Casey Ellis, on the record.
1,355 items across 6 categories: press, broadcast, stage, and paperwork. Captured, displayed, and archived for posterity.
Defensive Vulnerability Economics
Bugcrowd released a webinar titled Defensive Vulnerability Economics in June 2019. Casey Ellis leads the discussion on economic principles underlying vulnerability discovery, offering organizations a framework for prioritizing security investment decisions.
US Air Force Bug Bounty Program Nets 54 Flaws for $123,000
Dark Reading reported on the U.S. Air Force bug bounty program results, which identified 54 vulnerabilities and distributed $123,000 in rewards. Casey Ellis contributed expertise on the program's significance for military cybersecurity and vulnerability disclosure practices.
Amid Bug Bounty Hype, Sometimes Security is Left in the Dust
Threatpost published an article examining potential drawbacks of over-hyping bug bounty programs as a security solution. Ellis discusses how bug bounty initiatives function most effectively as part of a comprehensive security strategy rather than as standalone fixes.
Security startup Bugcrowd on crowdsourcing bug bounties: ‘Cybersecurity is a people problem’
TechCrunch published an interview with Casey Ellis, founder and CEO of Bugcrowd, discussing crowdsourced cybersecurity and the company's model for connecting organizations with ethical hackers. Ellis describes cybersecurity as fundamentally a people problem and explains how Bugcrowd leverages the global hacker community to identify vulnerabilities before malicious actors exploit them.
Prolonged Flipboard breach incident could make some users flip their lids
SC Magazine reported on a prolonged data breach at news aggregator Flipboard that exposed user information over an extended period. Casey Ellis commented on the incident's implications for affected users and the broader security landscape.
Windows Zero-Day Drops on Twitter, Developer Promises 4 More
A Threatpost article from May 2019 describes a Windows zero-day local privilege escalation vulnerability disclosed on Twitter, with the researcher indicating additional exploits would follow. Casey Ellis comments on the persistent dynamic between attackers and defenders in the vulnerability landscape.
Linux version of the Winnti malware work as a backdoor on infected hosts in the wild
SC Magazine reported on a Linux variant of Winnti malware operating as a backdoor on compromised systems in the wild. Casey Ellis provided analysis of the threat and its implications for affected hosts.
‘The rules of the game are completely changing’
The Daily Swig published an interview with Casey Ellis in May 2019 examining shifts in the bug bounty and vulnerability disclosure landscape. Ellis discusses how the foundational rules governing these practices are undergoing fundamental change as the industry matures.
Zombieload' Flaw Lets Hackers Crack Almost Every Intel Chip Back to 2011. Why's It Being Downplayed?
Fortune published an article in May 2019 about the Zombieload vulnerability affecting Intel processors since 2011 and questions surrounding its public disclosure. Casey Ellis commented on the severity of the flaw and its potential impact on affected systems.
Frequent Breaches Have Brought Cybersecurity Change To The Forefront. What's Next?
Forbes published an article examining how frequent data breaches have elevated cybersecurity priorities in organizations. Ellis discusses ways businesses can better support security teams and establish company-wide commitment to fundamental security practices.
Salesforce launches $50 Million Australia Trailblazer fund
Salesforce announced a $50 million Australia Trailblazer Fund in an Enterprise Times article focused on supporting local startups. Casey Ellis's Bugcrowd was identified as one of the early beneficiaries of the initiative designed to help Australian technology companies scale.
Багхантеры (Bughunter)
An article on Tadviser explaining bug bounty hunting and the platforms used by security researchers to report vulnerabilities. The piece identifies Bugcrowd as a major platform in the bug bounty ecosystem where researchers discover and disclose software vulnerabilities.
I won't bother hunting and reporting more Sony zero-days, because all I'd get is a lousy t-shirt
The Register published a critical article in February 2019 examining Sony's practice of offering t-shirts as rewards for vulnerability reports. Casey Ellis commented on the necessity of fair compensation structures to encourage responsible disclosure from security researchers.
Hackers to the Rescue
This Fast Company article, titled Hackers to the Rescue and published April 18, 2019, describes how hackers help patch cybersecurity weaknesses through training and networking. Casey Ellis, founder of Bugcrowd, is praised by a company executive quoted in the piece for drawing in skilled researchers who want to use their abilities for good.
