Casey Ellis, on the record.
1,355 items across 6 categories: press, broadcast, stage, and paperwork. Captured, displayed, and archived for posterity.
Why is hacking so easy and security so hard? - ABC listen
This 2015 broadcast from ABC listen's FutureTense program, reported by Stilgherrian, explores why networks are still hacked on a large scale. Casey Ellis, founder and CEO of Bugcrowd, explains how bug bounty programs invite researchers to find and report vulnerabilities, and says crowds paid for results beat hourly-paid penetration testing.
Bug bounties and pentesting: the Wild West of online security - ABC listen
ABC Listen's Future Tense broadcast, published 28 November 2015, examines bug bounties as a way of fixing internet security flaws. Casey Ellis, founder and CEO of Bugcrowd, says bounties are contests where researchers compete, and that pentesters paid by the hour struggle to compete with crowds paid by results.
Friendly hackers ignored when pointing out bugs
An SF Chronicle article examines the problem of ethical hackers being ignored when they report security vulnerabilities to companies. Casey Ellis discusses the disconnect between security researchers attempting responsible disclosure and organizations that fail to acknowledge or act on their findings.
Oracles security chief posted a crazy ranting tirade. Then Oracle deleted it.
Fortune reported on a controversial blog post by Oracle's security chief criticizing security researchers for identifying bugs in Oracle products. Casey Ellis commented on the incident, offering perspective on responsible disclosure practices and the importance of constructive dialogue between vendors and the security research community.
Security Weekly #438 - Bug Bounty and Responsible Disclosure
Security Weekly #438, an episode of Paul's Security Weekly TV, featured a discussion on bug bounty programs and responsible disclosure practices. Casey Ellis participated in the podcast to examine the mechanics of bug bounties and principles underlying coordinated vulnerability disclosure.
This Week in Enterprise Tech 162 – Matthew Keys and the CFAA
This Week in Enterprise Tech episode 162, broadcast by TWiT.tv on October 19, 2015, examines the Matthew Keys case and the Computer Fraud and Abuse Act. Casey Ellis discusses implications of the CFAA prosecution and its relevance to cybersecurity policy and practice.
This Week in Enterprise Tech 162: Matthew Keys and the CFAA
This Week in Enterprise Tech episode 162, published by TWiT on October 16, 2015, examines the Matthew Keys case and its implications for the Computer Fraud and Abuse Act. Casey Ellis appears on the show to discuss the controversial case and the CFAA's broader legal and technical dimensions.
How building a better hacker accidentally built a better defender
OWASP AppSec California presented a stage talk titled "How building a better hacker accidentally built a better defender" in September 2015. Casey Ellis discusses how developing offensive security skills and mindset inadvertently shaped his approach to defensive work and vulnerability research.
Making your garage door smarter
Ozy.com published a feature on new technology for making garage doors smarter and more connected. Casey Ellis contributed insights on how connected home devices can be secured against emerging threats and vulnerabilities.
THIS WEEK IN ENTERPRISE TECH 158 - BUGCROWD
This Week in Enterprise Tech episode 158, broadcast on TWiT.tv in September 2015, features an in-depth interview with Casey Ellis about Bugcrowd. Ellis discusses the company's approach to crowdsourced security testing and vulnerability disclosure as a method for organizations to identify software risks.
This Week in Enterprise Tech 158: Bugcrowd
This Week in Enterprise Tech broadcast episode 158, published on the show's YouTube channel in September 2015, features an in-depth interview with Casey Ellis. The episode focuses on Bugcrowd's business model and mission within the enterprise security landscape.
Industry Reactions to Oracle CSO Rant: Feedback Friday
SecurityWeek's Feedback Friday column gathered industry responses to a rant by Oracle's Chief Security Officer against security researchers. Casey Ellis contributed perspective on the controversy surrounding responsible disclosure and researcher accountability in the security community.
Government email security woes widen with Pentagon breach and more
A TechTarget article from August 2015 examines widening security vulnerabilities in U.S. government email systems, including a Pentagon breach and related incidents. Casey Ellis is quoted discussing the risks and implications of these email security gaps for federal infrastructure.
A Facebook Intern Exposed a Major Privacy Problem - So They Fired Him
This 2015 Mic article covers Aran Khanna's Marauder's Map, a browser extension that tracked friends through Facebook Message location data. Bugcrowd CEO Casey Ellis told Mic that Facebook would ordinarily welcome such reports, but it enforces its rules when they are violated, and white hats need ground rules to avoid anarchy.
