Casey Ellis, on the record.
1,355 items across 6 categories: press, broadcast, stage, and paperwork. Captured, displayed, and archived for posterity.
Should contractors disclose vulnerabilities to get government work?
This SC Media article from March 6, 2025, examines a House bill that would require federal contractors to operate vulnerability disclosure programs. Casey Ellis, founder of Bugcrowd, whose company backed the industry letter supporting the bill, says it has strong bipartisan support and should become law later in 2025.
Bugcrowd Security Flash: Breaking Down H.R. 872
Bugcrowd released a video on H.R. 872 featuring founder Casey Ellis and Americas CISO Trey Ford discussing the legislation's implications for cybersecurity. Ellis and Ford examine what the bill means for the industry and outline anticipated next steps in regulatory and security policy development.
In-House Evaluation Is Not Enough: Towards Robust Third-Party Flaw Disclosure for General-Purpose AI
arXiv.org published a research paper examining gaps in how flaws in general-purpose AI systems are reported and evaluated compared to established software security practices. The paper, developed by collaborators across security, machine learning, law, and policy, proposes standardized flaw reporting formats, broad disclosure programs with legal protections for researchers, and improved infrastructure for coordinating reports across AI providers.
AI Wars Playing Out in Application Attacks and Defenses
A CyberRisk TV video segment features an interview between host Deb Radcliff and Bugcrowd founder Casey Ellis about artificial intelligence's role in application security attacks and defenses. Ellis discusses how AI is reshaping both offensive and defensive strategies in the evolving landscape of application security threats.
Lawmakers propose DeepSeek ban on government devices
This Security Magazine article from February 10, 2025 covers a bipartisan congressional bill that would bar DeepSeek use on government devices. Casey Ellis, founder of Bugcrowd, says the ban reflects geopolitics and trust as much as technical vulnerabilities, calling it a defensive step that still needs a proactive approach.
Casey Ellis: Pioneering The Bug Bounty Platform
The Phillip Wylie Show features an interview with Casey Ellis, founder of Bugcrowd, discussing his background in technology and the development of bug bounty platforms. Ellis describes how Bugcrowd connects organizations with ethical hackers to identify security vulnerabilities, and explains his approach to leveraging the white hat hacker community to enhance internet security.
Trump administration disbands Cyber Safety Review Board
This Security Info Watch article from January 27, 2025, reports on the Trump administration's decision to disband the Cyber Safety Review Board, an advisory body. Casey Ellis, founder of Bugcrowd, says the move follows a pattern seen after past administration changes and is not a huge surprise, noting that threats and vulnerabilities persist regardless.
Trump Has Had a Light Touch on Cybersecurity – So Far
Security Boulevard published this January 2025 article on how early executive actions from the new Trump administration treated cybersecurity. Bugcrowd founder Casey Ellis told the outlet he is encouraged, noting the administration has an established track record of understanding cybersecurity's role in national security, resilience, and prosperity.
Biden’s Final Cybersecurity EO Could Put Demands on MSSPs
This MSSP Alert article from January 21, 2025 examines how Biden's final cybersecurity executive order could require managed security providers to adjust their practices. Casey Ellis, founder of Bugcrowd, says the order is a clear effort to keep the past four years' core cybersecurity and international relations conclusions part of U.S. policy.
Security leaders weigh in on Biden’s new cybersecurity executive order
Security Magazine's January 2025 article gathers security leaders' reactions to Biden's new cybersecurity executive order, which covers AI in cyber defense and quantum-resistant encryption. Casey Ellis of Bugcrowd notes the order circulated in draft among a limited Washington audience for weeks and credits the White House and ONCD with substantial technical expertise.
Biden signs executive order to strengthen national cybersecurity in last days in office - SiliconANGLE
This SiliconANGLE article from January 16, 2025 reports on President Biden signing an executive order to strengthen national cybersecurity in his final days in office. Casey Ellis, founder of Bugcrowd, told the outlet the order was an open secret, though he doubts it would last past the administration change.
Security flash: Salt Typhoon | @Bugcrowd
Bugcrowd published a Security Flash video featuring founder Casey Ellis and America's CISO Trey Ford discussing the Salt Typhoon threat. The 20-minute broadcast covers Salt Typhoon's background, organizational impact, and implications for security teams.
Hackers Launch a Supply Chain Attack by Injecting Malicious Code into Hijacked Chrome Extensions - CPO Magazine
This CPO Magazine article, published January 9, 2025, covers a supply chain attack that injected malicious code into over 35 hijacked Chrome extensions to take over Facebook Ad accounts. Casey Ellis, founder of Bugcrowd, warns that because Cyberhaven's Chrome extension counts enterprise and business users as regular users, a compromise could affect business accounts.
China cyber threats: What businesses can do to protect themselves
This IT Pro article, published January 9, 2025, examines rising China-linked cyber threats and what business leaders should do to strengthen their defenses. Bugcrowd founder Casey Ellis says Chinese cyber operations shifted from covert espionage to openly aggressive spray-and-pray tactics around 2019, and he calls Flax Typhoon the noisiest group.
Cybersecurity in 2025: Global conflict, grown-up AI, and the wisdom of the crowd - Help Net Security
This January 9, 2025 contributed article from Help Net Security presents predictions on new cyberattacks and greater community collaboration. Casey Ellis, Bugcrowd's founder, contributes as a guest author, arguing organizations increasingly rely on crowdsourced talent for offensive testing and that the community will collaborate more to counter growing threats.
Crowdsourced Security & Vulnerability Disclosure with Casey Ellis
Delinea's 401 Access Denied podcast features a discussion on crowdsourced security and vulnerability disclosure practices. Ellis explains how crowdsourced models improve security outcomes and discusses the role of coordinated disclosure in modern threat management.
Member of Blackhat Review Board
Casey Ellis has been accepted as a member of the Black Hat Review Board for 2025. In this role, he will serve as a judge evaluating submissions for the annual information security conference.