Casey Ellis, on the record.
1,355 items across 6 categories: press, broadcast, stage, and paperwork. Captured, displayed, and archived for posterity.
Google Will Pay You $1.5 Million Bounty For Remotely Hacking Titan M Chip
Google announced a $1.5 million maximum bounty for remote exploitation of the Titan M2 chip through its Android Security Rewards program, as reported by Techworm. Casey Ellis commented on the significance of the increased reward tier for securing hardware-level security components.
Google's Android bug bounty program will now pay out $1.5 million - CNET
This CNET article from November 21, 2019 reports Google will now pay out $1.5 million through its Android bug bounty program. Casey Ellis, founder and CTO of Bugcrowd, says the reward has risen because the skills needed to find these Google device vulnerabilities are rare and often tied up in the offensive market.
Google offers bounty of up to $1.5M for its Android Security Rewards program
Silicon Angle reported on Google's expansion of its Android Security Rewards program to offer bounties up to $1.5 million. Casey Ellis analyzed how the increased rewards would influence participation and practices within the security research community.
Expert Comments On Why Jailbroken Devices May Threaten Mobile Financial Services
Information Security Buzz published expert commentary on the security risks jailbroken mobile devices pose to financial services. Casey Ellis contributed analysis on how device jailbreaking compromises security controls and increases vulnerability to financial fraud and malware exploitation.
The Cybersecurity 202: Arrested Iowa hackers spark alarm among security pros
The Washington Post's Cybersecurity 202 column examines the arrest of two Coalfire penetration testers in Iowa and the concerns it raised within the security community. Casey Ellis comments on the legal ambiguity surrounding authorized security testing and its implications for professional security practitioners.
Iowa paid a security firm to break into a courthouse, then arrested employees when they succeeded
A CNBC article covers the 2019 incident in which two Coalfire employees were arrested after completing a court-authorized penetration test at an Iowa courthouse. Casey Ellis is cited regarding the broader security testing practices and the importance of clear authorization protocols in vulnerability assessment work.
Bug Bounty Hunter Casey Ellis
The Hacker Next Door podcast from cast.rocks featured Casey Ellis discussing his background and work as a bug bounty hunter and security entrepreneur. Ellis shared his personal motivations and perspective on the evolution of vulnerability disclosure and the bug bounty industry.
Securiosity: What a week for insider threats
CyberScoop's Securiosity podcast episode explores insider threats through recent events and mitigation approaches. Casey Ellis discusses the insider threat landscape and strategies organizations can deploy to address this security challenge.
What a week for insider threats
Securiosity's podcast episode from November 2019 examines that week's cybersecurity news with particular attention to insider threat challenges. Casey Ellis provides commentary on the week's developments and the security implications of insider threats in organizations.
Bugcrowd Introduces Its ASM to Deliver Crowd-Driven Approach to Risk Reduction
Bugcrowd announced its Attack Surface Management platform in an article published by Tech Times on October 31, 2019. Casey Ellis commented on the platform's growth and Bugcrowd's record bug bounty payouts during a single week.
Cybersecurity Roundup: Splunk, SonicWall, Bugcrowd, Exabeam
Channel Futures published a cybersecurity roundup covering product announcements and developments from Splunk, SonicWall, Bugcrowd, and Exabeam. The piece included coverage of Bugcrowd's launch of a new asset inventory and management solution designed to help organizations track and manage their digital assets.
Voting equipment vendors seek info on vulnerability disclosure program
An SC Magazine article reports on voting equipment vendors requesting details from DEF CON's Voting Machine Hacking Village about establishing vulnerability disclosure programs. Casey Ellis contributed perspective on structuring effective disclosure processes for the election infrastructure sector.
Bugcrowd launches Attack Surface Management platform | TechTarget
An October 2019 news article from TechTarget reports on Bugcrowd's launch of Attack Surface Management, an asset discovery and prioritization platform for legacy and shadow IT resources. Bugcrowd CTO Casey Ellis explains that the product's one-time, set pricing, with researcher rewards included, differs from the separate bounty pool model used by Bugcrowd's other products.
Bugcrowd launches crowd-driven approach to understanding the attack surface - BetaNews
This October 2019 BetaNews article reports that Bugcrowd launched Attack Surface Management, a new crowd-driven tool for mapping an organization's internet-connected assets, including shadow IT and development environments. Casey Ellis, Bugcrowd's founder and CTO, says the product helps connect security and IT teams and restore their Defender's Advantage.
