To get in touch about speaking at your event, email [email protected]
Media Packet
1,042 items across 6 categories — press, broadcast, stage, and paperwork. Captured, displayed, and archived for posterity.
112 items · 2025
Press
Security Magazine published an article questioning whether the Scattered Spider threat actor has truly disbanded after announcing retirement. Ellis is cited among cyber experts expressing skepticism about the group's claimed departure from ransomware operations.
Press
CSO Online published an article examining Villager, an AI-native successor to CobaltStrike that is freely available online. Casey Ellis discusses how the framework lowers barriers to conducting advanced cyberattacks by automating and accelerating malicious activities.
Press
A SecurityWeek article examines industry skepticism about Scattered Spider and ShinyHunters' claims that they are retiring from cybercriminal activity. Casey Ellis comments on the credibility and reliability of such retirement announcements from threat actors in the cybercriminal underworld.
Press
Infosecurity Magazine reported in September 2025 that fifteen ransomware groups announced shutdowns on BreachForums. Casey Ellis commented on the significance of the retirements and assessed whether the closures represented genuine exits or strategic rebranding by the criminal organizations.
Press
Hackread published a report on Villager, a China-linked AI penetration testing tool that has accumulated over 10,000 downloads and raised cybersecurity concerns. Casey Ellis commented on the security implications of the tool's widespread adoption and its potential risks to enterprise environments.
Press
Security Boulevard reported on the Scattered Lapsus$ Hunters threat group's announcement that it is shutting down operations. Casey Ellis commented on law enforcement pressure as a driving factor and assessed the likelihood that the actors will reorganize under new identities rather than cease criminal activity entirely.
Broadcast
Risky Business published a sponsored interview segment in which Casey Ellis discusses browser extension security challenges with David Cottingham and Daniel Schell from Airlock Digital. Ellis explores the risks and management strategies associated with browser extensions in enterprise environments.
Press
SecurityWeek published an article examining AI's dual role in addressing and complicating security operations center workload challenges. Casey Ellis discusses how AI tools can help overwhelmed SOC teams manage alert fatigue while noting the risks of over-reliance on automated systems without proper human oversight.
Broadcast
BarCode Podcast Episode #125, titled "Revelation" and hosted by Chris Glanden, explores vulnerabilities, truths, and the role of hackers in exposing hidden information. Casey Ellis discusses how hackers contribute to revealing security weaknesses and the broader implications of vulnerability disclosure.
Press
Security Magazine reported on research identifying a new Outlook backdoor deployed by a Russian-linked persistent threat group. Casey Ellis provided analysis of the threat's operational scope and implications for enterprise email security.
Broadcast
Risky Bulletin published a sponsored interview in which Casey Ellis discusses prompt injection challenges with Keith Hoodlet, director of engineering at Trail of Bits. Ellis and Hoodlet examine why prompt injection remains a persistent technical problem in AI systems and explore potential mitigation approaches.
Press
SC Media reported on NotDoor malware linked to Russia's APT28 group that exploits Microsoft Outlook vulnerabilities. Casey Ellis provided analysis and context on the threat's implications for enterprise security and incident response strategies.
Press
Dice Insights published an article examining how cybersecurity education is evolving as AI transforms the industry and entry-level positions disappear. Casey Ellis discusses the broader skill sets and hands-on experience aspiring professionals need to develop competitiveness in the changing landscape.
Broadcast
A sponsored interview on Risky Business features Casey Ellis discussing phishing technique evolution with Push Security co-founder Jacques Louw. Ellis explores how Push Security's browser plugin addresses modern phishing threats and attack methods.
Press
A Dice Insights article examines how cybersecurity professionals can apply AI skills to address alert fatigue from growing threat notifications. Casey Ellis contributes perspective on using AI to reduce noise and enable security teams to focus on higher-value work.
Press
A SecureWorld news article reports that the United Kingdom has withdrawn its demand for Apple encryption backdoors following U.S. pressure. Casey Ellis is quoted discussing the implications of the policy reversal for encryption standards and digital privacy protections.
Press
A piece published by Information Security Buzz covers Britain's decision to withdraw its demand for Apple encryption backdoors following U.S. opposition. Casey Ellis is quoted commenting on the policy reversal and its implications for technology security standards.
Press
A SC Media article from August 2025 reports on the UK's decision to rescind an order requiring a backdoor to Apple cloud data. Casey Ellis provides commentary on the implications of the regulatory reversal and encryption policy.
Press
ComputerWeekly.com published "Would you hire a hacker?" examining unconventional talent recruitment amid rising cyber breaches and security skill shortages. Casey Ellis discusses hiring reformed hackers and non-traditional backgrounds as a practical approach to addressing the cybersecurity talent gap.
Broadcast
The Decibel Podcast featured Casey Ellis, founder of BugCrowd, in an episode examining the critical importance of addressing known vulnerabilities before they become systemic threats. Ellis discusses how unpatched and disclosed vulnerabilities pose significant risks to organizations and the broader security landscape.
Press
Security Boulevard reported on joint "hunt-forward" engagements launched by CISA and the U.S. Coast Guard to detect and disrupt cyber threats targeting critical U.S. infrastructure sectors. Casey Ellis contributed insights on how federal and private sector partnerships strengthen cyber resilience through proactive threat detection and intelligence sharing.
Press
Axios reported on Corridor's $5.4 million funding round and Alex Stamos's appointment as security leader on August 5, 2025. Casey Ellis participated as an angel investor in the funding round for the AI security startup.
Press
SecurityWeek published "Vibe Coding: When Everyone's a Developer, Who Secures the Code?" on August 5, 2025. Casey Ellis discusses the security challenges that emerge as development tools become more accessible to non-traditional developers and addresses the responsibility for code security in this shifting landscape.
Broadcast
A Risky Business sponsored interview features Tines Field CISO Matt Muller discussing the platform with Casey Ellis. The conversation covers unconventional approaches Tines uses to address security automation and problem-solving challenges.
Press
Dark Reading published an article examining security vulnerabilities in code generated by large language models. Casey Ellis is quoted discussing the risks of AI-generated code and the need for organizations to implement proper security controls when using these tools.
Broadcast
Unicorn Dispatch LIVE, a broadcast series by SCYTHE, featured Bryson Bort interviewing Casey Ellis on the mechanics and applications of bug bounty programs. Ellis discussed how organizations use crowdsourced security research to identify vulnerabilities before malicious actors do.
Press
A SC Media article examines patterns in hacker activity preceding CVE disclosures. Casey Ellis is quoted discussing how spikes in malicious activity can appear weeks before vulnerabilities are publicly announced.
Broadcast
A sponsored interview with Risky Business features Nucleus Security co-founder Scott Kuffer discussing vulnerability management practices and industry trends. Casey Ellis participates in the conversation, exploring how organizations approach vulnerability prioritization and remediation in modern security programs.
Press
TechCrunch published an article examining how AI-generated security reports are affecting bug bounty programs, with participants reporting challenges distinguishing legitimate findings from low-quality submissions. Casey Ellis discusses the impact of artificial intelligence on vulnerability disclosure workflows and the strain it places on security teams managing large volumes of submissions.
Broadcast
Risky Business published a sponsored interview featuring Thinkst Canary CEO Haroon Meer discussing the company's growth trajectory. Casey Ellis participates in the conversation, exploring Meer's approach to building and scaling the security company.