Casey Ellis, on the record.
1,355 items across 6 categories: press, broadcast, stage, and paperwork. Captured, displayed, and archived for posterity.
Midsize Companies Still Struggle with Security
This Security Boulevard article from November 2021, titled "Midsize Companies Still Struggle with Security," examines cybersecurity challenges facing midsize organizations. Casey Ellis, founder and CTO of Bugcrowd, says the main midmarket weaknesses are attack surface drift, patch management, and application security, and suggests vulnerability disclosure programs to address them.
Why Reporting Security Bugs Can Be Fraught With Tension
This 2021 video interview from BankInfoSecurity examines the tensions researchers face when reporting vulnerabilities to organizations without disclosure policies. Casey Ellis, founder, CTO and chairman of Bugcrowd, says legal protections are needed for responsible researchers, who function as the internet's immune system, and he is involved with Disclose.io, a safe harbor initiative.
Patching Process Remains a Security Bottleneck
This October 2021 Security Boulevard article, Patching Process Remains a Security Bottleneck, covers why patching stays slow and complex. Casey Ellis, founder and CTO of Bugcrowd, calls patch management one of the unavoidable chores of IT management and says failures usually stem from incomplete asset inventories.
Cyber-security threat hunters seek legal protections
Published by The Register on October 11, 2021, this article reports on efforts by the Cybersecurity Advisors Network to secure legal protections for cyber-security threat hunters. Casey Ellis, founder, chair, and CTO of Bugcrowd, is among the figures who endorse the network's efforts, alongside Katie Moussouris and Ciaran Martin.
Cybersecurity Awareness Month with Casey Ellis, CTO, Bugcrowd and Beau Woods, Senior Advisor, CISA
The CyberWire published a video segment featuring Casey Ellis, CTO of Bugcrowd, and Beau Woods, Senior Advisor at CISA, discussing cybersecurity awareness during October 2021. Ellis and Woods explored implications of recent security incidents for security leaders and organizational defense strategies.
Compliance and "The Crowd", Part 1 - Casey Ellis - SCW #88
Compliance and "The Crowd", Part 1 is a video podcast episode from Security and Compliance Weekly, released September 28, 2021 as episode 88. In it, Casey joins Jeff to examine how crowdsourced and multi-sourced risk assurance approaches hold up when measured against established security compliance standards.
Compliance and “The Crowd”, Part 2 – Casey Ellis – SCW #88
This podcast segment, released September 28, 2021, is Part 2 of Compliance and The Crowd from episode 88 of Security Weekly, published by SC Media. Casey Ellis appears as a guest in the segment, which explores how crowd-based security approaches fit within broader security compliance work.
Consumer Cyber Stress Requires Focus on Security
This Security Boulevard article from September 27, 2021, examines rising consumer cybersecurity stress and how organizations can respond to it. Casey Ellis, founder and CTO of Bugcrowd, says consumer stress has become a political issue that is not going away, and he argues that product makers should make risky decisions as difficult as possible.
5 Tips for Achieving Better Cybersecurity Risk Management
This InfoSec Insider article from Threatpost, published September 23, 2021, offers five tips for improving cybersecurity risk management. Bugcrowd founder, CTO and chairman Casey Ellis argues that every dollar spent on security controls should deliver the defense the organization expects, and that redundant tools can be merged, removed or restructured.
No Bounty for Bug Hunters in India
This September 2021 BankInfoSecurity article, published by Information Security Media Group, examines obstacles facing bug bounty hunters in India, such as trust and payment disputes. Casey Ellis, founder, chairman and CTO of Bugcrowd, says fintech and e-commerce firms draw attention from diverse threat actors, and that bug bounty programs can help them set defenses.
CC7 D02 T02 12PM Casey Ellis, Bugcrowd, The Unlikely Romance
A sponsor interview segment from the Risky Business podcast features Casey Ellis discussing the current state of bug bounties and crowdsourced security. Ellis addresses market trends and the evolving relationship between organizations and external security researchers in vulnerability disclosure.
CISA releases advisory on five Apache HTTP server vulnerabilities affecting Cisco products
CISA released an advisory through ZDNet warning of five vulnerabilities in Apache HTTP Server that affect Cisco products and require immediate patching. Casey Ellis commented on the advisory's implications for enterprise security teams managing affected infrastructure.
16 Business And Industry Functions Being Transformed By AI
This Forbes Technology Council article, published September 9, 2021, outlines 16 business and industry functions that artificial intelligence is transforming. Casey Ellis of Bugcrowd is quoted in the content delivery section, saying AI's role in news and social media shapes what people believe, which in turn transforms the businesses serving those markets.
Infosec researchers say Apple’s bug-bounty program needs work
This September 2021 Ars Technica article reports that infosec researchers say Apple's bug-bounty program pays less and more slowly than competitors. Bugcrowd founder Casey Ellis says companies should pay researchers when reported bugs lead to code changes closing a vulnerability, even if the bug fails the company's strict reading of its guidelines.
