Casey Ellis, on the record.
1,355 items across 6 categories: press, broadcast, stage, and paperwork. Captured, displayed, and archived for posterity.
Dash invites crowd to hack its blockchain
Bankless Times reports on Dash launching a bug bounty program through Bugcrowd to invite security researchers to identify vulnerabilities in its blockchain. Casey Ellis, Bugcrowd's founder and CEO, discusses the program's role in strengthening Dash's security posture through coordinated vulnerability disclosure.
Dash Teams Up With Bugcrowd For Cybersecurity Services
Dash announced a partnership with Bugcrowd for crowdsourced security services, according to CrowdFund Insider. Casey Ellis, Bugcrowd's founder, highlighted the collaboration as a way to strengthen Dash's security posture through coordinated vulnerability research and disclosure.
Dash to unleash elite cybersecurity unit to ‘hack’ its blockchain
Dash announced plans to establish an elite cybersecurity unit through Bugcrowd to conduct proactive penetration testing on its blockchain, according to CryptoNinjas. Casey Ellis co-founded Bugcrowd, the crowdsourced security platform facilitating the initiative to identify and address vulnerabilities in Dash's network.
Dash Employs Elite Cybersecurity Service Bugcrowd To ‘Hack’ Its Blockchain
Payment Week reported in 2017 that the Dash blockchain project engaged Bugcrowd to conduct security testing and vulnerability assessment of its platform. Casey Ellis, Bugcrowd's founder, oversaw the engagement that leveraged crowdsourced security researchers to identify potential weaknesses in Dash's blockchain infrastructure.
What Does Bugcrowd Tell Us About The Future Of Crowdsourcing?
Forbes published an analysis by Dan Woods in 2017 examining Bugcrowd's business model as a window into the future of crowdsourcing. The article considers how the bug bounty platform's approach and growth signal trends in distributed security research and vulnerability disclosure.
What Does Bugcrowd Tell Us About The Future Of Crowd...
An article published on Bullfax examines Australian cybersecurity companies, including Bugcrowd, as they pursue trade and partnership opportunities in San Francisco. Casey Ellis and Bugcrowd are featured as part of the discussion on crowdsourced security's expanding role in the technology sector.
Panel: National Cyberrisks in 2017 (Bruce Schneier)
A panel on national cyberrisks in 2017 was held at the USTRANSCOM Cyber Roundtable in February 2017. Casey Ellis participated alongside security expert Bruce Schneier to discuss emerging threats and strategic vulnerabilities affecting U.S. national defense and infrastructure.
Why you need a bug bounty program
An article published in CIO examines the necessity of bug bounty programs for organizations seeking to improve security outcomes. Casey Ellis provides perspective on how bug bounty initiatives deliver value by enabling crowdsourced vulnerability discovery and reducing organizational risk.
Would killing Bitcoin end ransomware?
InfoWorld published an article examining whether eliminating Bitcoin could reduce ransomware attacks. Ellis argues that while cryptocurrency plays a role in ransomware economics, shutting down Bitcoin alone would not end the threat, as attackers would adapt to alternative payment methods.
Would killing Bitcoin end ransomware?
An article in Networkworld examines whether eliminating Bitcoin would effectively stop ransomware attacks. Casey Ellis provides commentary on the relationship between cryptocurrency and ransomware, discussing the viability of such an approach as a security strategy.
Australian Cyber Roo hops to San Francisco seeking trade
ZDNet published an article about Australian cybersecurity companies, including Bugcrowd, pursuing trade and partnership opportunities in San Francisco. Casey Ellis and Bugcrowd represented Australia's growing cybersecurity sector in efforts to establish business connections with Silicon Valley firms.
The best software testing and performance conferences of 2017
TechBeacon published a curated guide to the best software testing and performance conferences in 2017. The article highlights major industry events where professionals can engage with peers on testing practices and application performance optimization.
Intercom Ups the Ante to Improve Customer Communications with Bugcrowd Bug Bounty Program
MarTechSeries reported in February 2017 that Intercom launched a bug bounty program with Bugcrowd to strengthen security for its customer messaging platform. Casey Ellis co-founded Bugcrowd and oversaw the program that engaged security researchers to identify vulnerabilities in Intercom's communications infrastructure.
KEYNOTE: An Unlikely Romance: The Current State of Bug Bounties
ISSA CISO Forum 2017 published a keynote address titled "An Unlikely Romance: The Current State of Bug Bounties." Casey Ellis discussed the evolving relationship between organizations and security researchers through bug bounty programs and their role in improving vulnerability disclosure practices.
