Casey Ellis, on the record.
1,355 items across 6 categories: press, broadcast, stage, and paperwork. Captured, displayed, and archived for posterity.
CISA launches platform to let hackers report security bugs to US federal agencies
CISA and Bugcrowd launched a vulnerability disclosure platform enabling security researchers to report bugs directly to US federal agencies. Casey Ellis, Bugcrowd's founder, helped develop the platform to standardize and streamline how the government receives and manages security vulnerability reports from hackers.
Uprising in the Valley: When Bug Bounties Went Boom, Part Two
Duo Security published the second installment of a feature series on the history and rapid adoption of bug bounty programs in Silicon Valley. Casey Ellis discusses the evolution of bug bounties and their role in shaping modern security practices across the technology industry.
Delving into the 'how and why' of the latest healthcare data breach
Digital Journal published an analysis of a recent healthcare sector data breach that examined the attack methods and underlying security failures. Casey Ellis provided commentary on the incident, explaining both the technical vectors used by attackers and the organizational factors that enabled the breach.
Microsoft Power Apps Platform Exposes Millions of Users Across Apps
Solutions Review published coverage of a misconfiguration in Microsoft's Power Apps platform that exposed data across millions of user accounts. Casey Ellis identified and documented the vulnerability, contributing research that highlighted the scale and implications of the exposure across multiple applications.
15 Often-Overlooked Risks To Digital Assets In The Remote Work Era
Forbes Technology Council published a panel article examining 15 security risks commonly overlooked during the transition to remote work. Casey Ellis contributed to the discussion of digital asset vulnerabilities in distributed work environments.
Ransomware attack Kaseya
Global Security Magazine published a piece featuring commentary from Casey Ellis on the Kaseya supply chain ransomware attack. Ellis analyzed the incident and its implications for software supply chain security.
As Australia counts cost of Kaseya attack, should industry be doing more?
A CSO Magazine article from August 2021 examines the fallout from the Kaseya ransomware attack on Australian businesses and the security obligations of software vendors. Casey Ellis addresses industry responsibility and the need for greater collaboration to prevent similar supply-chain attacks.
Developments in the Kaseya ransomware attack: recovery and response.
The Cyberwire published an update on recovery and response efforts following the Kaseya VSA ransomware supply chain attack. Casey Ellis contributed analysis on the incident's scope and implications for affected organizations and the broader software supply chain ecosystem.
CISA taps Bugcrowd for federal vulnerability disclosure program
SearchSecurity reported on CISA's selection of Bugcrowd to provide the platform for a new federal vulnerability disclosure program serving U.S. government agencies. Casey Ellis, Bugcrowd's co-founder and chief technology officer, supported the initiative as part of the company's effort to expand coordinated vulnerability management across the public sector.
Ethical hacker looks at the how and why behind the Kaseya cyberattack
This Digital Journal article, published August 2, 2021, examines the REvil ransomware attack on Kaseya's VSA software and why such attacks are becoming more prolific. Casey Ellis, CTO and founder of Bugcrowd, says the pairing of supply-chain access with ransomware's encryption and denial-of-service effects is most concerning, and he stresses prevention.
Top 5 Bug Bounty Platforms to Watch in 2021
The Hacker News published a feature article in 2021 identifying five top bug bounty programs for security researchers to monitor and engage with throughout the year. Bugcrowd, which Ellis co-founded, was included among the platforms highlighted for its role in connecting researchers with organizations seeking vulnerability disclosure.
Why remote working leaves us vulnerable to cyber-attacks
This BBC News article, published on 25 July 2021, examines why remote working leaves organisations vulnerable to cyber-attacks. Casey Ellis, founder of BugCrowd, tells the BBC that phishing and social engineering succeed in climates of uncertainty, noting that attackers can exploit the fear that accompanies such periods.
U.S. Patents and Trademark Office grants two patents for Bugcrowd's proprietary systems and methods - Help Net Security
This July 21, 2021 Help Net Security news article reports that the U.S. Patent and Trademark Office granted Bugcrowd two patents for crowd-enabled vulnerability detection. Casey Ellis, Founder, Chairman and CTO of Bugcrowd, says the patents reflect the company's ability to reduce risk and accelerate digital transformation.
One trend you don’t want to follow: Fashion brand hit by ransomware
This July 14, 2021 Digital Journal article reports on a ransomware attack on fashion retailer Guess, reportedly exposing personal and banking data of 1,300 victims. Bugcrowd CTO Casey Ellis says the pandemic expanded retailers' attack surfaces and recommends a "neighborhood watch" approach engaging ethical hackers and the public to disclose vulnerabilities.
Analyzing the Impact of A.I. and Technology on Society and Cybersecurity
A podcast episode on Mission.org explores artificial intelligence and technology's effects on society and cybersecurity. Casey Ellis discusses Bugcrowd's founding, the importance of legal pathways for security researchers, and methods organizations can use to establish security-first cultures.