Bugcrowd Enters the IT Asset Discovery Business
Dark Reading published an article on Bugcrowd's expansion into IT asset discovery with a new platform to help companies identify their attack surface. Casey Ellis, Bugcrowd's founder and CTO, discusses the company's strategic move into this market and its implications for vulnerability management.
BIillington Testimonial - Casey Ellis
A Billington CyberSecurity video from October 2019 features Casey Ellis offering a testimonial for the Billington Cybersecurity Summit. Ellis endorses the summit as an effective venue for fostering dialogue and cooperation between government and industry stakeholders on security matters.
CROWDSOURCING CYBERSECURITY
Journal of Cyber Policy published an article on the crowdsourcing model in cybersecurity in October 2019. Casey Ellis contributed insights on how organizations can leverage a global community of hackers to identify and address security vulnerabilities at scale.
Companies urged to bolster infrastructure cyber defences
The Financial Times published a feature on ethical hacking and bug bounties, examining the economics of security research platforms. Casey Ellis discusses how bug bounty programs create incentives for security researchers to identify vulnerabilities in critical infrastructure systems.
KEYNOTE: The Unlikely Romance - Part 2: What Now?
A keynote presentation titled "The Unlikely Romance - Part 2: What Now?" was delivered at Hacker Halted 2019. Ellis examined the evolving relationship between hackers and enterprises, discussing practical approaches to security collaboration and organizational change.
Google: Triada backdoors were pre-installed on Android devices
Google disclosed that Triada backdoors were pre-installed on certain Android devices, according to a report covered by SearchSecurity. Casey Ellis commented on the supply chain security implications of the discovery.
Episode 19: Casey Ellis
KBCAST released Episode 19 of the KBCAST podcast, a broadcast interview featuring Casey Ellis discussing his career trajectory, cybersecurity industry conditions, and Bugcrowd's direction. Ellis covers his professional background and perspectives on emerging security challenges and the company's strategic outlook.
After Bugcrowd pilot, Air Force bug bounty program eyes expansion
SearchSecurity reported on the U.S. Air Force's plans to expand its bug bounty program following a successful pilot with Bugcrowd. Casey Ellis, Bugcrowd's founder and CEO, commented on the pilot results and the Air Force's interest in scaling crowdsourced security efforts across its operations.
Cryptominer Attacks Ramp Up, Focus on Persistence
A Dark Reading article examines the escalation of cryptomining attacks and their shift toward establishing persistent access on compromised systems. Casey Ellis discusses the technical sophistication of these attacks and their implications for enterprise security infrastructure.
Experts Comments Linux Malware (Skidmap) Illicit Cryptocurrency Mining
Information Security Buzz published expert commentary on Skidmap, a Linux malware strain used for illicit cryptocurrency mining. Casey Ellis provided analysis of the malware's capabilities and threat implications for systems running Linux environments.
Risky Business #556 -- US Treasury targets DPRK crews, more details on Ukraine power hack
Risky Business episode 556, published by Risky Business on September 17, 2019, covers US Treasury sanctions against North Korean crews and new details on the Ukraine power grid attack. Casey Ellis provides commentary and analysis on the week's major cybersecurity events and developments.
Serious Hackers Wear TWO Black Hoodies
The CISO/Security Vendor Relationship Podcast episode "Serious Hackers Wear TWO Black Hoodies" features a discussion on cybersecurity professional realities. Casey Ellis addresses hacker stereotypes and contributes perspectives on the relationship between security vendors and enterprise security leaders.
How bug bounties are fueling hacker entrepreneurs
The Parallax published an article examining how bug bounty programs enable security researchers to build sustainable careers and businesses. Casey Ellis discusses the economic model of bug bounties and their role in creating opportunities for independent security professionals and entrepreneurs.
The Next Frontier: Aerospace and Space Cybersecurity Panel
A panel discussion on aerospace and space cybersecurity aired on C-SPAN from the 10th Annual Billington Cybersecurity Summit. Casey Ellis participated in the discussion addressing security challenges in the aerospace and space sectors.
Apple's $1 million bug bounty makes a lot more sense after that iOS hacking spree
CyberScoop published an article examining Apple's $1 million bug bounty program in the context of a widespread iOS hacking campaign attributed to China. Casey Ellis is quoted discussing the economics of vulnerability disclosure and the competitive pressure Apple faces from exploit brokers offering substantial payments for zero-day exploits.
Industry Leaders Cite Need for Better Network Visibility in Federal IT Infrastructure
ExecutiveBiz published an article in August 2019 examining industry perspectives on network visibility gaps in federal IT infrastructure. Casey Ellis contributed insights on the need for improved visibility mechanisms within government technology systems.