Risky Business #440 -- Matt "PwnAllTheThings" Tait on the politicisation of infosec
Risky Business podcast episode 440 featured a sponsor interview segment with Casey Ellis discussing trends in crowdsourced security. Ellis addressed how organizations can leverage community-driven vulnerability disclosure and coordinate responsible security research at scale.
After an attack: How to keep a bad situation from getting worse
GCN published an article on January 17, 2017, outlining steps and considerations for government agencies responding to significant hacking incidents. Casey Ellis contributes guidance on containing damage and preventing further compromise after a breach has occurred.
Hackers Steal Data, Hold Databases Hostage and Leak Video Gaming Community Profiles
A Nextgov article from January 2017 examines cyberattacks involving database extortion and data leaks targeting a video gaming community. Casey Ellis provides analysis on the threat landscape and implications of these coordinated attacks on consumer data security.
Unhappy meal: McDonalds website doesnt securely protect passwords, researcher finds
SC Magazine reported on a security vulnerability in McDonald's website password storage practices in January 2017. Casey Ellis provided commentary on the findings regarding the insecure handling of customer credentials on the fast-food chain's platform.
Trump’s effort to end era where US is ‘hacked by everybody’
A GantDaily.com article covers the Trump administration's early cybersecurity agenda and national defense priorities. Casey Ellis discusses the scale of cyber threats facing the United States and approaches to strengthening the nation's defensive posture against widespread hacking incidents.
McDonalds Website Flaws were Disclosed During Christmas
A report in Infosecurity Magazine covers security flaws discovered on McDonald's India website involving insecure password handling. Casey Ellis identified and disclosed the vulnerabilities during the Christmas period, demonstrating risks in the company's authentication practices.
Trump’s effort to end era where US is ‘hacked by everybody’
A WHNT19 report on the Trump administration's cybersecurity strategy includes commentary from Casey Ellis on federal efforts to address hacking threats. Ellis provides perspective on the administration's plans to strengthen national cybersecurity defenses against foreign adversaries.
Trump’s effort to end era where US is ‘hacked by everybody’
A CNN syndicated article from Erie News Now discusses the Trump administration's cybersecurity initiatives to strengthen U.S. defenses against foreign adversaries. Casey Ellis provides commentary on the administration's stated objective to end the era in which the United States is vulnerable to widespread hacking.
Lawmakers look to bug bounties, but experts warn of unexpected work
An article in The Hill examines lawmakers' growing interest in adopting bug bounty programs for government cybersecurity. Casey Ellis warns that such programs can create unexpected workload demands that organizations may underestimate when implementing vulnerability disclosure initiatives.
Netgear launches Bug Bounty program; offering lucrative rewards
HackRead reported on Netgear's launch of a bug bounty program offering rewards to security researchers for discovering vulnerabilities in its networking equipment. Casey Ellis contributed expertise to the program's design and implementation as part of his work in coordinated vulnerability disclosure practices.
NETGEAR Launches Bug Bounties for Routers
Infosecurity Magazine reported in January 2017 that NETGEAR launched its first bug bounty programs to identify vulnerabilities in its networking hardware products. Casey Ellis contributed to the initiative as a security advisor helping establish the program framework and scope.
MongoDB databases under attack worldwide
An SC Magazine article from January 2017 describes a widespread attack campaign targeting thousands of unsecured MongoDB databases globally with ransomware. Casey Ellis is cited for his analysis of the threat landscape and the security vulnerabilities that enabled attackers to compromise the unprotected database instances at scale.
Gogo Inflight WiFi Boosts Security with Bug Bounty Program
eWEEK reported on Gogo's launch of a bug bounty program designed to enhance the security of its in-flight Wi-Fi services. Casey Ellis advised Gogo on the program's implementation and strategy to identify and address vulnerabilities in the platform.
What’s in a bug bounty? Not extortion
The Parallax published an analysis of the Uber data breach cover-up and the distinction between legitimate bug bounty payments and extortion. Casey Ellis examines how the circumstances surrounding Uber's handling of the breach illustrate the ethical and legal boundaries in responsible vulnerability disclosure.
Fixing Data Breaches Part 4: Bug Bounties
Troy Hunt's blog post examines bug bounty programs as a component of addressing data breaches, published on his security website in December 2016. Casey Ellis is featured discussing how coordinated vulnerability disclosure and bug bounties contribute to improving organizational security practices and breach prevention.
What did Yahoo know? And when did they know it?
SC Magazine published an in-depth report on Yahoo's disclosure of a second major data breach in 2016 affecting more than one billion user accounts. Casey Ellis commented on the security incident and its implications for the affected users and the company's disclosure practices.