Casey Ellis, on the record.
1,355 items across 6 categories: press, broadcast, stage, and paperwork. Captured, displayed, and archived for posterity.
How can the government improve its cyber posture?
The Fifth Domain published an article from Black Hat 2019 examining strategies for strengthening government cybersecurity posture. Casey Ellis contributed perspective on how federal agencies can enhance their defensive capabilities and security practices.
Risky Biz Soap Box: Casey Ellis on "match.com for hackers"
Risky Business published a Soap Box segment featuring Casey Ellis discussing the future of crowdsourced security. Ellis describes his vision for connecting security skills with organizational needs through a matchmaking platform model.
Bugcrowd and Bug Bounties | Cybrary | BlackHat 2019
A Cybrary video from BlackHat 2019 features Casey Ellis of Bugcrowd discussing the company's approach to security enablement. Ellis explains how bug bounty programs have gained adoption among senior corporate executives as a security practice.
Apple's New Bounty Program Has Huge Incentives, Big Risks
Dark Reading published an analysis of Apple's expanded bug bounty program and its large potential payouts alongside associated risks. Casey Ellis provided commentary on the incentive structure and implications of Apple's approach to vulnerability disclosure and researcher engagement.
Air Force cloud had 54 vulnerabilities before hackers found them
Federal News Network reported that the U.S. Air Force's cloud environment contained 54 vulnerabilities before security researchers identified them through the service's bug bounty program. Casey Ellis commented on how the program successfully enabled proactive discovery of these flaws rather than waiting for malicious actors to find them.
What government can do to keep its cyber workforce
An August 2019 article in The Fifth Domain examines strategies for the government to attract and retain cybersecurity personnel. Casey Ellis contributes commentary on workforce retention approaches in the federal cyber sector.
Air Force cloud had 54 vulnerabilities before hackers found them
Federal Drive with Tom Temin broadcast an episode on August 12, 2019 about an Air Force cloud system that contained 54 vulnerabilities before external researchers discovered them. Casey Ellis commented on the effectiveness of the Air Force's bug bounty program in identifying security issues ahead of potential attackers.
Bugcrowd Paid Over $500K in Bug Bounties in One Week
Bleeping Computer reported that Bugcrowd paid out over $500,000 in bug bounties to researchers in a single week, marking a significant milestone for the platform. Casey Ellis, Bugcrowd's founder and CEO, commented on the achievement as a reflection of the growing security researcher community's effectiveness in identifying and reporting vulnerabilities.
Apple bug bounty expands to MacOS, offers $1 million iOS reward
TechTarget reported on Apple's expansion of its bug bounty program to include macOS and announcement of up to $1 million rewards for critical iOS vulnerabilities. Casey Ellis commented on the significance of Apple's increased commitment to security research incentives and vulnerability disclosure.
Bugcrowd University Expands Education and Training for Whitehat Hackers
Bugcrowd University, the company's educational platform for cybersecurity professionals, expanded its training offerings according to an announcement covered by Yahoo Finance. Casey Ellis, Bugcrowd's founder and CTO, oversaw the platform's growth to develop whitehat hacker talent and advance the security community's capabilities.
CyRise Sessions with Casey Ellis
CyRise Sessions podcast published an episode featuring Casey Ellis discussing cybersecurity startup development and industry innovation. Ellis shares perspectives on building a security company and approaches to driving innovation within the sector.
The Air Force sends good guys in to hack its cloud
The Fifth Domain reported on the U.S. Air Force's use of ethical hackers to test cloud security vulnerabilities through a bug bounty program. Casey Ellis discussed the program's approach to identifying and addressing cloud infrastructure weaknesses before malicious actors could exploit them.
BuzzFeed, Sony and How Not to Use Branded Items (Hint: Not Instead of Payment)
Promo Marketing Magazine published an article examining Sony's controversial practice of offering branded merchandise instead of cash payment for bug bounties. The piece uses Sony's approach as a cautionary example of mishandling security researcher compensation and brand partnerships.
The 26 Aussie tech founders rocking the US
ACS profiled 26 Australian tech founders who have built successful ventures in the United States in an August 2019 feature. Casey Ellis appears among the founders recognized for his work establishing Bugcrowd, a platform connecting organizations with security researchers.
Risky Business #549 -- FSB contractor breached, Equifax fined, NSO Group targets cloud
Risky Business podcast episode 549 covered major security breaches including an FSB contractor incident and the Equifax settlement. Casey Ellis discussed the week's security developments and their implications for the industry.
