Casey Ellis, on the record.
1,355 items across 6 categories: press, broadcast, stage, and paperwork. Captured, displayed, and archived for posterity.
2026 security predictions
Casey Ellis published a 2026 cybersecurity predictions article on his site examining anticipated threats including China's military milestones, AI-enabled malware development, and economic drivers of cybercrime. The piece forecasts that shift-left security approaches will gain traction for modern code while legacy systems face mounting vulnerability challenges.
Why you should not believe everything social media is saying about Bondi Beach attack
An article from Firstpost examines misinformation circulating on social media about the Bondi Beach attack and the importance of critical evaluation of online claims. Casey Ellis is quoted discussing how to assess information reliability and avoid spreading unverified narratives during crisis events.
2026 cybersecurity predictions
A Bugcrowd Blog post published December 17, 2025, features predictions from Bugcrowd executives and security researchers about cybersecurity trends in 2026. Casey Ellis contributes his outlook on evolving attack methods, AI innovation, and emerging security challenges for the year ahead.
Fake hero, wrong suspect: Misinformation floods social media after Bondi shooting
The Sydney Morning Herald published an article examining misinformation spread on social media following the Bondi shooting incident. Casey Ellis is quoted discussing how AI systems and social platforms can amplify false narratives, including fabricated hero accounts, during crisis events.
Sponsored: ConsentFix and Push Security's browser attack taxonomy
This sponsored interview segment on Risky Business features Casey Ellis and Push Security's Field CTO Mark Orlando discussing browser-based attack methods and ConsentFix's taxonomy for categorizing them. Ellis participates in the conversation to explore how organizations can better understand and defend against browser attack vectors.
Attackers Worldwide are Zeroing In on React2Shell Vulnerability
Security Boulevard reported on December 11, 2025, that attackers worldwide including nation-state groups and cybercriminals are exploiting the React2Shell vulnerability across multiple attack vectors. Casey Ellis contributed analysis on the severity and exploitation patterns of the flaw and the range of threat actors leveraging it.
Dark Web, Underground Hiring Blurs Lines Between Legit and Illicit Work
Dice Insights published an article examining how skilled technology and cybersecurity professionals are increasingly turning to dark web forums for work opportunities that blur legitimate and illicit boundaries. Casey Ellis cautions that participation in such underground hiring carries significant risks for both employers and individual practitioners engaging in these activities.
North Korean Hackers Deploy EtherRAT Malware in React2Shell Exploits
Hackread published a December 2025 report on North Korean hackers deploying EtherRAT malware through React2Shell exploits. The article documents the technical details and threat actors behind the campaign without attribution to Casey Ellis.
5 ways AI will transform Security Operations Centers
ReversingLabs published a blog post examining five ways artificial intelligence will transform security operations centers. Casey Ellis contributes perspectives on how AI can reduce alert fatigue and automate repetitive manual workflows in SOC environments.
Bugcrowd Security Flash: CVE-2025-55182 (React2Shell) UPDATE
Bugcrowd published a security briefing video on YouTube examining CVE-2025-55182, a critical remote code execution vulnerability in React Server Components affecting Next.js deployments disclosed on December 3, 2025. Casey Ellis provides analysis and context on the vulnerability's implications for modern application security.
Oracle EBS exploitation similar to Clop's MOVEit, GoAnywhere attacks
An SC Media article examines Oracle EBS exploitation tactics that parallel those used in the Clop ransomware group's MOVEit and GoAnywhere attacks. Casey Ellis discusses how these supply chain vulnerabilities represent a persistent threat pattern and the importance of rapid patching and vulnerability disclosure practices.
With Friends Like These: China Spies on Russian IT Orgs
Dark Reading published "With Friends Like These: China Spies on Russian IT Orgs," covering espionage activity targeting Russian IT organizations. Casey Ellis is quoted in the article providing analysis on the geopolitical implications and technical indicators of the surveillance campaign.
Beg Bounty: The New Wave of Unrequested Bug Claims
Redefining CyberSecurity podcast, published by ITSPmagazine, features a conversation between host Sean Martin and Casey Ellis about unrequested bug bounty claims and their implications for the security industry. Ellis discusses emerging trends in how researchers submit vulnerabilities and the evolving landscape of responsible disclosure practices.
Opinion: Teens are Hacking School Systems. Let's Teach Them to Protect Communities Instead
An opinion piece published on Yahoo News examines teenage hackers who compromised an educational technology company serving thousands of U.S. school districts. Casey Ellis argues that channeling young hackers' skills toward legitimate security work and community protection is more productive than punishment alone.
Teens are Hacking School Systems. Let's Teach Them to Protect Communities Instead
The 74 Million published an opinion piece arguing that teenagers with hacking skills should receive training and compensation to defend systems against cyber attacks. Casey Ellis contends that structured programs can redirect adolescent technical talent toward protecting communities rather than targeting them.
