podcasts and titled "Buggin' out w/ Casey John Ellis." In the roughly one-hour conversation, Casey John Ellis, founder of Bugcrowd, talks about software bugs and all things bug-related on the show.
New KeePass Password Manager Exploit Can Draw a Plaintext Master Password From a Memory Dump - CPO Magazine
This CPO Magazine press article, published May 29, 2023, reports on a newly disclosed KeePass password manager exploit that can reconstruct a plaintext master password from traces left in system memory if that memory is dumped. Casey Ellis is credited in this press coverage, though no statement from him is attributed here.
KeePass master password manager at risk as users await patch
This Cybersecurity Dive article from May 23, 2023, covers a KeePass flaw that can expose master passwords typed directly into the app before a patch arrives. Casey Ellis, founder and CTO at Bugcrowd, says ransomware and malvertising make access to victim machines readily achievable, and he expects attackers to exploit KeePass before users patch.
Why Cybersecurity is a Human Problem and Talking Open Source AI with Casey Ellis of Bugcrowd
This podcast episode from The Scale Up Show, published May 14, 2023, features Casey Ellis of Bugcrowd discussing open source AI. In it, Casey, Bugcrowd's CEO, discusses AI and security with Ryan, explains the company's business model, and describes why OpenAI picked Bugcrowd as a partner to test its AI.
Bugcrowd plans to transform the penetration testing market through AI and white-hat hackers - SiliconANGLE
This SiliconANGLE article, published May 5, 2023, covers Bugcrowd's plan to transform penetration testing with AI and white-hat hackers. Casey Ellis, Bugcrowd's founder, chairman and chief technology officer, tells theCUBE analyst John Furrier that pentesting's inefficiency stems from how it is done, not from pentesters themselves.
Here’s What 15 Top CEOs And Cybersecurity Experts Told Us At RSAC 2023 | CRN
This article from CRN, published May 1, 2023, gathers interviews with 15 cybersecurity CEOs and experts at RSAC 2023. Casey Ellis, founder and CTO of Bugcrowd, is quoted arguing that small businesses matter to overall security because they connect to larger companies through the supply chain.
A Breach at LastPass Has Password Lessons for Us All
A New York Times article examines lessons from the LastPass breach and the role of password managers in cybersecurity. Casey Ellis discusses how password managers remain effective security tools despite recent high-profile compromises and outlines practices for mitigating breach risk.
Solving the problem of inefficient enterprise penetration testing - SiliconANGLE
This SiliconANGLE article from April 27, 2023, covers how Bugcrowd moved penetration testing online to make it faster and more accessible for enterprises. Casey Ellis, founder, chairman and chief technology officer of Bugcrowd, says the online model democratizes access to pen testing and that the process, not the testers, was the real problem.
Bugcrowd CTO talks hacker feedback, vulnerability disclosure | TechTarget
This TechTarget news article, filed from RSA Conference 2023, reports on Bugcrowd's new Penetration Testing as a Service offering. Casey Ellis, Bugcrowd's founder and CTO, says the company began in 2011 as a crowdsourced pentesting firm and that the service shows it is a multi-solution platform beyond bug bounties.
RSAC Interview w/ Casey Ellis & Dave Gerry, Bugcrowd
An April 2023 SiliconANGLE theCUBE broadcast features Casey Ellis and Dave Gerry from Bugcrowd discussing the company's crowdsourced security model. Ellis and Gerry explain how the platform enables individuals to earn income through bug bounty work while addressing growing market demand for vulnerability discovery at scale.
Hacking Policy Council launches, aims to improve bug disclosure | TechTarget
This April 2023 TechTarget article reports on the Center for Cybersecurity Policy and Law's launch of the Hacking Policy Council to improve bug disclosure. Bugcrowd founder and CTO Casey Ellis told TechTarget that good-faith research has been central to his company's mission, and he hopes the chilling effect on it fades.
Ethical Hackers Could Earn up to $20,000 Uncovering ChatGPT Vulnerabilities
This Infosecurity Magazine news article, published April 12, 2023, reports on OpenAI's bug bounty program, run with Bugcrowd, that rewards ethical hackers for finding ChatGPT vulnerabilities. Casey Ellis, founder and CTO of Bugcrowd, is quoted calling OpenAI's solicitation of hacker feedback huge and a continuing validation of hackers as the Internet's Immune System.
US ‘Strike Force’ Keeps Disruptive Tech From Adversaries
This Security Boulevard article from April 2023 reports on the Justice and Commerce departments' Disruptive Technology Strike Force, created to prosecute misuse of sensitive technology. Casey Ellis, Bugcrowd's founder and CTO, says securing technology at the technical level is the only true way to keep it from reaching the wrong hands.
