Casey Ellis, on the record.
1,355 items across 6 categories: press, broadcast, stage, and paperwork. Captured, displayed, and archived for posterity.
Why you need a bug bounty program
An article published in CIO examines the necessity of bug bounty programs for organizations seeking to improve security outcomes. Casey Ellis provides perspective on how bug bounty initiatives deliver value by enabling crowdsourced vulnerability discovery and reducing organizational risk.
Would killing Bitcoin end ransomware?
InfoWorld published an article examining whether eliminating Bitcoin could reduce ransomware attacks. Ellis argues that while cryptocurrency plays a role in ransomware economics, shutting down Bitcoin alone would not end the threat, as attackers would adapt to alternative payment methods.
Would killing Bitcoin end ransomware?
An article in Networkworld examines whether eliminating Bitcoin would effectively stop ransomware attacks. Casey Ellis provides commentary on the relationship between cryptocurrency and ransomware, discussing the viability of such an approach as a security strategy.
Australian Cyber Roo hops to San Francisco seeking trade
ZDNet published an article about Australian cybersecurity companies, including Bugcrowd, pursuing trade and partnership opportunities in San Francisco. Casey Ellis and Bugcrowd represented Australia's growing cybersecurity sector in efforts to establish business connections with Silicon Valley firms.
The best software testing and performance conferences of 2017
TechBeacon published a curated guide to the best software testing and performance conferences in 2017. The article highlights major industry events where professionals can engage with peers on testing practices and application performance optimization.
Intercom Ups the Ante to Improve Customer Communications with Bugcrowd Bug Bounty Program
MarTechSeries reported in February 2017 that Intercom launched a bug bounty program with Bugcrowd to strengthen security for its customer messaging platform. Casey Ellis co-founded Bugcrowd and oversaw the program that engaged security researchers to identify vulnerabilities in Intercom's communications infrastructure.
KEYNOTE: An Unlikely Romance: The Current State of Bug Bounties
ISSA CISO Forum 2017 published a keynote address titled "An Unlikely Romance: The Current State of Bug Bounties." Casey Ellis discussed the evolving relationship between organizations and security researchers through bug bounty programs and their role in improving vulnerability disclosure practices.
Risky Business #440 -- Matt "PwnAllTheThings" Tait on the politicisation of infosec
Risky Business podcast episode 440 featured a sponsor interview segment with Casey Ellis discussing trends in crowdsourced security. Ellis addressed how organizations can leverage community-driven vulnerability disclosure and coordinate responsible security research at scale.
After an attack: How to keep a bad situation from getting worse
GCN published an article on January 17, 2017, outlining steps and considerations for government agencies responding to significant hacking incidents. Casey Ellis contributes guidance on containing damage and preventing further compromise after a breach has occurred.
Hackers Steal Data, Hold Databases Hostage and Leak Video Gaming Community Profiles
A Nextgov article from January 2017 examines cyberattacks involving database extortion and data leaks targeting a video gaming community. Casey Ellis provides analysis on the threat landscape and implications of these coordinated attacks on consumer data security.
Unhappy meal: McDonalds website doesnt securely protect passwords, researcher finds
SC Magazine reported on a security vulnerability in McDonald's website password storage practices in January 2017. Casey Ellis provided commentary on the findings regarding the insecure handling of customer credentials on the fast-food chain's platform.
Trump’s effort to end era where US is ‘hacked by everybody’
A GantDaily.com article covers the Trump administration's early cybersecurity agenda and national defense priorities. Casey Ellis discusses the scale of cyber threats facing the United States and approaches to strengthening the nation's defensive posture against widespread hacking incidents.
McDonalds Website Flaws were Disclosed During Christmas
A report in Infosecurity Magazine covers security flaws discovered on McDonald's India website involving insecure password handling. Casey Ellis identified and disclosed the vulnerabilities during the Christmas period, demonstrating risks in the company's authentication practices.
Trump’s effort to end era where US is ‘hacked by everybody’
A WHNT19 report on the Trump administration's cybersecurity strategy includes commentary from Casey Ellis on federal efforts to address hacking threats. Ellis provides perspective on the administration's plans to strengthen national cybersecurity defenses against foreign adversaries.
Trump’s effort to end era where US is ‘hacked by everybody’
A CNN syndicated article from Erie News Now discusses the Trump administration's cybersecurity initiatives to strengthen U.S. defenses against foreign adversaries. Casey Ellis provides commentary on the administration's stated objective to end the era in which the United States is vulnerable to widespread hacking.
Lawmakers look to bug bounties, but experts warn of unexpected work
An article in The Hill examines lawmakers' growing interest in adopting bug bounty programs for government cybersecurity. Casey Ellis warns that such programs can create unexpected workload demands that organizations may underestimate when implementing vulnerability disclosure initiatives.
Netgear launches Bug Bounty program; offering lucrative rewards
HackRead reported on Netgear's launch of a bug bounty program offering rewards to security researchers for discovering vulnerabilities in its networking equipment. Casey Ellis contributed expertise to the program's design and implementation as part of his work in coordinated vulnerability disclosure practices.
NETGEAR Launches Bug Bounties for Routers
Infosecurity Magazine reported in January 2017 that NETGEAR launched its first bug bounty programs to identify vulnerabilities in its networking hardware products. Casey Ellis contributed to the initiative as a security advisor helping establish the program framework and scope.
MongoDB databases under attack worldwide
An SC Magazine article from January 2017 describes a widespread attack campaign targeting thousands of unsecured MongoDB databases globally with ransomware. Casey Ellis is cited for his analysis of the threat landscape and the security vulnerabilities that enabled attackers to compromise the unprotected database instances at scale.
Gogo Inflight WiFi Boosts Security with Bug Bounty Program
eWEEK reported on Gogo's launch of a bug bounty program designed to enhance the security of its in-flight Wi-Fi services. Casey Ellis advised Gogo on the program's implementation and strategy to identify and address vulnerabilities in the platform.