To get in touch about speaking at your event, email [email protected]
Media Packet
1,042 items across 6 categories — press, broadcast, stage, and paperwork. Captured, displayed, and archived for posterity.
79 items · 2018
Press
The Daily Swig reports on the launch of the open-source disclose.io project, an initiative to standardize legal safe harbor language for security researchers disclosing vulnerabilities. Casey Ellis co-founded the framework to address the legal gap that researchers face when reporting bugs to organizations without established disclosure policies.
Broadcast
The CyberWire Daily podcast from August 7, 2018 covers TSMC's recovery from WannaCry, OpenEMR bug fixes, UK extradition requests against GRU operators, and the rise of twitterbots. Casey Ellis provides analysis on the week's major security stories, including TSMC's response to the WannaCry outbreak.
Press
HelpNetSecurity reported on Bugcrowd's launch of Disclose.io, a project designed to provide legal protection for security researchers conducting vulnerability disclosure. Casey Ellis co-founded the initiative to establish safe harbor policies that protect white hat hackers from legal liability when they report security vulnerabilities responsibly.
Press
Ars Technica reported on the launch of disclose.io, an open-source project that provides standardized legal language for security vulnerability reporting. Casey Ellis co-founded the initiative to reduce legal risks researchers face when disclosing bugs to organizations.
Press
Factor Daily published an article examining India's growing prominence in the bug bounty sector and its active community of security researchers. Casey Ellis is cited as a key voice on the state of bug bounty programs and their role in improving security practices globally.
Press
ITNews reported on Bugcrowd's expansion plans in Australia, including details of the company's growing operations in the region. Casey Ellis discussed the company's strategy to strengthen its footprint and serve the Australian security market more effectively.
Press
An interview published by TechTarget features Bugcrowd CEO Casey Ellis discussing responsible disclosure policies and good-faith engagement within the security community. Ellis emphasizes the importance of clear disclosure frameworks that balance researcher protections with organizational accountability in vulnerability handling.
Broadcast
ThugCrowd podcast episode 017.5 features a discussion on bug bounties released July 15, 2018. Ellis provides a detailed overview of the bug bounty process from the platform provider perspective, covering how vulnerability coordination programs operate and their implementation strategies.
Press
Smart Company published a feature on nine Australian cybersecurity startups raising funds and achieving growth milestones. Bugcrowd was included among the startups profiled for its expansion and fundraising success in the crowdsourced security testing sector.
Press
TechTarget published an interview with Bugcrowd's CTO discussing crowdsourced security in July 2018. Ellis outlines the advantages and obstacles inherent in Bugcrowd's crowdsourced security model for identifying and addressing vulnerabilities at scale.
Press
Dark Reading published a report on Bugcrowd data showing that average bug bounty payouts per vulnerability increased 73% over a measured period. Casey Ellis, Bugcrowd co-founder and CTO, contributed to the analysis demonstrating growth in the security researcher compensation market and industry recognition of vulnerability disclosure value.
Press
WRCBtv published a 2018 article examining how U.S. companies engage foreign hackers through bug bounty programs to strengthen their defenses. Casey Ellis discusses the role of coordinated vulnerability disclosure in building trust between companies and security researchers across borders.
Press
A CXO Magazine article examines crowdsourcing and bug bounty programs as strategies to address the cybersecurity talent shortage. Casey Ellis discusses how organizations can leverage external security researchers and structured vulnerability disclosure to strengthen their defenses and expand their security capabilities.
Press
An Australian Financial Review article features Bugcrowd chief Casey Ellis discussing Australia's cybersecurity sector retention challenges. Ellis argues that Australia must adopt a more risk-tolerant approach to keep top cyber talent and firms within the country rather than losing them overseas.
Press
An article from Total Security Advisor covers the disclose.io initiative, an open source collaborative effort to standardize safe vulnerability disclosure practices. Casey Ellis founded the project to establish shared agreements that protect security researchers and encourage responsible bug reporting across organizations.
Press
HelpNetSecurity published an article covering findings from a Bugcrowd report on crowdsourced security industry trends, including payout data and researcher demographics. Casey Ellis contributed insights on the growing payouts to hackers participating in bug bounty and vulnerability disclosure programs.
Stage
Casey Ellis delivered remarks at cyber:secured Forum's 2018 event on building cyber resiliency from a hacker's perspective. His presentation drew on practical security insights to help organizations understand and strengthen their defensive posture against real-world threats.
Press
Bugcrowd released a report, covered in eWEEK, analyzing trends in bug bounty program payouts and vulnerability severity. Casey Ellis, Bugcrowd cofounder and CTO, contributed insights on how increased discovery of severe flaws was raising average payouts across the industry.
Press
NBC News published a 2018 feature on India's growing community of white-hat hackers who earn income through bug bounty programs. Casey Ellis is cited as an authority on how security researchers in emerging markets participate in coordinated vulnerability disclosure and responsible hacking initiatives.
Press
Bloomberg reported on Uber's official responses and testimony to the Senate regarding its handling of a 2016 data breach. The coverage examined how Uber disclosed and managed the incident, including allegations about the company's initial handling and communication surrounding the breach.
Press
Dark Reading reported on a lawmaker's criticism of Uber's response to its 2016 data breach, characterizing the company's handling as legally reprehensible. Casey Ellis commented on the incident and its implications for corporate breach response standards and accountability.
Press
App Developer Magazine reported on the ZipperDown vulnerability, which exposed thousands of iOS applications to the risk of malicious code injection. Casey Ellis identified and disclosed the security flaw affecting iOS app distribution systems.
Press
Threatpost published an article examining persistent flaws in the vulnerability disclosure process on May 9, 2018. Casey Ellis contributed perspective on the ongoing challenges affecting how security researchers and vendors communicate and resolve vulnerabilities.
Broadcast
Highwire hosted a cybersecurity panel discussion at RSA 2018 and published it on YouTube. Casey Ellis participated in the discussion, offering perspectives on the current state and emerging trends in the cybersecurity industry.
Press
ITSPmagazine published a recap of the 2018 RSA Conference covering highlights and key themes from the event. Casey Ellis participated in discussions at the conference addressing cybersecurity topics and industry trends.
Press
An article published by Security Boulevard in April 2018 examines when and why companies should consider overhauling their bug bounty programs to maintain effectiveness. Casey Ellis discusses the signs indicating a program needs restructuring and the steps organizations can take to improve outcomes and researcher engagement.
Stage
Casey Ellis speaks at the MCCA Global TEC Forum about bug bounties, ransomware, and cybersecurity trends relevant to in-house legal teams. He addresses how organizations can manage security vulnerabilities through coordinated disclosure programs and understand emerging threats in the legal technology landscape.
Stage
A presentation on bug hunting through crowd sourcing was delivered at NCSC CyberUK 2018. Casey Ellis discussed how crowdsourced security research identifies vulnerabilities and strengthens software security practices across organizations.
Press
A Fortune article from April 2018 examines Panera Bread's data leak and the security failures that enabled it. Casey Ellis provides commentary on lessons organizations should draw from the incident regarding data protection and breach response.
Press
SC Magazine reported on a controversial Georgia cybercrime bill that security executives found confusing due to its broad and potentially problematic language. Casey Ellis commented on the bill's vague definitions and expressed concern about its potential impact on legitimate security research and vulnerability disclosure practices.