Risky Business #549 -- FSB contractor breached, Equifax fined, NSO Group targets cloud
Risky Business podcast episode 549 from July 2019 covers major security incidents including an FSB contractor breach and the Equifax settlement. Casey Ellis discusses these developments and other news stories from the week.
Have you patched BlueKeep yet?
Securiosity podcast episode from July 2019 featured Casey Ellis discussing the critical BlueKeep vulnerability affecting Windows systems. Ellis emphasized the importance of patching and outlined the risks organizations faced if they delayed addressing the flaw.
#026 Casey Ellis: I Enjoy Thinking Like a Criminal
Cyber Security Interviews published episode 026 featuring Casey Ellis on July 17, 2019. Ellis discusses the mindset needed for effective security work and the value of creative, adversarial thinking in the field.
Communication, communication – and politics: Iowa saga of cuffed infosec pros reveals pentest pitfalls
The Register published an analysis of the arrest of Coalfire penetration testers in Iowa and its implications for cybersecurity professionals. Ellis examines the legal risks penetration testers face when conducting authorized security assessments and the importance of clear communication and documentation to protect both testers and clients.
EA Origin security flaw potentially exposed data of 300 million players
BGR reported on a security flaw in EA's Origin platform that potentially exposed data for 300 million players. Casey Ellis commented on the risks associated with the vulnerability and its implications for player security.
A Origin That Could Have Exposed 300 Million Players To Account Takeovers
Information Security Buzz published expert commentary on a vulnerability in EA's Origin service that could have exposed 300 million player accounts to takeover attacks. Casey Ellis discussed the security flaw and its potential impact on the gaming platform's user base.
EA Origin Security Flaw Potentially Left 300 Million Players Exposed
A TechRaptor article from June 2019 details a significant security flaw in EA's Origin platform that potentially exposed 300 million player accounts to attack. Casey Ellis provides analysis on the vulnerability and its implications for the gaming platform's user base.
Defensive Vulnerability Economics
Bugcrowd released a webinar titled Defensive Vulnerability Economics in June 2019. Casey Ellis leads the discussion on economic principles underlying vulnerability discovery, offering organizations a framework for prioritizing security investment decisions.
US Air Force Bug Bounty Program Nets 54 Flaws for $123,000
Dark Reading reported on the U.S. Air Force bug bounty program results, which identified 54 vulnerabilities and distributed $123,000 in rewards. Casey Ellis contributed expertise on the program's significance for military cybersecurity and vulnerability disclosure practices.
Amid Bug Bounty Hype, Sometimes Security is Left in the Dust
Threatpost published an article examining potential drawbacks of over-hyping bug bounty programs as a security solution. Ellis discusses how bug bounty initiatives function most effectively as part of a comprehensive security strategy rather than as standalone fixes.
Security startup Bugcrowd on crowdsourcing bug bounties: ‘Cybersecurity is a people problem’
TechCrunch published an interview with Casey Ellis, founder and CEO of Bugcrowd, discussing crowdsourced cybersecurity and the company's model for connecting organizations with ethical hackers. Ellis describes cybersecurity as fundamentally a people problem and explains how Bugcrowd leverages the global hacker community to identify vulnerabilities before malicious actors exploit them.
Prolonged Flipboard breach incident could make some users flip their lids
SC Magazine reported on a prolonged data breach at news aggregator Flipboard that exposed user information over an extended period. Casey Ellis commented on the incident's implications for affected users and the broader security landscape.
Windows Zero-Day Drops on Twitter, Developer Promises 4 More
A Threatpost article from May 2019 describes a Windows zero-day local privilege escalation vulnerability disclosed on Twitter, with the researcher indicating additional exploits would follow. Casey Ellis comments on the persistent dynamic between attackers and defenders in the vulnerability landscape.
Linux version of the Winnti malware work as a backdoor on infected hosts in the wild
SC Magazine reported on a Linux variant of Winnti malware operating as a backdoor on compromised systems in the wild. Casey Ellis provided analysis of the threat and its implications for affected hosts.
‘The rules of the game are completely changing’
The Daily Swig published an interview with Casey Ellis in May 2019 examining shifts in the bug bounty and vulnerability disclosure landscape. Ellis discusses how the foundational rules governing these practices are undergoing fundamental change as the industry matures.