Casey Ellis, on the record.
1,355 items across 6 categories: press, broadcast, stage, and paperwork. Captured, displayed, and archived for posterity.
Bugcrowd unmasks (sort of) hackers to cast vulnerability hunters in better light
A November 2017 Ars Technica article covers Bugcrowd's release of data and personas about its vulnerability researcher community. Casey Ellis, Bugcrowd's founder, worked to shift public perception of security researchers as professional contributors rather than stereotypical hackers.
How cyber pros can stay on top of their game
GCN published an article titled "How cyber pros can stay on top of their game" offering guidance to cybersecurity professionals in government roles. Casey Ellis contributed advice on the skills and knowledge areas government security practitioners require to remain effective in their positions.
Bugs you should be willing to pay for
An October 2017 Medium opinion piece examines which types of security vulnerabilities companies should prioritize funding through bug bounty programs. Casey Ellis outlines criteria for determining which bugs merit financial rewards, helping organizations allocate bounty resources toward the vulnerabilities that pose the greatest risk.
Computer Fraud and Abuse Act (CFAA) Panel
A panel discussion on the Computer Fraud and Abuse Act aired on Cyberscoop Cybertalks DC in October 2017. Casey Ellis participated in the discussion examining the legal framework governing unauthorized computer access and its application to cybersecurity research and practice.
DOJ examines controversial new hack back bill
CyberScoop reported on the Department of Justice's examination of a controversial "hack back" bill that would permit companies to conduct offensive cyber operations. Casey Ellis commented on the policy implications and technical challenges of authorizing private sector cyber counterattacks.
Secret Program Offers $250,000 Bounty for VM Escape Vulnerabilities
VMBlog reported on a confidential bug bounty program offering up to $250,000 for discoveries of virtual machine escape vulnerabilities. Casey Ellis is involved in the program's coordination and outreach to the security research community.
MongoDB Attack Shows Off Cyber Extortionists' New Tricks
Dark Reading published an article about a wave of attacks targeting unsecured MongoDB databases in which attackers deleted data and demanded ransom for its return. Casey Ellis commented on the evolving extortion tactics used by cybercriminals and the security vulnerabilities exposed by the incident.
Why Outside Feedback Makes Your Engineering Team Stronger
Casey Ellis delivered a talk at the 2017 Structure Security Conference addressing how external feedback strengthens engineering teams. He discussed methods for incorporating outside perspectives into development processes to improve security outcomes and team resilience.
SINET Thinks Forward: Human Versus Technology - What’s Next For Bug Bounty Programs
SINET61's SINET Thinks Forward conference in Sydney featured a stage discussion on the future of bug bounty programs. Casey Ellis spoke on the balance between human expertise and technological capabilities in security vulnerability discovery and management.
Security.txt Standard Proposed, Similar to Robots.txt
This BleepingComputer news article from September 2017 reports that web developer Ed Foudil submitted an IETF draft to standardize security.txt, a root-hosted file describing a site's security policies. In it, Casey Ellis advises Foudil to axe first and then sandpaper, refining his many ideas one by one into a well-thought-out draft.
What are the latest cutting edge technologies in cybersecurity and the greatest needs?
The 8th Annual Billington Cybersecurity Summit featured a panel discussion on cutting-edge cybersecurity technologies and critical industry needs. Casey Ellis participated in the conversation addressing emerging threats and technological solutions in the cybersecurity landscape.
Nine Ways Tech Companies Can Stay Ahead Of The Curve
This Forbes Technology Council article from September 12, 2017, presents nine ways technology companies can stay ahead of rapid change in the industry. Casey Ellis of Bugcrowd advises technology executives to ask dumb questions when needed, decide which advice to ignore or adopt, and get a coach who keeps them accountable.
Casey Ellis - 5,500 Hackers + Your Code
SOURCE Security Conference Boston 2014 featured a presentation by Casey Ellis on coordinating security research at scale. Ellis discussed methods for managing bug bounty programs with thousands of participating researchers and integrating their findings into development workflows.
Planning To Grow Your Tech Business Team? Here's What To Look For When Interviewing
This Forbes Technology Council article from September 2017, titled "Planning To Grow Your Tech Business Team? Here's What To Look For When Interviewing," offers hiring guidance for tech business leaders. Casey Ellis of Bugcrowd contributes a point on tenacity, calling it an ingrained trait that cannot be taught.
Exclusive: Top Hackers-for-Hire Startup Names New CEO | Fortune
This Fortune article from August 28, 2017 reports that Bugcrowd, a bug bounty startup, is naming a new chief executive. Casey Ellis, the company's founder and former CEO, told Fortune he is stepping aside to become chairman and chief technology officer so he can focus on the technical product.
