Casey Ellis, on the record.
1,355 items across 6 categories: press, broadcast, stage, and paperwork. Captured, displayed, and archived for posterity.
Internet-exposed HMIs are a risk to water facilities, CISA warns
This Security Magazine article, published December 19, 2024, reports on a CISA advisory urging water and wastewater facilities to secure internet-exposed human-machine interfaces. Casey Ellis, founder and advisor at Bugcrowd, argues that safety-critical control systems like these should never be exposed to the internet, since any failed safeguard becomes a risk once connected.
Nearly 400,000 WordPress credentials stolen
Security Magazine's December 2024 press article reports that threat actor MUT-1244 stole more than 390,000 WordPress credentials in a year-long campaign. Casey Ellis, founder and advisor at Bugcrowd, is quoted saying that targeting red-teamers and researchers with fake proof-of-concept code is an old troll tactic that can also work as an effective watering-hole approach.
SAINTCON 2024 - Adam Marre - So, you want to be a CISO
SAINTCON 2024 released a video featuring Adam Marre discussing the path to becoming a CISO on YouTube. The talk covers career development, responsibilities, and practical insights for security professionals aspiring to chief information security officer roles.
US Copyright Office states common AI research does not violate DMCA
This Security Magazine article reports that the U.S. Copyright Office clarified that common AI trustworthiness research and red teaming do not violate the DMCA. Casey Ellis, Founder and Advisor at Bugcrowd, says the ruling lets good-faith security researchers use these techniques without fear of DMCA reprisal.
Library of Congress Offers AI Legal Guidance
This December 2024 Dark Reading article, titled Library of Congress Offers AI Legal Guidance, explains how researchers testing generative AI can use prompt injection without running afoul of copyright law. Casey Ellis, founder and adviser to BugCrowd, says clearer copyright guidelines favor security researchers and that unclear rules create a chilling effect.
SmokeLoader attack targets organizations in Taiwan
The Security Magazine article from December 3, 2024, covers Fortinet FortiGuard Labs research into a SmokeLoader malware attack targeting organizations in Taiwan. Casey Ellis, Bugcrowd's founder and advisor, says Taiwan has long considered advanced persistent threats and that this SmokeLoader use fits a wider pattern of pre-positioning.
Security Breach: Casey Ellis
Security Breach, a podcast from Manufacturing Business Technology, featured Casey Ellis as a guest in December 2024. Ellis discussed vulnerability management and coordinated disclosure practices with host on the program.
CISA Director Easterly to Leave When Trump Assumes Presidency
This Security Boulevard press item from November 19, 2024, reports on CISA Director Jen Easterly's departure, tied to Donald Trump's incoming presidency. Bugcrowd founder Casey Ellis is quoted praising Easterly's work during a turbulent period for U.S. cybersecurity, and he says it is too early to judge the agency's direction under the incoming administration.
What a second Trump term means for the future of ransomware | TechCrunch
TechCrunch published this November 2024 article examining how a second Trump administration could shape U.S. efforts against ransomware, including possible shifts toward offensive cyber operations. Casey Ellis, founder of Bugcrowd, expects U.S. offensive cyber capabilities to ramp up, including more hack-back activity like recent FBI and DOJ disruption efforts.
Zero-Day Exploits Surge in 2023, Cisco, Fortinet Vulnerabilities Targeted
This Security Boulevard article from November 2024 covers a Five Eyes report, released by CISA, finding most top exploited vulnerabilities in 2023 were initially zero-days. Casey Ellis, founder and advisor at Bugcrowd, says the zero-day label wrongly implies defenders cannot act, and urges treating these flaws as patch management problems.
500,000 people impacted by ransomware attack on Columbus, Ohio
Security Magazine reported that the City of Columbus, Ohio, notified 500,000 people that a July 2024 ransomware attack stole their personal data. Casey Ellis of Bugcrowd praises the city's decision to drop its lawsuit against researcher David Leroy Ross and warns the suit could chill others who report such thefts.
Strengthening AI Accountability Through Better Third Party Evaluations
Stanford HAI published a piece on strengthening AI accountability through improved third-party evaluations on November 6, 2024. Casey Ellis participated as a panelist in the discussion on evaluation frameworks and accountability mechanisms for AI systems.
City of Columbus acknowledges data theft after lawsuit against security researcher - SiliconANGLE
This SiliconANGLE article reports that the City of Columbus dropped its lawsuit against a security researcher after he accepted a permanent injunction limiting data sharing. Casey Ellis, founder and adviser at Bugcrowd, told SiliconANGLE it is good to see the case dropped, partly due to security community outcry.
Privacy Anxiety Pushes Microsoft Recall AI Release Again
This Dark Reading article from November 1, 2024, examines Microsoft's decision to delay its Recall AI feature, which records images of on-device activity, amid privacy and security concerns. Casey Ellis, founder of Bugcrowd, says Microsoft appears to be moving cautiously, possibly learning from market reaction to Anthropic's similar computer use feature.
CISA Strategic Plan Targets Global Cooperation on Cybersecurity
Security Boulevard's November 1, 2024 article reports on the Cybersecurity and Infrastructure Security Agency's inaugural international strategic plan for global cyber partnerships. Casey Ellis, founder and advisor at Bugcrowd, calls building international alliances "absolutely critical" and says cyber defense is a team sport, noting Asia-Pacific focus is timely given China's growing boldness.
