Casey Ellis, on the record.
1,355 items across 6 categories: press, broadcast, stage, and paperwork. Captured, displayed, and archived for posterity.
CYBER SECURITY: Cyber security expert Casey Ellis on protecting your identity during the holiday sho
KPIX CBS News Bay Area broadcast from December 2019 featured Casey Ellis discussing cybersecurity practices for holiday shoppers. Ellis offered practical guidance on protecting personal information and shopping safely online during the peak retail season.
The Top 20 Security Predictions for 2020
A GovTech blog post from December 2019 compiled twenty security predictions for the coming year from industry practitioners. Casey Ellis contributed a forecast on how security testing would evolve in 2020, examining anticipated shifts in vulnerability identification and remediation practices.
NEWS INSIGHTS: VISA WARNS THAT HACKERS ARE SCRAPING CARD DETAILS FROM GAS PUMPS
A Journal of Cyber Policy article reports on Visa's warning about cybercriminals scraping payment card details from gas pump terminals. Casey Ellis provides expert commentary on the threat and its implications for payment security infrastructure.
13 Digital Basics Most Americans Actually Don’t Know
Readers Digest published an article on digital security fundamentals that most Americans lack in December 2019. Casey Ellis explains how to verify website security through simple steps like checking for HTTPS protocols.
2020 Election Security
A December 2019 broadcast segment on KTVU's "The Four" features Casey Ellis discussing cybersecurity threats to the 2020 U.S. presidential election. Ellis addresses vulnerabilities in the election process and describes research efforts aimed at securing voting systems against digital attacks.
Federal 'hack back' bill back on table, but critics wary of blind spots
CIO Dive reported on the reintroduction of a federal "hack back" bill that would allow companies to conduct offensive cyber operations against attackers. Casey Ellis raised concerns about the proposal's potential for unintended consequences and blind spots in its implementation.
141 Cybersecurity Predictions For 2020
Forbes published a compilation of 141 cybersecurity predictions for 2020 from multiple industry experts on December 3, 2019. Casey Ellis contributed his perspective on emerging cybersecurity trends expected to shape the year ahead.
ThugCrowd 017_5 Bug Bounties Part 02 with Casey Ellis of BugCrowd
ThugCrowd podcast episode 017_5, published by compyx#6 Videos in December 2019, continues a conversation on bug bounties. Casey Ellis discusses technical and strategic aspects of operating effective bug bounty programs.
Google Will Pay You $1.5 Million Bounty For Remotely Hacking Titan M Chip
Google announced a $1.5 million maximum bounty for remote exploitation of the Titan M2 chip through its Android Security Rewards program, as reported by Techworm. Casey Ellis commented on the significance of the increased reward tier for securing hardware-level security components.
Google's Android bug bounty program will now pay out $1.5 million - CNET
This CNET article from November 21, 2019 reports Google will now pay out $1.5 million through its Android bug bounty program. Casey Ellis, founder and CTO of Bugcrowd, says the reward has risen because the skills needed to find these Google device vulnerabilities are rare and often tied up in the offensive market.
Google offers bounty of up to $1.5M for its Android Security Rewards program
Silicon Angle reported on Google's expansion of its Android Security Rewards program to offer bounties up to $1.5 million. Casey Ellis analyzed how the increased rewards would influence participation and practices within the security research community.
Expert Comments On Why Jailbroken Devices May Threaten Mobile Financial Services
Information Security Buzz published expert commentary on the security risks jailbroken mobile devices pose to financial services. Casey Ellis contributed analysis on how device jailbreaking compromises security controls and increases vulnerability to financial fraud and malware exploitation.
The Cybersecurity 202: Arrested Iowa hackers spark alarm among security pros
The Washington Post's Cybersecurity 202 column examines the arrest of two Coalfire penetration testers in Iowa and the concerns it raised within the security community. Casey Ellis comments on the legal ambiguity surrounding authorized security testing and its implications for professional security practitioners.
Iowa paid a security firm to break into a courthouse, then arrested employees when they succeeded
A CNBC article covers the 2019 incident in which two Coalfire employees were arrested after completing a court-authorized penetration test at an Iowa courthouse. Casey Ellis is cited regarding the broader security testing practices and the importance of clear authorization protocols in vulnerability assessment work.
Bug Bounty Hunter Casey Ellis
The Hacker Next Door podcast from cast.rocks featured Casey Ellis discussing his background and work as a bug bounty hunter and security entrepreneur. Ellis shared his personal motivations and perspective on the evolution of vulnerability disclosure and the bug bounty industry.
