Casey Ellis, on the record.
1,355 items across 6 categories: press, broadcast, stage, and paperwork. Captured, displayed, and archived for posterity.
This year's DerbyCon conference will be the last
A Techtarget news article reports on the announcement that DerbyCon, the annual cybersecurity conference, will hold its final event in 2019. Casey Ellis is recognized as a speaker and contributor to the conference's impact on the security community.
DerbyCon blames disruptive minority in calling time on conference
PortSwigger Daily reported on DerbyCon's decision to end the conference, with organizers attributing the closure to behavioral issues from a disruptive minority of attendees. Casey Ellis commented on the broader implications of the situation for the security community and event management practices.
China Trade Wars, Consumer Focus On Security And The AI Hype: What's In Store For 2019
This Council post, published by Forbes on January 15, 2019, looks ahead at trade tensions with China, consumer security, and AI hype in the year ahead. Casey Ellis, a former Forbes Technology Council member, wrote the piece, opening with the question that comes to mind first: how 2019 can top 2018.
Aussies in the Valley: Bugcrowd founder Casey Ellis on why Australian founders “chronically” undersell themselves
Smart Company published an interview with Casey Ellis in January 2019 on Australian founders in Silicon Valley. Ellis discusses why Australian entrepreneurs tend to undervalue themselves and reflects on the motivations driving ethical hackers in the security community.
2020 Cybersecurity Predictions by 50+ Industry Leaders
Information Security Buzz published a roundup of 2020 cybersecurity predictions from more than 50 industry experts in January 2019. Casey Ellis contributed predictions on emerging cybersecurity threats and trends expected to shape the landscape in the year ahead.
Risky Business #539 -- Docker Hub owned, Cloudflare, Bloomberg under fire
Risky Business episode #539 features a sponsor interview segment from Bugcrowd on the Risky.Biz podcast. Casey Ellis discusses Bugcrowd's penetration testing product and how it positions the company within the security testing market.
Unusual Gathering Episode XIV: The ITSP Magazine Online Holiday Party
ITSPmagazine published Episode XIV of Unusual Gathering, a holiday special podcast episode featuring industry figures discussing the year in cybersecurity. Casey Ellis participated in the festive discussion alongside other guests on the show.
Cybersecurity Research Reveals IoT Vulnerabilities, Nation-State Threats
A December 2018 cybersecurity research roundup from eSecurity Planet covers IoT vulnerabilities and nation-state threats. The article includes insights and data from Bugcrowd on emerging security challenges identified through vulnerability research and crowdsourced security testing.
NEWS INSIGHTS: SOMEONE HACKED NASA
A December 2018 article in the Journal of Cyber Policy covered a data breach at NASA. Casey Ellis provided commentary on the incident and discussed its broader implications for the organization.
Future Job: Corporate Bug Hunting
CDOTrends published an article in December 2018 examining corporate bug hunting as an emerging career path. Casey Ellis provided insights on the expansion of the bug bounty industry and its role in creating new employment opportunities.
OSS Security a Top Priority in National Cyber Strategy
A Security Boulevard article examines the prioritization of open-source software security within U.S. national cyber strategy. Casey Ellis provides analysis on how OSS security has become a key focus area in broader cybersecurity policy and infrastructure protection efforts.
Bug Hunting is Cybersecuritys Skill of the Future
Infosecurity Magazine published an article discussing bug hunting as an emerging core competency within the cybersecurity industry. Casey Ellis contributed commentary on the growing importance of bug hunting practices in the sector.
Some freelance hackers can get paid $500,000 a year to test the defenses of companies like Tesla
NBC News published a feature on the earning potential of freelance hackers who participate in bug bounty programs. Casey Ellis discusses how the economics of these programs work and what drives compensation levels for security researchers testing corporate defenses.
Some freelance hackers can get paid $500,000 a year to test defenses of companies like Tesla
CNBC published an article examining how freelance ethical hackers can earn up to $500,000 annually by testing corporate security defenses through bug bounty programs. Casey Ellis discusses the financial rewards available to top performers in the coordinated vulnerability disclosure space.
The rockstar hackers protecting you from the bad guys
CNET published a feature article in December 2018 profiling ethical hackers who work to protect companies and consumers from cyber threats. Casey Ellis was included among the security researchers recognized for their contributions to identifying and mitigating vulnerabilities in digital systems.