Brazen' nation-state actors behind 'Sea Turtle' DNS hijacking campaign
SC Media reported on the "Sea Turtle" DNS hijacking campaign, which security researchers attributed to nation-state actors conducting widespread infrastructure attacks. Casey Ellis commented on the brazen scope and implications of the campaign, characterizing the attackers' willingness to target critical systems at scale.
Why bug bounty programs have always been about the evolution of penetration testing
A 2019 CyberScoop video interview examines the relationship between bug bounty programs and penetration testing methodologies. Ellis argues that bug bounty initiatives represent an evolution of rather than replacement for traditional penetration testing practices.
Why bug bounty programs have always been about the evolution of penetration testing
A CyberScoop video from the 2019 RSA Conference features Casey Ellis discussing bug bounty programs and their role in the evolution of penetration testing. Ellis explains how crowdsourced security approaches have reshaped traditional security validation methods within the industry.
Why bug bounty firms want to be penetration testing companies
CyberScoop published an article examining how bug bounty firms are expanding into penetration testing services, comparing business models across platforms including Bugcrowd, HackerOne, and Synack. Casey Ellis discusses the strategic rationale behind this industry shift and the competitive positioning of firms moving beyond traditional vulnerability disclosure programs.
Salesforce Ventures sets aside $50m for Australia
Salesforce Ventures announced a $50 million fund dedicated to Australian startups in an iTnews report. The initiative highlighted the venture arm's existing investment in Bugcrowd, where Casey Ellis serves as founder and CEO.
Webinar: Safe Harbor for Hackers
Security Boulevard published a webinar announcement featuring Casey Ellis on safe harbor policies for ethical hackers during vulnerability disclosure. Ellis discusses how safe harbor protections enable security researchers to report vulnerabilities responsibly without legal risk.
When You Invest In The Community The Community Gets Stronger
ITSPmagazine published a podcast episode featuring Casey Ellis and Jason Haddix in March 2019. Ellis and Haddix discuss how investing in the hacker community strengthens the security ecosystem and fosters greater collaboration among researchers and organizations.
RSA Conference 2019 Casey Ellis, Bugcrowd
An interview with Casey Ellis from Bugcrowd appeared on Digital Anarchist during RSA Conference 2019. Ellis discussed key themes from the conference and his perspective on industry direction in cybersecurity.
Salesforce launches new $50m fund to empower Aussie startups in its ecosystem
Anthill reported on Salesforce Ventures launching a $50 million fund for Australian startups in March 2019. Bugcrowd, a portfolio company in which Casey Ellis serves as founder, was included among the startups supported by the initiative.
Equifax neglected cybersecurity prior to breach, Senate report finds
A Senate report covered by SC Media in 2019 found that Equifax had neglected cybersecurity practices before its major data breach. Casey Ellis commented on the report's findings regarding the company's security failures and their implications for data protection.
Salesforce Ventures Brings Australian Startups $50M In New Fund
Crunchbase News reported on Salesforce Ventures' launch of a $50 million fund for Australian enterprise startups. The article cited Bugcrowd, where Casey Ellis serves as founder, as an example of the type of company the fund aims to support.
SD Times news digest: Nintex acquires EnableSoft, Functionize raises $16 million in Series A funding, and Bugcrowd and Secure Code Warrior’s partnership
SD Times published a news digest covering software development industry updates, including a partnership between Bugcrowd and Secure Code Warrior. Casey Ellis, as Bugcrowd founder and CEO, participated in the partnership announcement integrating security training with bug bounty hunting capabilities.
Massive macOS vulnerability exposed by Google security researchers
A SiliconANGLE article from March 2019 reports on a critical macOS vulnerability identified by Google security researchers. Casey Ellis provides commentary on the vulnerability's significance and implications for system security.
US tech giant Salesforce creates a $50m Australian VC fund to back start-ups
The Australian Financial Review reported on Salesforce's launch of a $50 million Australian venture capital fund designed to support local technology start-ups. Bugcrowd, the security platform co-founded by Casey Ellis, was cited as a notable investment within the fund's portfolio.
Security flaws found in password managers
The Columbian reported on security flaws discovered in several popular password managers, highlighting that tools designed for security can still contain vulnerabilities. Casey Ellis contributed technical analysis and perspective on the findings and their implications for users relying on these tools.
Analysis: Password managers have a security flaw. But here's why you should still use one.
Daily Herald published an analysis piece examining security flaws identified in password managers while weighing their overall security value. Casey Ellis provides expert perspective on balancing the risks and benefits of password manager adoption as a foundational security practice.