Microsoft Sounds Alarm on Zero-Day Aimed at Office
The item is a Security Boulevard article from September 9, 2021, reporting Microsoft's warning about an MSHTML remote code execution flaw in Windows exploited through crafted Office documents. Casey Ellis, founder and CTO of Bugcrowd, says the flaw needs user interaction and warns its impact is very high.
CISA launches platform to let hackers report security bugs to US federal agencies
CISA and Bugcrowd launched a vulnerability disclosure platform enabling security researchers to report bugs directly to US federal agencies. Casey Ellis, Bugcrowd's founder, helped develop the platform to standardize and streamline how the government receives and manages security vulnerability reports from hackers.
Uprising in the Valley: When Bug Bounties Went Boom, Part Two
Duo Security published the second installment of a feature series on the history and rapid adoption of bug bounty programs in Silicon Valley. Casey Ellis discusses the evolution of bug bounties and their role in shaping modern security practices across the technology industry.
Delving into the 'how and why' of the latest healthcare data breach
Digital Journal published an analysis of a recent healthcare sector data breach that examined the attack methods and underlying security failures. Casey Ellis provided commentary on the incident, explaining both the technical vectors used by attackers and the organizational factors that enabled the breach.
Microsoft Power Apps Platform Exposes Millions of Users Across Apps
Solutions Review published coverage of a misconfiguration in Microsoft's Power Apps platform that exposed data across millions of user accounts. Casey Ellis identified and documented the vulnerability, contributing research that highlighted the scale and implications of the exposure across multiple applications.
15 Often-Overlooked Risks To Digital Assets In The Remote Work Era
Forbes Technology Council published a panel article examining 15 security risks commonly overlooked during the transition to remote work. Casey Ellis contributed to the discussion of digital asset vulnerabilities in distributed work environments.
Ransomware attack Kaseya
Global Security Magazine published a piece featuring commentary from Casey Ellis on the Kaseya supply chain ransomware attack. Ellis analyzed the incident and its implications for software supply chain security.
As Australia counts cost of Kaseya attack, should industry be doing more?
A CSO Magazine article from August 2021 examines the fallout from the Kaseya ransomware attack on Australian businesses and the security obligations of software vendors. Casey Ellis addresses industry responsibility and the need for greater collaboration to prevent similar supply-chain attacks.
Developments in the Kaseya ransomware attack: recovery and response.
The Cyberwire published an update on recovery and response efforts following the Kaseya VSA ransomware supply chain attack. Casey Ellis contributed analysis on the incident's scope and implications for affected organizations and the broader software supply chain ecosystem.
CISA taps Bugcrowd for federal vulnerability disclosure program
SearchSecurity reported on CISA's selection of Bugcrowd to provide the platform for a new federal vulnerability disclosure program serving U.S. government agencies. Casey Ellis, Bugcrowd's co-founder and chief technology officer, supported the initiative as part of the company's effort to expand coordinated vulnerability management across the public sector.
Ethical hacker looks at the how and why behind the Kaseya cyberattack
This Digital Journal article, published August 2, 2021, examines the REvil ransomware attack on Kaseya's VSA software and why such attacks are becoming more prolific. Casey Ellis, CTO and founder of Bugcrowd, says the pairing of supply-chain access with ransomware's encryption and denial-of-service effects is most concerning, and he stresses prevention.
Top 5 Bug Bounty Platforms to Watch in 2021
The Hacker News published a feature article in 2021 identifying five top bug bounty programs for security researchers to monitor and engage with throughout the year. Bugcrowd, which Ellis co-founded, was included among the platforms highlighted for its role in connecting researchers with organizations seeking vulnerability disclosure.
Why remote working leaves us vulnerable to cyber-attacks
This BBC News article, published on 25 July 2021, examines why remote working leaves organisations vulnerable to cyber-attacks. Casey Ellis, founder of BugCrowd, tells the BBC that phishing and social engineering succeed in climates of uncertainty, noting that attackers can exploit the fear that accompanies such periods.
U.S. Patents and Trademark Office grants two patents for Bugcrowd's proprietary systems and methods - Help Net Security
This July 21, 2021 Help Net Security news article reports that the U.S. Patent and Trademark Office granted Bugcrowd two patents for crowd-enabled vulnerability detection. Casey Ellis, Founder, Chairman and CTO of Bugcrowd, says the patents reflect the company's ability to reduce risk and accelerate digital transformation.
One trend you don’t want to follow: Fashion brand hit by ransomware
This July 14, 2021 Digital Journal article reports on a ransomware attack on fashion retailer Guess, reportedly exposing personal and banking data of 1,300 victims. Bugcrowd CTO Casey Ellis says the pandemic expanded retailers' attack surfaces and recommends a "neighborhood watch" approach engaging ethical hackers and the public to disclose vulnerabilities.
Analyzing the Impact of A.I. and Technology on Society and Cybersecurity
A podcast episode on Mission.org explores artificial intelligence and technology's effects on society and cybersecurity. Casey Ellis discusses Bugcrowd's founding, the importance of legal pathways for security researchers, and methods organizations can use to establish security-first cultures.