Hackers vs. lawyers: Security research stifled in key situations
A SearchSecurity feature examines how legal threats under laws like the CFAA can discourage security researchers from disclosing vulnerabilities and conducting important research. Casey Ellis discusses the tension between legal risk and the need for responsible vulnerability disclosure in security research.
Combating Ransomware: Lawmaker Wants Spies 'Hacking Back'
Bank Info Security published an analysis examining whether offensive cyber operations against ransomware gangs could effectively disrupt their activities. Casey Ellis discusses the potential risks and legal implications of such aggressive defensive tactics in response to escalating ransomware threats.
Leading fertility clinic falls victim of ransomware attack
This Digital Journal article, published June 29, 2021, reports on a ransomware attack that exposed personal data, including Social Security numbers and laboratory results, at fertility clinic My Egg Bank. Casey Ellis, CTO and founder, notes that vulnerabilities exist in every platform and says crowdsourced security can help healthcare providers manage risk.
Healthcare breaches and data exposures. Is compliance with privacy regulations motivated by fear of fines?
CyberWire's Privacy Briefing newsletter from June 2021 examines healthcare data breaches and whether compliance with privacy regulations is driven primarily by fear of financial penalties. Casey Ellis provides analysis on the motivations behind organizational privacy practices and regulatory compliance in the healthcare sector.
Georgia Fertility Clinic Hit by Ransomware: Expert Commentary
Solutions Review published expert commentary on a ransomware attack affecting a Georgia fertility clinic. Ellis discussed the incident's implications for healthcare cybersecurity and the vulnerabilities that made the clinic a target for attackers.
Businesses must bank on secure future
An opinion piece in the Australian Financial Review argues that Australian businesses must prioritize cybersecurity in an increasingly hostile digital environment. Casey Ellis calls for organizations to embed security into their operational strategy rather than treating it as an afterthought to achieve long-term resilience.
Supreme Court Decision on Van Buren Case Restricts Excesses of CFAA, Is a Boon for Cybersecurity Research
CPO Magazine published an analysis of the U.S. Supreme Court's Van Buren v. United States decision, which narrowed the Computer Fraud and Abuse Act's scope. Casey Ellis is cited for his perspective on how the ruling benefits security researchers by providing clearer legal boundaries for vulnerability research and disclosure.
Which way now? U.S. narrows the scope of computer fraud legislation
Digital Journal published an analysis of the U.S. Supreme Court's decision narrowing the scope of the Computer Fraud and Abuse Act. Casey Ellis discusses the implications of the ruling for security researchers and the broader cybersecurity landscape.
Hackers are Heroes
App Sec Stats Flash podcast segment from May 2021 addresses the role of ethical hackers in cybersecurity. Casey Ellis argues that ethical hackers serve as essential defenders rather than criminals, emphasizing their positive contribution to strengthening security systems.
Vulnerability detection in IT assets by utilizing crowdsourcing techniques
U.S. Patent 11,019,091 outlines systems and methods for detecting vulnerabilities in IT assets through crowdsourced analysis of security data and feature vectors. The patent, filed by Casey Ellis, describes how similarity measurements between target systems and a corpus of known vulnerabilities enable community experts to identify previously unknown security weaknesses.
A Q&A with Crowdsourcing Cybersecurity Firm Bugcrowd’s Founder and Chairman, Casey Ellis
Crowd Sourcing Week published a Q&A interview with Casey Ellis, founder and chairman of Bugcrowd, in May 2021. Ellis discusses the crowdsourced security model and explains how the bug bounty industry addresses vulnerability discovery and remediation at scale.
Taking on SOAR: The Challenges and Opportunities
A Bank Info Security article from May 2021 examines the challenges and opportunities of implementing Security Orchestration, Automation and Response technologies in organizations. Casey Ellis discusses how SOAR deployment requires careful planning and addresses both the technical and operational barriers that security teams encounter during implementation.
The Economics of Software Flaw Discoveries, Exploits
An interview published in Bank Info Security examines the evolving landscape of software vulnerabilities and how organizations adapt their security strategies. Ellis discusses the changing dynamics around software flaw discoveries and exploits, addressing shifts in how enterprises approach vulnerability management.
How might we build a new internet?
iT Wire published "How might we build a new internet?" in April 2021, exploring theoretical and practical challenges of designing a more secure and resilient internet infrastructure. Casey Ellis contributes perspectives on the foundational security and resilience requirements necessary for internet redesign efforts.
When vulnerability disclosure goes sour: New GitHub repo details legal threats and risks faced by ethical hackers
The Daily Swig published an article examining a GitHub repository that documents legal threats faced by ethical hackers during vulnerability disclosure processes. Casey Ellis is cited as a contributor to the repository, which catalogs cases where security researchers encountered legal action despite following responsible disclosure practices.