Casey Ellis, on the record.
1,355 items across 6 categories: press, broadcast, stage, and paperwork. Captured, displayed, and archived for posterity.
The U.S. Still Needs Cybersecurity Pros Despite All the Tech Layoffs
Clearance Jobs published an article examining cybersecurity job demand in the U.S. amid tech sector layoffs. Casey Ellis discusses the continued need for skilled cybersecurity professionals despite industry workforce reductions and broader economic pressures on hiring.
How AI and DAST can mitigate security risks
SC Magazine published an article examining how artificial intelligence and dynamic application security testing can reduce security vulnerabilities. Casey Ellis discusses the intersection of AI and DAST technologies and their role in strengthening application security defenses against emerging threats.
Automated Prediction Of Cybersecurity Vulnerabilities
A patent filed in January 2023 describes an automated system for predicting cybersecurity vulnerabilities in IT assets by linking technology traits to known vulnerability data within a graph database. The technique uses ontologies and discovery tools to map attack surfaces and identify potential vulnerabilities for bug-bounty program targets, with results delivered through a service-oriented architecture.
Cisco: No Fixes for Small Business Router Vulnerabilities
A Channel Futures report documents Cisco's decision to leave critical vulnerabilities unpatched in several end-of-life small business routers, recommending customer migration to newer hardware instead. Casey Ellis commented on the security implications of the vendor's approach and the risks posed to organizations still operating the affected devices.
Cisco warns of two critical vulnerabilities in end-of-life routers
Teiss published a press item covering Cisco's warning about two critical vulnerabilities in end-of-life routers that will not receive patches. Casey Ellis is quoted commenting on the security implications and risk management considerations for organizations still operating the affected equipment.
Cisco Warns of Critical Vulnerability in End-of-Life Routers
This Infosecurity Magazine article, dated January 13, 2023, covers a critical Cisco flaw in end-of-life small business routers that Cisco did not patch. Bugcrowd CTO Casey Ellis warns that these widely deployed SMB routers could impact thousands of devices, and that remote code execution on core network gear greatly eases lateral movement.
CISA removes 'PetitPotam' bug from catalog after Microsoft warns of risk to domain controllers
This January 2023 story from The Record reports that CISA removed a PetitPotam-related flaw from its exploited-bugs catalog after Microsoft flagged update problems on domain controllers. Bugcrowd CTO Casey Ellis says CISA made the right call, since patches released under attack can carry unexpected risks, and calls it a shift from vulnerability to risk.
Job applicant data stolen in breach of burger chain Five Guys - SiliconANGLE
This SiliconANGLE article reports on a breach at burger chain Five Guys in which job applicant data was stolen. Casey Ellis, founder and CTO of Bugcrowd, says the attack resembles a recruiting system breach and notes that systems open to the public are also more available to attackers.