Rapidly growing bug bounty company Bugcrowd names new CEO
This CyberScoop article from August 28, 2017, reports that California-based bug bounty platform Bugcrowd named a new chief executive, Ashish Gupta. Casey Ellis, who helped launch the company in 2012, stepped down as CEO to become chairman and chief technology officer, and he says he approached the board with the idea months earlier.
Bugcrowd Launches Bug Bounty Program for Wi-Fi Device Maker eero
Dark Reading reported on Bugcrowd's launch of a public bug bounty program for Wi-Fi device maker eero in August 2017. Casey Ellis, Bugcrowd's founder and CTO, discussed the program's role in improving security for connected home devices through crowdsourced vulnerability research.
Voice of Security Radio: Finding Flaws in the IoT
Dark Reading's Voice of Security Radio broadcast Finding Flaws in the IoT, published August 15, 2017, asks whether crowdsourcing can improve Internet of Things security. Editor Curt Franklin hosts Bugcrowd CEO Casey Ellis to explore why IoT security differs from enterprise security and how professionals can make IoT bugs easier to find.
Dash invites researchers to hack their blockchain - Help Net Security
Help Net Security published this 2017 article about the Dash bug bounty, run through Bugcrowd to have researchers find critical software vulnerabilities. Bugcrowd CEO Casey Ellis says a shortage of cybersecurity professionals and an expanding attack surface leave companies at a disadvantage, and self-managed programs quickly overwhelm them.
Dash employs cybersecurity service Bugcrowd to identify blockchain vulnerabilities
Dash cryptocurrency engaged Bugcrowd's cybersecurity services to identify vulnerabilities in its blockchain infrastructure, according to EconoTimes. Casey Ellis, Bugcrowd's founder and CEO, supported the partnership to help strengthen Dash's security posture through crowdsourced vulnerability research.
13-year-old Pakistani hacker finds bugs at world’s top tech companies
An article published in Republica profiles a 13-year-old Pakistani hacker who discovered and reported security vulnerabilities at major technology companies. Casey Ellis is mentioned as a figure supporting young security researchers and encouraging responsible vulnerability disclosure practices globally.
WikiLeaks Dumps Alleged CIA Malware and Hacking Trove
BankInfoSecurity published an article on the security implications for financial institutions following WikiLeaks' release of alleged CIA hacking tools and malware. Casey Ellis provided analysis on the incident's impact and what organizations should prioritize in response to the disclosure.
WikiLeaks Dumps Alleged CIA Malware and Hacking Trove
DataBreachToday published an article on the security implications of WikiLeaks' release of alleged CIA hacking tools and malware for the financial industry. Casey Ellis commented on the risks these disclosed vulnerabilities and tactics pose to financial institutions' security posture and defense strategies.
WikiLeaks Dumps Alleged CIA Malware and Hacking Trove
Government Info Security covered the WikiLeaks release of alleged CIA malware and hacking tools in August 2017. Casey Ellis provided analysis on the security implications and fallout from the disclosure of the agency's cyber capabilities.
WikiLeaks Dumps Docs on CIA’s Hacking Tools
KrebsOnSecurity reported on the WikiLeaks release of documents alleging CIA hacking tools and their capabilities. Casey Ellis provided analysis on the disclosed tools' implications for cybersecurity defenses and vulnerability disclosure practices.
CIA hacking dossier leak reignites debate over vulnerability disclosure
The Register published an analysis of the vulnerability disclosure debate sparked by WikiLeaks' release of alleged CIA hacking tools in March 2017. Casey Ellis contributed perspective on responsible disclosure practices and the tension between security researchers, vendors, and government agencies in managing software vulnerabilities.
WikiLeaks Dumps Alleged CIA Malware and Hacking Trove
CUInfoSecurity published an analysis of WikiLeaks' release of alleged CIA hacking tools and malware in August 2017. Casey Ellis commented on the security implications of the disclosed exploit code and its impact on defenders across the industry.
Overnight Cybersecurity: Hackers breach voting machines | Kelly's move to White House leaves void at DHS | House panel presses agencies for info on Russian cyber firm
This Overnight Cybersecurity newsletter from The Hill, published July 31, 2017, rounds up daily hacking and data privacy news, including reports on hackers breaching voting machines. Casey Ellis, founder of Bugcrowd, is quoted saying automotive is the fastest growing bug bounty sector as automakers struggle to hire the specialized researchers they need.
Demand for automotive cybersecurity pros outpaces supply
A 2017 article in The Hill examines the shortage of automotive cybersecurity professionals relative to industry demand. Casey Ellis discusses the talent gap and the need for organizations to develop skilled security personnel in the automotive sector.
Election tech hacked within hours at DEF CON Voting Village
A July 2017 SC Magazine article covers the DEF CON Voting Village, where election technology was compromised in hours by security researchers. Casey Ellis participated in the event, demonstrating vulnerabilities in voting systems and highlighting the need for stronger security measures in election infrastructure.