Sponsored: Prowler uses AI how AI works best
Risky Business published a sponsored interview in which Casey Ellis discusses cloud security and open source tooling with Toni de la Fuente, founder and CEO of Prowler. Ellis and de la Fuente explore how AI can be applied effectively within cloud security platforms and practices.
Truffle Security secures $25M to protect codebases from leaked secrets and nonhuman identities
Truffle Security announced a $25 million funding round, according to SiliconANGLE. Casey Ellis serves as an advisor to the company, which focuses on protecting codebases from leaked secrets and nonhuman identity threats.
The Evolution of Crowdsourced Security | Karen Greer & Casey Ellis
This 2025 YouTube broadcast, The Evolution of Crowdsourced Security, comes from Secure Content Technologies as the third episode in its conversation series with Bugcrowd. Casey Ellis, founder and advisor at Bugcrowd, joins SCT CEO Karen Greer to discuss the evolution of crowdsourced security, lessons from hacker-powered engagement, and its role in AI-era defense.
Sponsored: Sublime can save a s**t tonne of time
A sponsored segment from Risky Business features Casey Ellis discussing Sublime Security's approach to security automation with CEO and founder Josh Kamdjou. Ellis and Kamdjou explore how Sublime addresses time-intensive security workflows through its platform capabilities.
BOLD TALKS: Casey John Ellis on Hacking Trust, AI, and the Future of Cybersecurity
BOLD Awards published a broadcast episode titled "BOLD TALKS: Casey John Ellis on Hacking Trust, AI, and the Future of Cybersecurity" on its YouTube channel. Ellis discusses trust, artificial intelligence, and emerging cybersecurity challenges in his role as founder and chief strategy officer.
IBM Breakthroughs: Quantum Error Correction and Digital Twin
IBM announced breakthroughs in quantum error correction and digital twin security for regulated industries, according to a SecureWorld report. Casey Ellis commented on the implications of these developments for enterprise security infrastructure and risk management practices.
Cyberattack on Jaguar Land Rover Paralyzed Supply Chains Across Britain
A report published by The420.in details the September ransomware attack on Jaguar Land Rover that disrupted supply chains across Britain. Casey Ellis contributed analysis on the incident's impact and the broader implications for automotive sector cybersecurity resilience.
IBM says it can run its quantum algorithm on AMD chips
IBM announced it can execute its quantum algorithm on AMD processors, according to a statement published by SC Media. Casey Ellis is quoted commenting on the implications of quantum computing accessibility across different hardware platforms.
AI Literacy and Cybersecurity
Dice Insights published an article on AI literacy and cybersecurity that examines how organizations deploying AI encounter new data security risks and knowledge gaps. The piece discusses how developing AI literacy across teams safeguards information and positions cybersecurity professionals to shape the future of cyber defense.
Jaguar Land Rover ransomware attack had $2.8B economic impact in UK
A SC Media report from October 2025 analyzed the economic fallout from a ransomware attack on Jaguar Land Rover, which disrupted UK automotive manufacturing and supply chains. Casey Ellis provided analysis on the incident's broader implications for critical infrastructure vulnerability and the cascading effects of targeted ransomware campaigns against major industrial operations.
The State of Vulnerability Management
ConversingLabs and ReversingLabs published a broadcast featuring Bugcrowd founder Casey Ellis discussing vulnerability management trends in 2025 with Paul Roberts. Ellis examines current approaches to vulnerability discovery, management practices, and evolving challenges facing security teams.
ConversingLabs: Casey Ellis Talks AI & Vulnerability Management
ConversingLabs, a ReversingLabs broadcast series, features host Paul Roberts interviewing Bugcrowd founder Casey Ellis on vulnerability management and AI's role in the field during 2025. Ellis discusses how artificial intelligence is reshaping vulnerability discovery, prioritization, and remediation practices across modern security operations.
He tested his pitch on Uber drivers - then built a cybersecurity platform to $180M raised.
This October 13, 2025 podcast episode from A Product Market Fit Show, a startup podcast for founders, is a 49-minute interview with Bugcrowd founder Casey Ellis. He describes building Bugcrowd's hacker marketplace, refining his pitch on Uber drivers until it clicked, and using 500 t-shirts to drive growth more than paid marketing.
Arrests Underscore Fears of Teen Cyberespionage Recruitment
BankInfoSecurity published an article on arrests in the Netherlands of two teenagers suspected of capturing Wi-Fi signals for pro-Russian hackers. Casey Ellis commented on the incident as part of broader industry warnings about the recruitment and radicalization risks facing young people in cybersecurity spaces.
Three Reports Define 2025's AI Cybersecurity Reality
SecureWorld published an article examining three AI-related reports from AvePoint, Fortinet, and Black Duck that outline enterprise cybersecurity challenges in 2025. Casey Ellis is cited for insights on how organizations can navigate the intersection of artificial intelligence and security risks.