Media Packet · Press
845 items
845 items
Press
Solutions Review published coverage of a misconfiguration in Microsoft's Power Apps platform that exposed data across millions of user accounts. Casey Ellis identified and documented the vulnerability, contributing research that highlighted the scale and implications of the exposure across multiple applications.
Press
Forbes Technology Council published a panel article examining 15 security risks commonly overlooked during the transition to remote work. Casey Ellis contributed to the discussion of digital asset vulnerabilities in distributed work environments.
Press
Global Security Magazine published a piece featuring commentary from Casey Ellis on the Kaseya supply chain ransomware attack. Ellis analyzed the incident and its implications for software supply chain security.
Press
A CSO Magazine article from August 2021 examines the fallout from the Kaseya ransomware attack on Australian businesses and the security obligations of software vendors. Casey Ellis addresses industry responsibility and the need for greater collaboration to prevent similar supply-chain attacks.
Press
The Cyberwire published an update on recovery and response efforts following the Kaseya VSA ransomware supply chain attack. Casey Ellis contributed analysis on the incident's scope and implications for affected organizations and the broader software supply chain ecosystem.
Press
SearchSecurity reported on CISA's selection of Bugcrowd to provide the platform for a new federal vulnerability disclosure program serving U.S. government agencies. Casey Ellis, Bugcrowd's co-founder and chief technology officer, supported the initiative as part of the company's effort to expand coordinated vulnerability management across the public sector.
Press
The Hacker News published a feature article in 2021 identifying five top bug bounty programs for security researchers to monitor and engage with throughout the year. Bugcrowd, which Ellis co-founded, was included among the platforms highlighted for its role in connecting researchers with organizations seeking vulnerability disclosure.
Press
A SearchSecurity feature examines how legal threats under laws like the CFAA can discourage security researchers from disclosing vulnerabilities and conducting important research. Casey Ellis discusses the tension between legal risk and the need for responsible vulnerability disclosure in security research.
Press
Bank Info Security published an analysis examining whether offensive cyber operations against ransomware gangs could effectively disrupt their activities. Casey Ellis discusses the potential risks and legal implications of such aggressive defensive tactics in response to escalating ransomware threats.
Press
CyberWire's Privacy Briefing newsletter from June 2021 examines healthcare data breaches and whether compliance with privacy regulations is driven primarily by fear of financial penalties. Casey Ellis provides analysis on the motivations behind organizational privacy practices and regulatory compliance in the healthcare sector.
Press
Solutions Review published expert commentary on a ransomware attack affecting a Georgia fertility clinic. Ellis discussed the incident's implications for healthcare cybersecurity and the vulnerabilities that made the clinic a target for attackers.
Press
An opinion piece in the Australian Financial Review argues that Australian businesses must prioritize cybersecurity in an increasingly hostile digital environment. Casey Ellis calls for organizations to embed security into their operational strategy rather than treating it as an afterthought to achieve long-term resilience.
Press
CPO Magazine published an analysis of the U.S. Supreme Court's Van Buren v. United States decision, which narrowed the Computer Fraud and Abuse Act's scope. Casey Ellis is cited for his perspective on how the ruling benefits security researchers by providing clearer legal boundaries for vulnerability research and disclosure.
Press
Digital Journal published an analysis of the U.S. Supreme Court's decision narrowing the scope of the Computer Fraud and Abuse Act. Casey Ellis discusses the implications of the ruling for security researchers and the broader cybersecurity landscape.
Press
Crowd Sourcing Week published a Q&A interview with Casey Ellis, founder and chairman of Bugcrowd, in May 2021. Ellis discusses the crowdsourced security model and explains how the bug bounty industry addresses vulnerability discovery and remediation at scale.
Press
A Bank Info Security article from May 2021 examines the challenges and opportunities of implementing Security Orchestration, Automation and Response technologies in organizations. Casey Ellis discusses how SOAR deployment requires careful planning and addresses both the technical and operational barriers that security teams encounter during implementation.
Press
An interview published in Bank Info Security examines the evolving landscape of software vulnerabilities and how organizations adapt their security strategies. Ellis discusses the changing dynamics around software flaw discoveries and exploits, addressing shifts in how enterprises approach vulnerability management.
Press
iT Wire published "How might we build a new internet?" in April 2021, exploring theoretical and practical challenges of designing a more secure and resilient internet infrastructure. Casey Ellis contributes perspectives on the foundational security and resilience requirements necessary for internet redesign efforts.
Press
The Daily Swig published an article examining a GitHub repository that documents legal threats faced by ethical hackers during vulnerability disclosure processes. Casey Ellis is cited as a contributor to the repository, which catalogs cases where security researchers encountered legal action despite following responsible disclosure practices.
Press
Duo Security's Plaintext podcast episode five features an interview with Bugcrowd founder Casey Ellis. Ellis discusses the history and evolution of bug bounty programs, the maturation of the industry, and his vision for the future of crowdsourced security.
Press
ITSPmagazine published a feature examining findings from Bugcrowd's 2020 Inside the Mind of a Hacker report. Ellis provided context on demographic data, motivations, and specializations across the global ethical hacker community revealed in the research.
Press
The Supreme Court's decision to narrow the Computer Fraud and Abuse Act was covered by SC Magazine in March 2021. Casey Ellis was cited as welcoming the ruling for its potential to protect security researchers and ethical hackers from overly broad legal interpretations.
Press
Bank Info Security reported on the U.S. Supreme Court's decision in Van Buren v. United States, which narrowed the scope of the Computer Fraud and Abuse Act. Casey Ellis commented on the ruling's implications for security researchers and the vulnerability disclosure landscape.
Press
Digital Journal published an article warning about phishing campaigns using fake COVID-19 vaccine emails to steal personal data. Casey Ellis commented on the tactics hackers employ in these scams and advised on protection measures against vaccine-related fraud.
Press
Digital Journal reported on a data breach affecting a Florida-based child welfare organization that exposed sensitive personal information. Casey Ellis provided analysis and guidance on the breach's implications and recommended security measures for similar organizations.
Press
Bugcrowd published a webinar on January 27, 2021, examining the security failures at Parler during a major breach. Casey Ellis delivers a technical breakdown of the exploited vulnerabilities and discusses lessons in API security practices.
Press
Representative Ted Lieu introduced legislation to strengthen cybersecurity standards in U.S. government vendor contracts. Casey Ellis was cited as a cybersecurity expert supporting the measure's focus on supply chain security and vulnerability disclosure practices.
Press
The Daily Swig published a comprehensive security review recapping major cybersecurity events and trends of 2020. Casey Ellis is featured in the review for his insights and contributions to discussions on security developments throughout the year.
Press
Beta News published a roundup of cybersecurity predictions for 2021 covering encryption, zero trust architecture, and quantum computing threats. Casey Ellis contributed insights on the expanding role of bug bounties in organizational security strategies.
Press
SDX Central published "5 Ransomware Predictions to Ring In 2021" in December 2020, presenting expert forecasts on how ransomware attacks and tactics would evolve. Casey Ellis contributed predictions about ransomware trends expected to emerge in 2021.