Media Packet
1,053 items across 6 categories — press, broadcast, stage, and paperwork. Captured, displayed, and archived for posterity.
1,053 items
Press
Google Project Zero shifted its vulnerability disclosure policy away from patch-time requirements to a standardized 90-day deadline, according to Threatpost. Casey Ellis analyzed the implications of the policy change and its effects on the vulnerability disclosure landscape.
Broadcast
Hakluke published a video interview with Casey Ellis on July 31, 2020. Ellis discusses his career path as a developer, the influence of a book on his decision to work remotely, and how that shift enabled him to pursue additional interests.
Press
Apple launched a Security Research Device Program providing specially configured iPhones to vetted security researchers, as reported by SC Magazine. Casey Ellis was among the trusted hackers selected to receive a research phone to identify iOS vulnerabilities.
Press
Digital Journal published an article on a critical vulnerability in SAP's RECON software that could allow unauthenticated attackers unrestricted access to enterprise resource planning systems. Casey Ellis warned about the severity of the flaw and its potential impact on organizations relying on SAP infrastructure.
Press
SC Magazine published an article on a critical 10/10 severity vulnerability in an SAP application affecting approximately 40,000 customers. Casey Ellis commented on the risk and implications of the flaw for organizations using the affected SAP systems.
Papers
A Harvard Belfer Centre paper examines vulnerability rediscovery rates and collision dynamics in government disclosure processes. Casey Ellis contributes analysis on how security researchers and vendors encounter duplicate vulnerability reports, informing policy discussions around coordinated disclosure timelines and resource allocation.
Press
Innovation Bay hosted an online panel discussion on cybersecurity challenges and the current state of digital security for individuals and organizations. Casey Ellis participated in the discussion, sharing perspective on security challenges facing the broader industry.
Press
SC Magazine published an article in which Casey Ellis argues that human hackers will outperform artificial intelligence in offensive security tactics for approximately a decade. Ellis contends that human creativity and intuition provide advantages over AI systems in identifying and exploiting security vulnerabilities.
Press
A Bugcrowd study published on OpenPR.de examines how protecting critical infrastructure requires combining human and artificial intelligence. Casey Ellis provides perspective on the importance of leveraging both human ingenuity and AI systems to strengthen security defenses against evolving threats.
Press
A Betanews article examines the limits of artificial intelligence in cybersecurity defense. Casey Ellis argues that AI tools alone cannot match the creativity and adaptability of human attackers, and that effective defense requires combining automated systems with human expertise and ingenuity.
Press
Computer Weekly published an article examining the growing recognition of neurodiversity among ethical hackers and security professionals. Casey Ellis comments on how neurodivergent individuals bring distinct advantages to creative problem-solving and security research within the hacking community.
Press
A Bugcrowd report published by Business Wire examines the role of human expertise and artificial intelligence in protecting critical infrastructure. Casey Ellis emphasizes that effective security requires combining human ingenuity with AI-powered solutions rather than relying on either approach alone.
Press
The Daily Swig reports on a Bugcrowd study showing India as the leading country for security researchers on the platform. Casey Ellis discusses the findings and India's emergence as a major hub for bug bounty hunters participating in coordinated vulnerability disclosure.
Press
Cointelegraph reported on an Israeli software firm's decision to pay a 250,000 dollar Bitcoin ransom following a ransomware attack. Casey Ellis commented on the difficult trade-offs companies face when deciding whether to pay ransom demands versus other response options.
Press
Forbes published a roundup of 16 software development trends expected to shape the tech industry, featuring input from members of its Technology Council. Casey Ellis contributed a prediction on a key trend poised to influence software development practices.
Press
The Daily Swig published an article examining how US computer crime laws lag behind evolving practices in penetration testing and ethical hacking. Casey Ellis discusses how the Computer Fraud and Abuse Act creates legal uncertainty for security researchers conducting authorized testing in good faith.
Press
A Bugcrowd webinar from June 2020 examines supply chain attacks and their impact on critical infrastructure sectors. Casey Ellis discusses how vulnerabilities in third-party components create security risks across transportation and related industries.
Press
The Next Web's Pardon the Intrusion newsletter covered the story of Marcus Hutchins, the security researcher who stopped the WannaCry ransomware attack. Casey Ellis was featured in the edition discussing the incident and its significance to the security community.
Press
BuiltIn published an explainer article on bug bounty hunting, its mechanics, and the growing corporate reliance on bounty programs to identify security vulnerabilities. Casey Ellis is cited as a key figure in the bug bounty space who helped establish the industry's credibility and practices.
Press
Forbes published a roundup of 15 technology tools designed to support remote worker productivity, featuring guidance from its Technology Council expert panel. Casey Ellis contributed a recommendation for a tool that helps remote teams maintain efficiency while working from distributed locations.
Press
An article in Silicon Angle features security professionals discussing key takeaways from Verizon's 2020 Data Breach Investigations Report. Ellis contributes analysis of the report's findings alongside other security experts examining trends and implications in the data.
Press
A New York Times article from May 2020 reports on U.S. government warnings that Chinese-linked hackers were targeting coronavirus vaccine and treatment research. The piece includes analysis of the geopolitical implications of cyber espionage during the pandemic and efforts by security researchers to counter such threats.
Press
The Weekly Notable Startup Funding Report from Alley Watch covers startup capital activity for the week of April 13, 2020. Bugcrowd, where Casey Ellis serves as co-founder and chief executive, closed a $30 million Series D funding round to expand its crowdsourced security platform.
Broadcast
Hacking Into Security podcast episode #6, published by Hacking into Security, features a discussion on entrepreneurship in cybersecurity. Casey Ellis discusses his career trajectory as an entrepreneur, including his path to founding and leading Bugcrowd in the security industry.
Stage
A video presentation from AirGap 2020 titled "Disclose.io - Connecting the Ghosts of Disclosure Past, Present, and Future" explores vulnerability disclosure practices and frameworks. Casey Ellis discusses the evolution of disclosure processes and the role of disclose.io in standardizing and improving coordination between researchers, vendors, and platforms.
Press
Search Security reports on Bugcrowd's launch of a classic penetration testing service designed to complement its crowdsourced security platform. Casey Ellis explains how the offering combines traditional penetration testing methodologies with Bugcrowd's existing crowd-based approach to vulnerability research.
Broadcast
A Security Nation podcast episode from Rapid7 features Casey Ellis discussing the intersection of technology and legal frameworks in crowdsourced security testing. Ellis addresses safe harbor protections and disclosure policies as key considerations for organizations implementing bug bounty and vulnerability disclosure programs.
Stage
A presentation delivered at GrimmCon in April 2020 examines vulnerability disclosure practices and hacker safe harbor protections during that year. Ellis outlines the state of disclosure coordination, legal safeguards for security researchers, and the role of standardized frameworks in connecting hackers with organizations seeking their help.
Stage
vOPCDE #3 published a panel discussion on vulnerability disclosure featuring Casey Ellis, Costin Raiu, and The Grugq. Ellis participated in the conversation examining disclosure practices, responsible reporting frameworks, and industry coordination challenges in handling security vulnerabilities.
Stage
ComfyCon hosted a keynote address on vulnerability disclosure and hacker safeharbor practices in 2020. Ellis discussed the role of Disclose.io in standardizing disclosure policies and protecting security researchers from legal risk.