Casey Ellis, on the record.
1,355 items across 6 categories: press, broadcast, stage, and paperwork. Captured, displayed, and archived for posterity.
Mobile Device Makers Increasingly Embrace Bug Bounty Programs
Dark Reading published an article examining the growing adoption of bug bounty programs among mobile device manufacturers as a security practice. Casey Ellis is cited for his perspective on how these programs help device makers identify and remediate vulnerabilities more effectively.
How to use bug bounties with penetration testing to bolster your app sec
TechBeacon published an article on integrating bug bounties and penetration testing to strengthen application security programs. Casey Ellis discusses how organizations can combine these approaches to identify and remediate vulnerabilities more effectively across their development lifecycle.
Uber used bug bounty program to launder blackmail payment to hacker
Ars Technica reported in 2017 that Uber allegedly used its bug bounty program to conceal a blackmail payment to a hacker by framing it as a standard reward. Casey Ellis, founder of vulnerability disclosure platform Bugcrowd, commented on how the incident damaged trust in bug bounty programs and highlighted the need for transparency in responsible disclosure practices.
Trump's effort to end era where US is 'hacked by everybody'
ABC KAKE published a CNN report on President-elect Trump's plan to strengthen U.S. cybersecurity defenses against hacking threats. Casey Ellis contributed perspective on the administration's approach to reducing vulnerabilities and building a more resilient national cyber posture.
Trump's effort to end era where US is 'hacked by everybody'
ABC 7 reported on the Trump administration's cybersecurity initiatives aimed at reducing vulnerabilities to foreign hackers. Casey Ellis commented on the need for coordinated national efforts to address systemic weaknesses in critical infrastructure and improve information sharing between government and private sector organizations.
Trump's effort to end era where US is 'hacked by everybody'
A CNN report distributed by AZ Family examines the Trump administration's cybersecurity agenda and efforts to reduce U.S. vulnerability to foreign hacking. Casey Ellis provides analysis on the administration's approach to addressing the nation's cyber defense challenges.
Trump's effort to end era where US is 'hacked by everybody'
A CBS5 report covered the Trump administration's cybersecurity initiative to strengthen defenses against widespread breaches. Casey Ellis commented on the need for coordinated federal action and private-sector involvement to close critical vulnerabilities facing the nation.
Trump's effort to end era where US is 'hacked by everybody'
CNN published an article about President-elect Trump's plans to establish a new national cybersecurity defense strategy to address widespread hacking vulnerabilities. Casey Ellis provided commentary on the administration's approach to strengthening U.S. cybersecurity defenses and reducing the nation's exposure to cyberattacks.
Trump's effort to end era where US is 'hacked by everybody'
A December 2017 Crossroads Today report examines the Trump administration's cybersecurity objectives and expert perspectives on those goals. Casey Ellis provides analysis on the administration's effort to reduce the frequency and impact of cyber attacks against the United States.
Trump's effort to end era where US is 'hacked by everybody'
KBZK published a December 2017 article on the Trump administration's cybersecurity policy agenda and efforts to reduce vulnerability to foreign hacking. Casey Ellis provided expert analysis on the administration's approach to strengthening national cybersecurity defenses against state-sponsored threats.
Trump's effort to end era where US is 'hacked by everybody'
A KITV 4 report discusses President-elect Trump's stated goal to reduce US vulnerability to cyberattacks and the obstacles his administration faces in implementing cybersecurity improvements. Casey Ellis comments on the technical and organizational challenges involved in securing federal systems against persistent threats.
Trump's effort to end era where US is 'hacked by everybody'
A KRTV report from December 2017 covers Trump administration cybersecurity initiatives and challenges facing U.S. digital defenses. Casey Ellis provides expert perspective on the cyber threats and policy approaches discussed in the administration's effort to strengthen national security.
Trump's effort to end era where US is 'hacked by everybody'
A CNN report carried by KXLH examines the Trump administration's early cybersecurity strategy and efforts to strengthen defenses against foreign threats. Casey Ellis discusses the scale of current vulnerabilities and the need for coordinated action across government and the private sector to address systemic security gaps.
Trump's effort to end era where US is 'hacked by everybody'
NBC 2 published a syndicated CNN report on the Trump administration's cybersecurity strategy. Casey Ellis provided analysis on the administration's effort to address the nation's vulnerability to cyberattacks from foreign actors and criminal groups.
Trump's effort to end era where US is 'hacked by everybody'
W3 News published an article on the Trump administration's cybersecurity policy and efforts to address widespread hacking threats facing the United States. Casey Ellis provided commentary on the administration's approach to strengthening national cybersecurity defenses.