Bounty Hunters, Bugcrowd, The End of Penetration Testing, and Crowd Sourced Vulnerability Research
LeetSpeak podcast episode from December 2018 featured Casey Ellis discussing bug bounty programs and their impact on vulnerability research practices. Ellis argued that crowdsourced security approaches are fundamentally reshaping how organizations discover and address software vulnerabilities compared to traditional penetration testing methods.
Bug Bounty as a tool towards a Vulnerability Management Program (12ENISE)
A 2018 presentation at 12ENISE conference on YouTube covers Casey Ellis's approach to integrating bug bounty programs into organizational vulnerability management strategy. Ellis discusses how bug bounty functions as a tactical tool within a broader vulnerability management program rather than as a standalone initiative.
Hacker Steals Crypto from Copay Wallets Apps
A Infosecurity Magazine article from November 2018 reports on a security incident in which a hacker stole cryptocurrency from Copay wallet users by compromising a third-party code library. Casey Ellis commented on the incident and its implications for supply chain security in wallet applications and cryptocurrency platforms.
Hacker takes over JavaScript library, injects malware to steal Bitcoin
SC Magazine reported on a supply chain attack in which a hacker compromised a popular JavaScript library and injected malicious code designed to steal cryptocurrency. Casey Ellis commented on the incident's implications for software security and the risks posed by compromised dependencies in the development supply chain.
Cryptocurrency-Stealing Code Distributed via Popular Library
SecurityWeek reported on a supply chain attack in which cryptocurrency-stealing code was distributed through a popular code library. Casey Ellis discussed the incident's implications for software supply chain security and the risks posed by compromised dependencies to developers and users.
The Future of Safe Harbor Is Now
Forbes published an article by Casey Ellis on safe harbor protections for ethical hackers. Ellis argues that establishing clear safe harbor rules is essential to encourage responsible security research and protect researchers from legal liability.
Getting A Return On Your Information Security Investment
ITSPmagazine Podcast published an episode on measuring and articulating the return on investment of security programs. Casey Ellis discusses with Elizabeth Wharton how organizations can demonstrate and quantify the value their security initiatives deliver.
“Understand How To Scale” 5 Leadership Lessons With Casey Ellis
An article published by Thrive Global presents five leadership lessons on scaling a business drawn from an interview with Casey Ellis. Ellis discusses practical approaches to organizational growth and building teams capable of managing expansion.
US Department of Defense Expands Bug Bounty Efforts
eWEEK reported on the U.S. Department of Defense's expansion of bug bounty programs to cover additional systems and assets. Casey Ellis was cited for his work advancing coordinated vulnerability disclosure practices that informed the department's security initiatives.
Bug Bounty as a tool towards a Vulnerability Management Program
A video presentation at the 2018 ENISA Summit explores bug bounty programs as a component of broader vulnerability management. Casey Ellis discusses how organizations can integrate bug bounty initiatives into their security strategy to identify and address vulnerabilities systematically.
Halt, who goes there? Identity access management
SC Magazine published an in-depth article on the challenges and solutions in identity and access management. Casey Ellis discusses IAM approaches and best practices for securing identity infrastructure in modern enterprise environments.
The Cybersecurity 202: Lawmakers are ready to embrace ethical hackers, even if DHS isnt
A Washington Post Cybersecurity 202 column from September 2018 examines legislative momentum behind ethical hacking programs despite resistance from some federal agencies. Casey Ellis is cited as a key voice advocating for formal bug bounty and vulnerability disclosure frameworks that benefit both security researchers and government cybersecurity efforts.
Facebook Now Offers Bounties For Access Token Exposure
Threatpost reported on Facebook's expansion of its bug bounty program to reward researchers for discovering exposed user access tokens. Casey Ellis contributed insight on the significance of this program expansion for incentivizing the discovery and responsible disclosure of critical authentication vulnerabilities.
Risk & Repeat: Can Disclose.io help protect vulnerability researchers?
A TechTarget podcast from September 2018 examines whether the disclose.io framework can protect vulnerability researchers from legal threats. Casey Ellis discusses how the framework addresses legal risks researchers face when disclosing security vulnerabilities to organizations.
Tesla offers 'goodwill' to security researchers hacking its cars
This CyberScoop article from September 6, 2018, covers Tesla's vulnerability disclosure page, which says the company values security researchers' work. Casey Ellis, founder of BugCrowd, called the move a massive step forward in reducing risk for vulnerability disclosure and bug bounties, and said he hopes it becomes the standard.