Casey Ellis, on the record.
1,355 items across 6 categories: press, broadcast, stage, and paperwork. Captured, displayed, and archived for posterity.
NVIDIA and Arm Urge Customers to Patch Bugs
Infosecurity Magazine published a June 11, 2024 news article reporting that chip makers NVIDIA and Arm released details of new vulnerabilities, including a zero-day bug. Bugcrowd founder Casey Ellis calls CVE-2024-0090 concerning given its versatility and its reach across Windows and Linux, and he would not be surprised to see it in attack tooling.
Bugs on a Plane: Implementing a Bug Bounty in an Airline IT/OT Environment
A video presentation from RSAC Cybersecurity explores bug bounty implementation in airline IT and OT environments. Casey Ellis discusses the security challenges and operational considerations specific to aviation systems and the role of coordinated vulnerability disclosure in that sector.
International Law Enforcement Operation Cracks Down on Some of the Biggest Dropper Malware and Botnets - CPO Magazine
This CPO Magazine article reports on a Europol-led operation that disrupted dropper malware botnets, affecting over 100 servers and 2,000 domains across a dozen countries. Casey Ellis, founder and Chief Strategy Officer at Bugcrowd, praises the cross-country coordination and says the takedown shows attackers that capable, resourced defenders are in place.
Bug Bounty Hunter Casey Ellis
A YouTube video titled "Bug Bounty Hunter Casey Ellis" features an interview with Casey Ellis discussing his work and perspective on bug bounties. Ellis shares insights into how bug bounty programs function and their role in improving security practices across organizations.
Telecom firms say 5G is transforming industries from farming to manufacturing as they build in security from the start
This Business Insider article from May 24, 2024, reports on how telecom firms say 5G is transforming industries from farming to manufacturing while building security in from the start. Casey Ellis, founder and chief strategy officer of Bugcrowd, says telecom customers want security feedback on 5G systems to find and fix vulnerabilities.
Bugcrowd, the crowdsourced white-hat hacker platform, acquires Informer to ramp up its security chops | TechCrunch
This TechCrunch article, published May 23, 2024, reports on Bugcrowd's acquisition of Informer, a deal that positions the crowdsourced security platform as a consolidator. Casey Ellis, Bugcrowd's founder and chief strategy officer, says companies often approach the firm seeking a sale, while CEO Gerry sees the deal as the start of more acquisitions.
Will CISA's Secure by Design pledge be a catalyst for better software security?
This Security Boulevard article covers CISA's Secure by Design pledge, which 68 software makers, including Cisco, Google, and Amazon Web Services, signed to strengthen security within a year. Casey Ellis, CTO of Bugcrowd, praises the response, saying the goals are achievable with corporate will and funding, though doing security well is the biggest challenge.
Dave Gerry And Casey Ellis On Tackling AI Bias
Expert Insights published an interview with Dave Gerry and Casey Ellis from Bugcrowd at RSA 2024 on tackling AI bias. The two discuss how AI bias assessments can strengthen enterprise confidence in generative AI tools and large language models.
New Effort Aims to Improve Election Tech Vulnerability Tests
This GovTech article from May 2024 reports on a new IT-ISAC program bringing election system vendors and security researchers together to find and fix voting technology flaws. Bugcrowd CTO Casey Ellis, an advisory board member, says most reported issues were hardware or garden-variety software bugs and that open talk about flaws may curb panic.
Outsmarting Adversaries: Using AI for Security
BankInfoSecurity published an article on using artificial intelligence to outsmart adversaries in security operations. Casey Ellis discusses how organizations can leverage AI-driven approaches to detect and respond to threats more effectively than traditional security methods.
Outsmarting Adversaries: Using AI for Security
A GovInfoSecurity broadcast from May 2024 examines how adversaries leverage generative AI to enhance malicious activities and progress toward autonomous exploitation. Casey Ellis, founder of Bugcrowd, discusses defensive strategies and organizational approaches to counter AI-driven threats.
Builders and Breakers: Partnering for Secure Elections
At RSA Conference 2024, Casey Ellis spoke on a presentation examining how security researchers and election officials can work together to identify and address vulnerabilities in voting systems. Ellis discussed collaborative approaches to election security that balance the needs of researchers uncovering threats with the operational requirements of election administrators.
Builders and Breakers: Partnering for Secure Elections
Builders and Breakers: Partnering for Secure Elections is a presentation from RSA Conference held in May 2024. Casey Ellis discusses collaboration between security researchers and election officials to identify and address vulnerabilities in election infrastructure.
Bugs on a Plane: Implementing a Bug Bounty in an Airline IT/OT Environment
A presentation delivered at the 2024 RSA Conference explores the implementation of bug bounty programs within airline IT and operational technology environments. Casey Ellis discusses the technical and operational challenges of running coordinated vulnerability disclosure in safety-critical infrastructure settings.
San Francisco Moscone Center sees 40,000 people for cybersecurity-focused RSA Conference
CBS News Bay Area reported in May 2024 on the RSA Conference at San Francisco's Moscone Center, which drew over 40,000 attendees from 130 countries. The article covered the annual gathering of cybersecurity experts and entrepreneurs focused on industry trends and developments.
Flaw in R Creates Supply Chain Security Risks
The New Stack article, published May 2, 2024, reports that threat actors could exploit a vulnerability in the R programming language to insert malicious code, according to HiddenLayer. Bugcrowd founder Casey Ellis says open source code gives attackers a broader target space and urges developers to be careful with R.