How DJI fumbled its bug bounty program and created a PR nightmare
This CyberScoop article, published November 30, 2017, examines how drone maker DJI mishandled the rollout of its bug bounty program, sparking a public dispute with researchers. Casey Ellis, founder of bug bounty firm BugCrowd, says DJI launched without comprehensive rules, which he sees as the root cause of its PR problems.
Leonard Bailey + Casey Ellis + Marten Mickos - Cybertalks 2017
A panel discussion featuring Leonard Bailey, Casey Ellis, and Marten Mickos was held at Cybertalks 2017 and published by CyberScoop. Ellis participated in a conversation on current cybersecurity challenges alongside fellow industry practitioners.
Bugcrowd Partners with Samsung to Reward Security Researcher Community
Bugcrowd announced a partnership with Samsung through 4 Traders to manage bug bounty programs and reward security researchers. The collaboration leverages Bugcrowd's platform capabilities to connect Samsung with vetted security researchers for identifying and reporting vulnerabilities.
CEO/Founder Perspective: How to Hire Your Replacement
A Forbes article published in November 2017 presents Casey Ellis's perspective on the process of hiring a replacement chief executive. Ellis shares advice on succession planning and the practical steps founders and CEOs can take when preparing to transition leadership roles.
HackerFight: The Full Disclosure Debate
HackerFight is a stage debate hosted by NBT5 examining the full disclosure debate in cybersecurity. Casey Ellis participates in the discussion on responsible disclosure practices and their implications for security researchers and organizations.
Survey of Bug Bounty Hunters Explains Their Demographics, Motivation
A 2017 survey covered in The Low-Down examined the demographics and motivations of bug bounty hunters participating in coordinated vulnerability disclosure programs. Casey Ellis contributed research insights that helped explain what drives security researchers to participate in bug bounty initiatives and who they are.
Why your entire organization needs to be in the security feedback loop
This CyberScoop video interview, published November 16, 2017, features Bugcrowd founder and CTO Casey Ellis in conversation with Greg Otto. Ellis discusses how organizations can strengthen their cybersecurity posture beyond simply spending on security operations, and why the whole organization should take part in the security feedback loop.
Casey Ellis - CyberTalks 2017
CyberTalks 2017 featured a solo presentation by Casey Ellis on the evolution of security testing, published as a video by the conference organizers. Ellis discussed how security testing has developed and changed over time, offering his perspective on current industry practices and trends.
Bugcrowd unmasks (sort of) hackers to cast vulnerability hunters in better light
A November 2017 Ars Technica article covers Bugcrowd's release of data and personas about its vulnerability researcher community. Casey Ellis, Bugcrowd's founder, worked to shift public perception of security researchers as professional contributors rather than stereotypical hackers.
How cyber pros can stay on top of their game
GCN published an article titled "How cyber pros can stay on top of their game" offering guidance to cybersecurity professionals in government roles. Casey Ellis contributed advice on the skills and knowledge areas government security practitioners require to remain effective in their positions.
Bugs you should be willing to pay for
An October 2017 Medium opinion piece examines which types of security vulnerabilities companies should prioritize funding through bug bounty programs. Casey Ellis outlines criteria for determining which bugs merit financial rewards, helping organizations allocate bounty resources toward the vulnerabilities that pose the greatest risk.
Computer Fraud and Abuse Act (CFAA) Panel
A panel discussion on the Computer Fraud and Abuse Act aired on Cyberscoop Cybertalks DC in October 2017. Casey Ellis participated in the discussion examining the legal framework governing unauthorized computer access and its application to cybersecurity research and practice.
DOJ examines controversial new hack back bill
CyberScoop reported on the Department of Justice's examination of a controversial "hack back" bill that would permit companies to conduct offensive cyber operations. Casey Ellis commented on the policy implications and technical challenges of authorizing private sector cyber counterattacks.
Secret Program Offers $250,000 Bounty for VM Escape Vulnerabilities
VMBlog reported on a confidential bug bounty program offering up to $250,000 for discoveries of virtual machine escape vulnerabilities. Casey Ellis is involved in the program's coordination and outreach to the security research community.
MongoDB Attack Shows Off Cyber Extortionists' New Tricks
Dark Reading published an article about a wave of attacks targeting unsecured MongoDB databases in which attackers deleted data and demanded ransom for its return. Casey Ellis commented on the evolving extortion tactics used by cybercriminals and the security vulnerabilities exposed by the incident.