Casey Ellis, on the record.
1,355 items across 6 categories: press, broadcast, stage, and paperwork. Captured, displayed, and archived for posterity.
SAP's critical bug allows unrestricted access to ERP
Digital Journal published an article on a critical vulnerability in SAP's RECON software that could allow unauthenticated attackers unrestricted access to enterprise resource planning systems. Casey Ellis warned about the severity of the flaw and its potential impact on organizations relying on SAP infrastructure.
Critical SAP flaw puts 40,000 users at risk
SC Magazine published an article on a critical 10/10 severity vulnerability in an SAP application affecting approximately 40,000 customers. Casey Ellis commented on the risk and implications of the flaw for organizations using the affected SAP systems.
Taking Stock Estimating Vulnerability Rediscovery
A Harvard Belfer Centre paper examines vulnerability rediscovery rates and collision dynamics in government disclosure processes. Casey Ellis contributes analysis on how security researchers and vendors encounter duplicate vulnerability reports, informing policy discussions around coordinated disclosure timelines and resource allocation.
Online: Cyber security: How secure are we?
Innovation Bay hosted an online panel discussion on cybersecurity challenges and the current state of digital security for individuals and organizations. Casey Ellis participated in the discussion, sharing perspective on security challenges facing the broader industry.
Human hackers will continue to beat AI for a decade
SC Magazine published an article in which Casey Ellis argues that human hackers will outperform artificial intelligence in offensive security tactics for approximately a decade. Ellis contends that human creativity and intuition provide advantages over AI systems in identifying and exploiting security vulnerabilities.
Study of global hackers and the economics of security research - Help Net Security
Help Net Security published this June 2020 article on a Bugcrowd study of global hackers and the economics of security research. Casey Ellis, CTO of Bugcrowd, comments that organizations made five times as many coordinated disclosures in the past year, which he links to the value of transparency and growing social responsibility.
Bugcrowd-Studie: Schutz kritischer Infrastruktur erfordert menschliche und künstliche Intelligenz
A Bugcrowd study published on OpenPR.de examines how protecting critical infrastructure requires combining human and artificial intelligence. Casey Ellis provides perspective on the importance of leveraging both human ingenuity and AI systems to strengthen security defenses against evolving threats.
AI alone isn't enough to thwart cyberattacks
A Betanews article examines the limits of artificial intelligence in cybersecurity defense. Casey Ellis argues that AI tools alone cannot match the creativity and adaptability of human attackers, and that effective defense requires combining automated systems with human expertise and ingenuity.
Neurodiversity on the rise among career hackers
Computer Weekly published an article examining the growing recognition of neurodiversity among ethical hackers and security professionals. Casey Ellis comments on how neurodivergent individuals bring distinct advantages to creative problem-solving and security research within the hacking community.
Bugcrowd Report Highlights Need for Blend of Human Ingenuity and AI-Powered Security Solutions to Protect Critical Infrastructure
A Bugcrowd report published by Business Wire examines the role of human expertise and artificial intelligence in protecting critical infrastructure. Casey Ellis emphasizes that effective security requires combining human ingenuity with AI-powered solutions rather than relying on either approach alone.
Bug bounty powerhouse: India takes top spot for Bugcrowd hackers worldwide
The Daily Swig reports on a Bugcrowd study showing India as the leading country for security researchers on the platform. Casey Ellis discusses the findings and India's emergence as a major hub for bug bounty hunters participating in coordinated vulnerability disclosure.
Coin Telegraph
Cointelegraph reported on an Israeli software firm's decision to pay a 250,000 dollar Bitcoin ransom following a ransomware attack. Casey Ellis commented on the difficult trade-offs companies face when deciding whether to pay ransom demands versus other response options.
16 Software Development Trends That Will Soon Dominate The Tech Industry
Forbes published a roundup of 16 software development trends expected to shape the tech industry, featuring input from members of its Technology Council. Casey Ellis contributed a prediction on a key trend poised to influence software development practices.
Terms of engagement: US computer crime laws out of step with changing attitudes to pen tests, ethical hacking
The Daily Swig published an article examining how US computer crime laws lag behind evolving practices in penetration testing and ethical hacking. Casey Ellis discusses how the Computer Fraud and Abuse Act creates legal uncertainty for security researchers conducting authorized testing in good faith.
Supply Chain Attacks: Securing Our Planes, Trains & Automobiles
A Bugcrowd webinar from June 2020 examines supply chain attacks and their impact on critical infrastructure sectors. Casey Ellis discusses how vulnerabilities in third-party components create security risks across transportation and related industries.
Pardon the Intrusion #18: Marcus Hutchins, the ransomware hero
The Next Web's Pardon the Intrusion newsletter covered the story of Marcus Hutchins, the security researcher who stopped the WannaCry ransomware attack. Casey Ellis was featured in the edition discussing the incident and its significance to the security community.