Bugcrowd Grows Revs By 400%
Infosecurity Magazine reported in 2015 that Bugcrowd achieved 400% revenue growth, demonstrating rapid expansion in the bug bounty market. Casey Ellis, as Bugcrowd's founder and CEO, led the company through this period of significant commercial growth.
Researcher to FireEye: If youre not paying, Im not talking
An article in CSO Online covers a security researcher's refusal to disclose a vulnerability to FireEye over a payment dispute. Casey Ellis discussed the tension between researchers and vendors regarding bug bounty compensation and the incentives that drive responsible disclosure practices.
Russia Implicated in White House Email Hack
An eWEEK security article from August 2015 reports on Russia being implicated in a breach of White House email systems. Casey Ellis commented on the incident's significance for understanding state-sponsored cyber operations and their operational patterns.
Most Wanted: Computer Bugs
This 2015 article from ASIS International's Security Management magazine covers Western Union's bug bounty program and why companies adopt them. Casey Ellis, CEO and cofounder of Bugcrowd, says program managers should clearly state their expectations so researchers know what to expect, and notes that wanting to understand how systems work motivates many researchers.
United Airlines hack could signal bulk spying campaign
ComputerWeekly published an analysis of a breach affecting United Airlines that examined whether the incident signaled part of a wider espionage operation. Casey Ellis commented on the security implications and broader patterns suggested by the attack.
Vendors Finding Value in Bug Bounty Programs
An eWEEK article from July 2015 examines how software vendors are discovering the value of bug bounty programs as a security practice. Casey Ellis is quoted on the business and security benefits vendors gain from crowdsourced vulnerability discovery and remediation.
Invitation-Only Bug Bounty Programs Becoming More Popular: Bugcrowd
SecurityWeek published an article examining Bugcrowd research on the growing adoption of invitation-only bug bounty programs among organizations. Casey Ellis, Bugcrowd's co-founder, contributed data and perspective on why companies are increasingly restricting bounty program access to vetted researchers.
Costanoa closes second fund at $135 mln
Costanoa Venture Capital closed its second fund at $135 million, according to PE Hub. Casey Ellis was among the founders of Costanoa and participated in the fund's formation during his tenure as an early venture investor.
Costanoa Venture Capital raises $135M second fund
Startup Beat reported that Costanoa Venture Capital closed a $135 million second fund in July 2015. Casey Ellis is listed as one of the fund's limited partners investing in early-stage technology companies.
Assessing the Risks of Cyber Attacks
CMSwire published an article on assessing the various risks associated with cyberattacks on organizations. Casey Ellis contributes perspectives on how organizations can identify and evaluate cyber threats to their infrastructure and operations.
Scottrade Acknowledges Two-Year-Old Data Breach
eSecurity Planet reported on Scottrade's acknowledgment of a data breach that had occurred two years earlier at the financial services firm. Casey Ellis commented on the breach disclosure and its implications for customer data security practices in the financial sector.
Bugcrowd signs deal with electric car maker Tesla Motors
This 2015 SmartCompany news article reports that security testing marketplace Bugcrowd has signed a deal with electric car maker Tesla Motors to improve its security. Bugcrowd co-founder and chief executive Casey Ellis says the partnership is a great chance to work with a company building amazing tech, citing the Internet of Cars trend.
[Webinar] The Art & Value of Bug Bounties
A Bugcrowd webinar from May 2015 explores the mechanics of running an effective bug bounty program. Casey Ellis discusses the strategic and practical approaches organizations can use to maximize value from bug bounty initiatives.
Hacker admits hijacking plane mid-air: FBI
This Sydney Morning Herald article from May 17, 2015, covers an FBI claim that a hacker took control of an airliner's onboard computer system, along with United Airlines' bug bounty program. Casey Ellis, founder of BugCrowd, tells Fairfax that Australian companies still see paying hackers for bugs as a crazy Silicon Valley idea.
Scottrade Data Breach Hits 4.6M Customers, Contact Info Targeted
CIO Today published an article on May 10, 2015 covering the Scottrade data breach affecting 4.6 million customers whose contact information was compromised. Casey Ellis commented on the breach and its implications for customer data security and incident response procedures.
Hacked Opinions: Vulnerability disclosure - Casey Ellis
CSO Online published an opinion piece by Casey Ellis on vulnerability disclosure best practices. Ellis discusses the importance of responsible disclosure processes in protecting organizations and coordinating effective security responses.