Skip to content

Casey Ellis, on the record.

1,355 items across 6 categories: press, broadcast, stage, and paperwork. Captured, displayed, and archived for posterity.

Broadcast

Inside the Mind of a Hacker Unveiled with Bugcrowd

ActualTech Media's YouTube channel featured a video interview with Casey Ellis of Bugcrowd discussing findings on critical vulnerabilities in financial services. Ellis addressed the increase in vulnerabilities and the implications for the sector based on Bugcrowd's research.

ActualTech Media -
Press

Bugcrowd Reports 185% Increase in High-Risk Vulnerabilities within Financial Sector

A Bugcrowd press release published on PR Newswire reported a 185% increase in high-risk vulnerabilities discovered in the financial sector during a specific reporting period. Casey Ellis, Bugcrowd founder and CTO, commented on the findings and their implications for financial services security practices.

PR Newswire
Press

185% increase in high-risk vulnerabilities within financial sector

Security Magazine published a Bugcrowd report documenting a 185 percent increase in critical vulnerabilities across the financial sector during a period of rapid digital transformation. The report attributes the spike to accelerated technology adoption and identifies gaps in vulnerability management practices among financial institutions.

Security
Press

Bugcrowd: Financial services companies saw 185% increases in serious attacks

SiliconANGLE published Bugcrowd research showing that financial services companies experienced a 185% increase in high-risk vulnerability submissions during a specific period. Casey Ellis, Bugcrowd's founder and CTO, contributed analysis on the escalated threat landscape and what these findings reveal about security vulnerabilities in the financial sector.

SiliconANGLE
Press

US Search for Vulnerabilities Drives 10x Increase in Bug Reports

Dark Reading published analysis of Bugcrowd data showing a tenfold increase in vulnerability submissions from U.S.-based hackers, indicating growth in the domestic bug hunting community. The report reflects trends Casey Ellis and Bugcrowd have tracked in coordinated vulnerability disclosure and the expanding participation of security researchers in formal bug bounty programs.

Dark Reading
Press

Bugcrowd Reports 185% Increase in High-Risk Vulnerabilities within Financial Sector

Bugcrowd released a report via Response Source documenting a 185% increase in high-risk vulnerabilities discovered within the financial sector. Casey Ellis, as Bugcrowd's founder and CTO, contributed to the analysis of vulnerability trends affecting financial institutions based on the company's crowdsourced security research platform.

Response Source
Press

Log4Shell Vulnerability Highlights Software Supply Chain Issues

Data Center Knowledge published an article on the Log4Shell vulnerability and its exposure of software supply chain security gaps. Casey Ellis comments on how the incident underscores the need for better visibility and collaboration across open-source ecosystems to address systemic risks.

Data Center Knowledge
Press

How digital bounty hunters search for software bugs—and money

Popular Science published an explainer on bug bounty programs, how they operate, and their role in cybersecurity. Casey Ellis is quoted discussing why organizations use bounties to find vulnerabilities and the economic incentives that drive security researchers to participate.

Popular Science
Press

Your Thumbprint or Selfie Can Be Used to Get Into a Football Game Faster

The Street published an article on biometric technology adoption at sports and entertainment venues for ticketing, payments, and personalized experiences. Casey Ellis is cited discussing security implications and best practices for implementing biometric systems at large public events.

The Street
Press

More than 80 CFOs push back on sustainability reporting

Fortune reported on more than 80 CFOs pushing back against new SEC sustainability reporting rules. Casey Ellis was among the signatories raising concerns about the proposed regulatory requirements and their operational impact.

Fortune
Press

Researchers Discover H2 Database Flaw Similar to Log4Shell

BankInfoSecurity reported on a critical remote code execution vulnerability discovered in the H2 database console that shares architectural similarities with the Log4Shell flaw. The report detailed how the vulnerability in H2's console component could enable attackers to execute arbitrary code remotely, drawing comparisons to the widespread Log4Shell incident that had recently affected numerous organizations.

BankInfoSecurity
Press

JFrog researchers find JNDI vulnerability in H2 database consoles similar to Log4Shell

ZDNet published a January 2022 article covering JFrog researchers' discovery of a critical JNDI vulnerability in H2 database consoles comparable to Log4Shell. Casey Ellis contributed analysis on the vulnerability's significance and broader security implications for enterprise database environments.

ZDNet
Press

6 'nightmare' cloud security flaws were found in Azure in the last year. Does Microsoft have work to do?

Protocol published an article examining six critical security flaws discovered in Microsoft Azure over the previous year and their implications for cloud platform security. Casey Ellis commented on the vulnerabilities and Microsoft's responsibility to address the systemic challenges underlying these discoveries.

Protocol
Press

US export ban on hacking tools tweaked after public consultation

The Daily Swig reported on revisions the U.S. Commerce Department made to its rules governing the export of hacking tools following feedback from security researchers and practitioners. Casey Ellis contributed to the public consultation process that influenced the policy adjustments.

The Daily Swig
Press

Don't mess with Texas (election results)

A Washington Post article from January 2022 examines Texas primary election results and the state's security measures and audit processes. The piece discusses election integrity concerns and Texas's approach to addressing them through result verification and oversight.

Washington Post