SAINTCON 2024 - Casey Ellis - Release The Hounds, Part 3 - History Repeating
SAINTCON 2024 presented a keynote address by Casey Ellis titled "Release The Hounds, Part 3 - History Repeating" on October 24, 2024. Ellis examines patterns in security history and their relevance to current threats and industry practices.
Release The Hounds, Part 3 – History Repeating
Saintcon published "Release The Hounds, Part 3 – History Repeating," a recorded stage presentation from October 2024. Casey Ellis discusses patterns in cybersecurity vulnerabilities and attack methods, examining how historical threats resurface and evolve within modern threat landscapes.
Release The Hounds, Part 3 - History Repeating
Saintcon 2024 published the third installment of Casey Ellis's "Release The Hounds" presentation series on YouTube. Ellis discusses historical patterns in security threats and how past vulnerabilities continue to resurface in modern systems, emphasizing cyclical challenges in threat landscape management.
Research observes threat activity targeting 2024 Presidential Election
This Security Magazine article, published October 17, 2024, reports on new research into cyber threats tied to the 2024 U.S. Presidential Election, such as phishing, ransomware, and malicious domains. Casey Ellis, Bugcrowd's Founder and Chief Strategy Officer, says the run-up to the election creates an unstable information environment that gives threat actors many opportunities.
Darknet Activity Increases Ahead of 2024 Presidential Vote
An Infosecurity Magazine article, Darknet Activity Increases Ahead of 2024 Presidential Vote, published October 15, 2024, reports on rising phishing, ransomware, and darknet threats before the US election. Bugcrowd founder Casey Ellis warns that highlighting the possibility of darknet use could cheaply instill distrust in the democratic process and potentially manipulate voter turnout.
Russian hacking group intercepted by Microsoft and DOJ
This Security Magazine article reports that Microsoft and the U.S. Department of Justice disrupted the technical infrastructure of the Russian hacking group COLDRIVER, seizing 66 domains. Casey Ellis, founder and Chief Strategy Officer of Bugcrowd, says the takedown disrupts the group's operations, infrastructure and operatives, and signals that its activities are being detected.
19 platforms used by government agencies have vulnerabilities
This Security Magazine article from October 2024 covers research finding security flaws in 19 commercial platforms that United States government agencies and courts rely on. Casey Ellis, founder and chief strategy officer at Bugcrowd, partly agrees that penetration testing helps and argues these systems need more eyes on the target.
Global Governments Release New Ransomware Response Guidance
This BankInfoSecurity article, published October 2, 2024, covers new voluntary ransomware response guidance from the International Counter Ransomware Initiative meeting. Bugcrowd's Casey Ellis says the advice feels complete and aligned but would move the step to record decision-making to the top, since ransomware incidents can quickly create a fog-of-war effect.
Hacker Showdown 2024: Carnival of ChAIos
Bugcrowd's Hacker Showdown 2024 broadcast documents a competitive hacking event where teams competed for a $30,000 grand prize and additional rewards. Casey Ellis appears in the broadcast alongside Bugcrowd leadership to provide commentary on the event and its outcomes.
Cyber Founder Recipe for Success: Clear Vision and Trusted Experts
This SecurityWeek article, published September 25, 2024, examines how startup founders can succeed by pairing a clear vision with reliable experts. Casey Ellis, founder and chief strategy officer of Bugcrowd, says trusting experts is essential, but only alongside a clear vision and strong accountability, and that leading well matters more as trust grows.
Replay: Human vs. Super Suit: Exploring The AI-Human Relationship
A Forcepoint podcast episode from August 2024 examines the relationship between artificial intelligence and human decision-making in security contexts. Casey Ellis discusses AI's risks and benefits in cybersecurity, its workplace applications, ethical considerations, and the disclose.io vulnerability disclosure initiative.
Inevitability Curve - Casey Ellis, Bugcrowd, RSA 2024
The Inevitability Curve is a video presentation from the RSA 2024 conference featuring Casey Ellis of Bugcrowd. Ellis discusses the trajectory and certainty of emerging cybersecurity trends and their organizational impact.
Series Insight - Bugcrowd’s future plans for growth and expansion throughout the Asia Pacific
MySecurity Marketplace broadcast from August 2024 features Bugcrowd CEO Dave Gerry discussing the company's growth strategies and expansion across the Asia Pacific region following its recent unicorn valuation and $102 million funding round. Casey Ellis, Bugcrowd founder, participates in outlining the organization's future plans for market development in the region.
Deciphering Heat
Decipher, a Duo and Cisco video series, released an episode analyzing Michael Mann's 1995 crime thriller Heat. Casey Ellis appears in the broadcast to discuss security themes embedded within the film's narrative and characters.
Chinese Threats Aim for Government Sector
This June 14, 2024 article from Security Boulevard, a cybersecurity news publication, reports on China-linked threats aimed at government targets and a rise in U.S. election-themed scams. Casey Ellis, founder and chief strategy officer at Bugcrowd, says China has built broad persistence since 2020 and that election-year scams show adversaries targeting the democratic process.