INSIDE THE WORLD OF BUG BOUNTY HUNTERS
BuiltIn published an explainer article on bug bounty hunting, its mechanics, and the growing corporate reliance on bounty programs to identify security vulnerabilities. Casey Ellis is cited as a key figure in the bug bounty space who helped establish the industry's credibility and practices.
15 Tech Tools To Help Remote Workers Maintain Productivity
Forbes published a roundup of 15 technology tools designed to support remote worker productivity, featuring guidance from its Technology Council expert panel. Casey Ellis contributed a recommendation for a tool that helps remote teams maintain efficiency while working from distributed locations.
Here’s what security professionals took away from Verizon’s annual data breach report
An article in Silicon Angle features security professionals discussing key takeaways from Verizon's 2020 Data Breach Investigations Report. Ellis contributes analysis of the report's findings alongside other security experts examining trends and implications in the data.
U.S. to Accuse China of Trying to Hack Vaccine Data, as Virus Redirects Cyberattacks
A New York Times article from May 2020 reports on U.S. government warnings that Chinese-linked hackers were targeting coronavirus vaccine and treatment research. The piece includes analysis of the geopolitical implications of cyber espionage during the pandemic and efforts by security researchers to counter such threats.
The Weekly Notable Startup Funding Report
The Weekly Notable Startup Funding Report from Alley Watch covers startup capital activity for the week of April 13, 2020. Bugcrowd, where Casey Ellis serves as co-founder and chief executive, closed a $30 million Series D funding round to expand its crowdsourced security platform.
Hacking Into Security #6 - Entrepreneurship in cybersecurity - Casey Ellis from Bugcrowd
Hacking Into Security podcast episode #6, published by Hacking into Security, features a discussion on entrepreneurship in cybersecurity. Casey Ellis discusses his career trajectory as an entrepreneur, including his path to founding and leading Bugcrowd in the security industry.
Disclose.io - Connecting the Ghosts of Disclosure Past, Present, and Future
A video presentation from AirGap 2020 titled "Disclose.io - Connecting the Ghosts of Disclosure Past, Present, and Future" explores vulnerability disclosure practices and frameworks. Casey Ellis discusses the evolution of disclosure processes and the role of disclose.io in standardizing and improving coordination between researchers, vendors, and platforms.
Bugcrowd launches 'classic' penetration testing service
Search Security reports on Bugcrowd's launch of a classic penetration testing service designed to complement its crowdsourced security platform. Casey Ellis explains how the offering combines traditional penetration testing methodologies with Bugcrowd's existing crowd-based approach to vulnerability research.
Where Tech Meets Legal: Discussing Crowdsourced Security Testing with Bugcrowd’s Casey Ellis
A Security Nation podcast episode from Rapid7 features Casey Ellis discussing the intersection of technology and legal frameworks in crowdsourced security testing. Ellis addresses safe harbor protections and disclosure policies as key considerations for organizations implementing bug bounty and vulnerability disclosure programs.
Remote Work: A How-To For Digital Boomers
This Forbes Technology Council article, published by Forbes on April 20, 2020, is a written contributor post titled Remote Work: A How-To For Digital Boomers. Casey Ellis, a former Forbes Councils member, wrote the piece, which urges leaders to lean into remote work by listening to themselves, their teams, and their digital natives.
Disclose.io - Vulnerability Disclosure and Hacker Safeharbor in 2020
A presentation delivered at GrimmCon in April 2020 examines vulnerability disclosure practices and hacker safe harbor protections during that year. Ellis outlines the state of disclosure coordination, legal safeguards for security researchers, and the role of standardized frameworks in connecting hackers with organizations seeking their help.
Panel: Vulnerability Disclosure (Casey Ellis, Costin Raiu, The Grugq)
vOPCDE #3 published a panel discussion on vulnerability disclosure featuring Casey Ellis, Costin Raiu, and The Grugq. Ellis participated in the conversation examining disclosure practices, responsible reporting frameworks, and industry coordination challenges in handling security vulnerabilities.
KEYNOTE: Disclose.io - Vulnerability Disclosure and Hacker Safeharbor in 2020
ComfyCon hosted a keynote address on vulnerability disclosure and hacker safeharbor practices in 2020. Ellis discussed the role of Disclose.io in standardizing disclosure policies and protecting security researchers from legal risk.
Cybersécurité: 30 millions de dollars pour la plateforme de bug bounty Bugcrowd
Frenchweb reported on Bugcrowd's $30 million Series D funding round in April 2020, covering the company's expansion in the bug bounty and crowdsourced security market. Casey Ellis, Bugcrowd's founder and CEO, led the company through the funding milestone as it scaled its platform for identifying and remediating software vulnerabilities.