To get in touch about speaking at your event, email [email protected]
Media Packet
1,042 items across 6 categories — press, broadcast, stage, and paperwork. Captured, displayed, and archived for posterity.
76 items · 2021
Press
A report from SC Magazine details malicious Golang malware targeting e-commerce servers to steal payment information. Casey Ellis provided analysis on the threat's implications for retail infrastructure and payment security vulnerabilities.
Press
A Forbes article examines the emerging practice of applying bug bounty models to identify bias and discrimination in artificial intelligence systems. Casey Ellis discusses how crowdsourced security approaches can be adapted to surface algorithmic fairness issues before they cause harm to users and organizations.
Press
Duo Security published an analysis of new U.S. government directives establishing incident response requirements for federal civilian agencies. Casey Ellis is quoted discussing the practical implications of the government's clearer cybersecurity incident playbooks and their effect on federal agency preparedness.
Press
A report in InfoSecurity Magazine details research estimating that ethical hackers prevented over $27 billion in cybercrime damages during a one-year period. Casey Ellis contributed to the research, which quantifies the financial impact of vulnerability disclosure and coordinated security research on reducing criminal losses.
Broadcast
The CyberWire published a video segment featuring Casey Ellis, CTO of Bugcrowd, and Beau Woods, Senior Advisor at CISA, discussing cybersecurity awareness during October 2021. Ellis and Woods explored implications of recent security incidents for security leaders and organizational defense strategies.
Broadcast
A sponsor interview segment from the Risky Business podcast features Casey Ellis discussing the current state of bug bounties and crowdsourced security. Ellis addresses market trends and the evolving relationship between organizations and external security researchers in vulnerability disclosure.
Press
CISA released an advisory through ZDNet warning of five vulnerabilities in Apache HTTP Server that affect Cisco products and require immediate patching. Casey Ellis commented on the advisory's implications for enterprise security teams managing affected infrastructure.
Press
CISA and Bugcrowd launched a vulnerability disclosure platform enabling security researchers to report bugs directly to US federal agencies. Casey Ellis, Bugcrowd's founder, helped develop the platform to standardize and streamline how the government receives and manages security vulnerability reports from hackers.
Press
Duo Security published the second installment of a feature series on the history and rapid adoption of bug bounty programs in Silicon Valley. Casey Ellis discusses the evolution of bug bounties and their role in shaping modern security practices across the technology industry.
Press
Digital Journal published an analysis of a recent healthcare sector data breach that examined the attack methods and underlying security failures. Casey Ellis provided commentary on the incident, explaining both the technical vectors used by attackers and the organizational factors that enabled the breach.
Press
Solutions Review published coverage of a misconfiguration in Microsoft's Power Apps platform that exposed data across millions of user accounts. Casey Ellis identified and documented the vulnerability, contributing research that highlighted the scale and implications of the exposure across multiple applications.
Press
Forbes Technology Council published a panel article examining 15 security risks commonly overlooked during the transition to remote work. Casey Ellis contributed to the discussion of digital asset vulnerabilities in distributed work environments.
Press
Global Security Magazine published a piece featuring commentary from Casey Ellis on the Kaseya supply chain ransomware attack. Ellis analyzed the incident and its implications for software supply chain security.
Press
A CSO Magazine article from August 2021 examines the fallout from the Kaseya ransomware attack on Australian businesses and the security obligations of software vendors. Casey Ellis addresses industry responsibility and the need for greater collaboration to prevent similar supply-chain attacks.
Press
The Cyberwire published an update on recovery and response efforts following the Kaseya VSA ransomware supply chain attack. Casey Ellis contributed analysis on the incident's scope and implications for affected organizations and the broader software supply chain ecosystem.
Press
SearchSecurity reported on CISA's selection of Bugcrowd to provide the platform for a new federal vulnerability disclosure program serving U.S. government agencies. Casey Ellis, Bugcrowd's co-founder and chief technology officer, supported the initiative as part of the company's effort to expand coordinated vulnerability management across the public sector.
Press
The Hacker News published a feature article in 2021 identifying five top bug bounty programs for security researchers to monitor and engage with throughout the year. Bugcrowd, which Ellis co-founded, was included among the platforms highlighted for its role in connecting researchers with organizations seeking vulnerability disclosure.
Broadcast
A podcast episode on Mission.org explores artificial intelligence and technology's effects on society and cybersecurity. Casey Ellis discusses Bugcrowd's founding, the importance of legal pathways for security researchers, and methods organizations can use to establish security-first cultures.
Press
A SearchSecurity feature examines how legal threats under laws like the CFAA can discourage security researchers from disclosing vulnerabilities and conducting important research. Casey Ellis discusses the tension between legal risk and the need for responsible vulnerability disclosure in security research.
Press
Bank Info Security published an analysis examining whether offensive cyber operations against ransomware gangs could effectively disrupt their activities. Casey Ellis discusses the potential risks and legal implications of such aggressive defensive tactics in response to escalating ransomware threats.
Press
CyberWire's Privacy Briefing newsletter from June 2021 examines healthcare data breaches and whether compliance with privacy regulations is driven primarily by fear of financial penalties. Casey Ellis provides analysis on the motivations behind organizational privacy practices and regulatory compliance in the healthcare sector.
Press
Solutions Review published expert commentary on a ransomware attack affecting a Georgia fertility clinic. Ellis discussed the incident's implications for healthcare cybersecurity and the vulnerabilities that made the clinic a target for attackers.
Press
An opinion piece in the Australian Financial Review argues that Australian businesses must prioritize cybersecurity in an increasingly hostile digital environment. Casey Ellis calls for organizations to embed security into their operational strategy rather than treating it as an afterthought to achieve long-term resilience.
Press
CPO Magazine published an analysis of the U.S. Supreme Court's Van Buren v. United States decision, which narrowed the Computer Fraud and Abuse Act's scope. Casey Ellis is cited for his perspective on how the ruling benefits security researchers by providing clearer legal boundaries for vulnerability research and disclosure.
Press
Digital Journal published an analysis of the U.S. Supreme Court's decision narrowing the scope of the Computer Fraud and Abuse Act. Casey Ellis discusses the implications of the ruling for security researchers and the broader cybersecurity landscape.
Broadcast
App Sec Stats Flash podcast segment from May 2021 addresses the role of ethical hackers in cybersecurity. Casey Ellis argues that ethical hackers serve as essential defenders rather than criminals, emphasizing their positive contribution to strengthening security systems.
Patents
U.S. Patent 11,019,091 outlines systems and methods for detecting vulnerabilities in IT assets through crowdsourced analysis of security data and feature vectors. The patent, filed by Casey Ellis, describes how similarity measurements between target systems and a corpus of known vulnerabilities enable community experts to identify previously unknown security weaknesses.
Press
Crowd Sourcing Week published a Q&A interview with Casey Ellis, founder and chairman of Bugcrowd, in May 2021. Ellis discusses the crowdsourced security model and explains how the bug bounty industry addresses vulnerability discovery and remediation at scale.
Press
A Bank Info Security article from May 2021 examines the challenges and opportunities of implementing Security Orchestration, Automation and Response technologies in organizations. Casey Ellis discusses how SOAR deployment requires careful planning and addresses both the technical and operational barriers that security teams encounter during implementation.
Press
An interview published in Bank Info Security examines the evolving landscape of software vulnerabilities and how organizations adapt their security strategies. Ellis discusses the changing dynamics around software flaw discoveries and exploits, addressing shifts in how enterprises approach vulnerability management.