Securiosity: What a week for insider threats
CyberScoop's Securiosity podcast episode explores insider threats through recent events and mitigation approaches. Casey Ellis discusses the insider threat landscape and strategies organizations can deploy to address this security challenge.
What a week for insider threats
Securiosity's podcast episode from November 2019 examines that week's cybersecurity news with particular attention to insider threat challenges. Casey Ellis provides commentary on the week's developments and the security implications of insider threats in organizations.
Bugcrowd Introduces Its ASM to Deliver Crowd-Driven Approach to Risk Reduction
Bugcrowd announced its Attack Surface Management platform in an article published by Tech Times on October 31, 2019. Casey Ellis commented on the platform's growth and Bugcrowd's record bug bounty payouts during a single week.
Cybersecurity Roundup: Splunk, SonicWall, Bugcrowd, Exabeam
Channel Futures published a cybersecurity roundup covering product announcements and developments from Splunk, SonicWall, Bugcrowd, and Exabeam. The piece included coverage of Bugcrowd's launch of a new asset inventory and management solution designed to help organizations track and manage their digital assets.
Voting equipment vendors seek info on vulnerability disclosure program
An SC Magazine article reports on voting equipment vendors requesting details from DEF CON's Voting Machine Hacking Village about establishing vulnerability disclosure programs. Casey Ellis contributed perspective on structuring effective disclosure processes for the election infrastructure sector.
Bugcrowd launches Attack Surface Management platform | TechTarget
An October 2019 news article from TechTarget reports on Bugcrowd's launch of Attack Surface Management, an asset discovery and prioritization platform for legacy and shadow IT resources. Bugcrowd CTO Casey Ellis explains that the product's one-time, set pricing, with researcher rewards included, differs from the separate bounty pool model used by Bugcrowd's other products.
Bugcrowd launches crowd-driven approach to understanding the attack surface - BetaNews
This October 2019 BetaNews article reports that Bugcrowd launched Attack Surface Management, a new crowd-driven tool for mapping an organization's internet-connected assets, including shadow IT and development environments. Casey Ellis, Bugcrowd's founder and CTO, says the product helps connect security and IT teams and restore their Defender's Advantage.
Bugcrowd Enters the IT Asset Discovery Business
Dark Reading published an article on Bugcrowd's expansion into IT asset discovery with a new platform to help companies identify their attack surface. Casey Ellis, Bugcrowd's founder and CTO, discusses the company's strategic move into this market and its implications for vulnerability management.
BIillington Testimonial - Casey Ellis
A Billington CyberSecurity video from October 2019 features Casey Ellis offering a testimonial for the Billington Cybersecurity Summit. Ellis endorses the summit as an effective venue for fostering dialogue and cooperation between government and industry stakeholders on security matters.
CROWDSOURCING CYBERSECURITY
Journal of Cyber Policy published an article on the crowdsourcing model in cybersecurity in October 2019. Casey Ellis contributed insights on how organizations can leverage a global community of hackers to identify and address security vulnerabilities at scale.
Companies urged to bolster infrastructure cyber defences
The Financial Times published a feature on ethical hacking and bug bounties, examining the economics of security research platforms. Casey Ellis discusses how bug bounty programs create incentives for security researchers to identify vulnerabilities in critical infrastructure systems.
KEYNOTE: The Unlikely Romance - Part 2: What Now?
A keynote presentation titled "The Unlikely Romance - Part 2: What Now?" was delivered at Hacker Halted 2019. Ellis examined the evolving relationship between hackers and enterprises, discussing practical approaches to security collaboration and organizational change.
Google: Triada backdoors were pre-installed on Android devices
Google disclosed that Triada backdoors were pre-installed on certain Android devices, according to a report covered by SearchSecurity. Casey Ellis commented on the supply chain security implications of the discovery.
Episode 19: Casey Ellis
KBCAST released Episode 19 of the KBCAST podcast, a broadcast interview featuring Casey Ellis discussing his career trajectory, cybersecurity industry conditions, and Bugcrowd's direction. Ellis covers his professional background and perspectives on emerging security challenges and the company's strategic outlook.
After Bugcrowd pilot, Air Force bug bounty program eyes expansion
SearchSecurity reported on the U.S. Air Force's plans to expand its bug bounty program following a successful pilot with Bugcrowd. Casey Ellis, Bugcrowd's founder and CEO, commented on the pilot results and the Air Force's interest in scaling crowdsourced security efforts across its operations.