UnitedHealth CEO Confirms Breach Tied to Stolen Credentials, No MFA
Infosecurity Magazine's May 2024 article reports that UnitedHealth CEO Andrew Witty told a House subcommittee that a breach stemmed from stolen credentials and no MFA. Casey Ellis, Bugcrowd's founder, says MFA would likely have prevented the attack chain, since any remote access tool with a leaked credential and no MFA could be the entry point.
Change Healthcare, compromised by stolen credentials, did not have MFA turned on
This Cybersecurity Dive article, published April 30, 2024, reports that Change Healthcare was compromised by stolen credentials on a remote access portal lacking multifactor authentication. Casey Ellis, founder of Bugcrowd, says MFA would likely have prevented the attack chain and that the software itself was probably not the initial access problem.
Nigeria, Romania, Russia, U.S. Among Top Cybercrime Nations
This Security Boulevard article, published April 24, 2024, ranks Russia, Ukraine, China, the United States, and Nigeria among the top cybercrime-producing nations. Casey Ellis, founder and chief strategy officer at Bugcrowd, says Russia's cybercrime ecosystem operates alongside state interests and calls Ukraine a hotbed of technical proficiency.
5G Hackathons – Casey Ellis – BTS #28
This broadcast segment from Security Weekly, distributed by SC Media, is titled "5G Hackathons" and was published on April 24, 2024. Casey discusses his recent involvement in an event that brought hackers and 5G technology together, and how bug bounty programs can improve the security of "things.
5G Hackathons - Casey Ellis - BTS #28
Below the Surface episode 28, published by Eclypsium and Security Weekly, features Casey Ellis discussing 5G hackathons and security challenges in emerging wireless infrastructure. Ellis addresses vulnerabilities in 5G environments and the role of coordinated security testing in identifying and addressing risks before widespread deployment.
Critical infrastructure may be the subject of disruptive cyberattacks
This Security Magazine article from March 2024 covers a White House warning that critical infrastructure may be targeted by attackers, along with security leaders' insights. Casey Ellis, Founder and Chief Strategy Officer at Bugcrowd, says poor infrastructure security and difficult modernization give attackers opportunity, while means and motive drive the threat.
Bugcrowd to accelerate global growth following capital raise - interview with founder Casey Ellis
Bugcrowd founder Casey Ellis discusses the company's $102 million capital raise led by General Catalyst in an interview with MySecurity Marketplace. Ellis outlines plans to accelerate global expansion and scale the platform's AI-powered crowdsourced security capabilities across new markets.
The Magnet Goblin group is leveraging one-day vulnerabilities
Security Magazine's March 21, 2024 article examines the Magnet Goblin threat actor group and its use of one-day vulnerabilities, drawing on reports from security vendors. Casey Ellis, founder and Chief Strategy Officer at Bugcrowd, is quoted noting that nation-state and financially motivated attackers have increasingly targeted 1-day and n-day vulnerabilities since 2020.
QNAP systems announces patches for several vulnerabilities
A March 2024 Security Magazine article reports that QNAP Systems released patches for several product vulnerabilities, including a critical flaw that could allow unauthenticated device access. Casey Ellis, Founder and Chief Strategy Officer at Bugcrowd, praises QNAP's proactive patching and alerts, noting that complex NAS software raises the likelihood of vulnerabilities.
Bugcrowd snaps up $102M for a 'bug bounty' security platform that taps 500K+ hackers | TechCrunch
This TechCrunch article from February 12, 2024, reports on Bugcrowd's $102 million purchase of a bug bounty security platform and the company's growth to more than 500,000 hackers. Casey Ellis, who co-founded Bugcrowd in Australia with Chris Raethke and Sergei Belokamen, is still with the company as chief strategy officer.
Bugcrowd raises $102 million to boost AI-powered crowdsourced security platform - Help Net Security
Help Net Security published this February 12, 2024 article reporting that Bugcrowd raised $102 million in strategic growth funding for its AI-powered crowdsourced security platform. Casey Ellis, Bugcrowd's Chief Strategy Officer, says the investment positions the platform, customers, and hacker community for growth toward the goal of helping defenders protect themselves and their users.
Bugcrowd Raises $102 Million
This SecurityWeek article from February 12, 2024 reports that Bugcrowd raised $102 million in strategic growth funding to accelerate growth and improve its platform. Casey Ellis, Bugcrowd founder and chief strategy officer, says the partnership enables the next phase of the category Bugcrowd pioneered and positions the platform, customers, and hacker community for growth.
Memory Safe: Casey Ellis
A Decipher Security Podcast episode titled Memory Safe features Casey Ellis, founder and CTO of Bugcrowd, discussing imposter syndrome and security concepts. Ellis explores his experience in the field and perspectives on building secure systems through practical insight.
Episode 8: The Bounty Mindset: Understanding the Psychology of Bug Bounty Hunters with Casey Ellis, Founder and Chief Strategy Officer of Bugcrowd
CyberPsych published this video podcast episode on January 16, 2024, focusing on the psychology of bug bounty hunters. Casey Ellis, founder and Chief Strategy Officer of Bugcrowd, discusses with Dr. Stacy Thayer the motivations behind bug bounties, what makes a good hunter, and why people join bounty programs.