Five Guys Data Breach Puts HR Data Under a Heat Lamp
Dark Reading published coverage of a data breach at Five Guys that exposed sensitive human resources data. Casey Ellis commented on the incident, discussing the security implications and response measures for restaurant chain data breaches.
Ethical hackers urged to respond to Computer Misuse Act reform proposals | Computer Weekly
Computer Weekly article from March 2023, published by ComputerWeekly.com, urges ethical hackers and security experts to respond to a government consultation on Computer Misuse Act reform. Casey Ellis, Bugcrowd's founder and CTO, urges the community to contribute, warning that poor legal protection could deter ethical hackers from helping.
ChatGPT Less Convincing Than Human Social Engineers in Phishing Attacks
This Security Boulevard article from March 28, 2023, reports on a Hoxhunt study comparing human-generated and AI-generated phishing simulations among Swedish and U.S. respondents. Casey Ellis, founder and CTO at Bugcrowd, called the results unsurprising, noting that AI can operate at a scale humans cannot, so greater phishing volume could offset lower effectiveness.
Call for Submissions to UK's New Computer Misuse Act
Infosecurity Magazine published this March 28, 2023 news article on the UK's call for industry submissions to its new Computer Misuse Act consultation. Bugcrowd founder Casey Ellis warns that weak legal protection could deter ethical hackers, and urges the UK to follow the US in clarifying protections for good-faith security research.
Hybrid Systems: AI and Humans Need Each Other for Effective Cybersecurity
Hybrid Systems: AI and Humans Need Each Other for Effective Cybersecurity is a press article published by Security Boulevard in March 2023 that examines the rise of generative AI and chatbots. In it, Casey Ellis, founder and CTO at Bugcrowd, argues that cybersecurity is fundamentally a human problem, noting that attackers continually innovate past automated defenses.
White House Cybersecurity Strategy Will Make Big Tech Step Up in Ongoing Cyber Struggle
This March 2023 ISC2 article examines the Biden administration's National Cybersecurity Strategy and its push for tech providers to take on more product security responsibility. Casey Ellis, CTO and founder of Bugcrowd, says the strategy's inclusion of Coordinated Vulnerability Disclosure and its invitation for community input bode well for crowdsourced security.
No Programming Skills? Chatbots Will Help Inexperienced Hackers
This March 2023 Security Boulevard article, "No Programming Skills? Chatbots Will Help Inexperienced Hackers," explores how chatbots lower barriers for attackers. Casey Ellis, Founder and CTO of Bugcrowd, said in an email interview that ChatGPT initially refused a harmful question but answered after he reframed it as a fictional novel.
Why You Should Listen to Twitter on Two-Factor Authentication (Published 2023)
This New York Times article, published by nytimes.com on February 23, 2023, examines why Twitter's push toward authenticator apps over text-message verification has merit. Casey Ellis, chief technology officer of the security firm Bugcrowd, says Twitter's concern about SMS-based authentication was valid, though the rollout was not handled cleanly.
Royal Mail Ransom Demand Transcript: Postal Service Called LockBit Ransomware Group’s $80M Demand “Ludicrous,” Attackers Wouldn’t Budge Much on Price - CPO Magazine
CPO Magazine's February 2023 article reports that leaked chats suggest the LockBit attack on Royal Mail would have cost at least $70 million. Casey Ellis, founder and CTO of Bugcrowd, notes that leaked ransomware negotiations are rare and offer unusual insight into how attackers pressure victims over time, if the logs are authentic.
Royal Mail Hung Tough in LockBit Ransom Negotiations
This Security Boulevard article reports on Royal Mail's ransom negotiations with LockBit after a January attack. Casey Ellis, founder and CTO of Bugcrowd, calls the logs a fascinating view of the people behind ransomware, noting that gang support and accounts roles are vulnerable to the same manipulation criminals use on victims.
Financial advisory firm Succession Wealth probes cyber attack | Computer Weekly
This ComputerWeekly.com article from February 2023 reports that Aviva-owned Succession Wealth is investigating an undisclosed security incident on 8 February. Casey Ellis, CTO and founder of Bugcrowd, says the reference to extra security measures and customer data could suggest ransomware, though only speculatively, and notes that the crisis response is as much about reputation.
LockBit and Royal Mail Ransomware Negotiation Leaked
Infosecurity Magazine published this February 2023 article on leaked LockBit logs showing ransomware negotiations with Royal Mail. Casey Ellis, founder and CTO of Bugcrowd, says that, presuming the logs are authentic, they give a fascinating view of the people running ransomware, including roles like customer support and accounts receivable.
Cisco warns of two vulnerabilities affecting end-of-life routers
This news article from The Record reports Cisco will not release fixes for two flaws in routers last sold in 2020. Casey Ellis, founder of Bugcrowd, says small business routers are widely deployed and the risk is "not just an SMB problem" since home and branch offices may use them.