Casey Ellis, on the record.
1,435 items across 6 categories: press, broadcast, stage, and paperwork. Captured, displayed, and archived for posterity.
Pardon the Intrusion #18: Marcus Hutchins, the ransomware hero
The Next Web's Pardon the Intrusion newsletter covered the story of Marcus Hutchins, the security researcher who stopped the WannaCry ransomware attack. Casey Ellis was featured in the edition discussing the incident and its significance to the security community.
INSIDE THE WORLD OF BUG BOUNTY HUNTERS
BuiltIn published an explainer article on bug bounty hunting, its mechanics, and the growing corporate reliance on bounty programs to identify security vulnerabilities. Casey Ellis is cited as a key figure in the bug bounty space who helped establish the industry's credibility and practices.
15 Tech Tools To Help Remote Workers Maintain Productivity
Forbes published a roundup of 15 technology tools designed to support remote worker productivity, featuring guidance from its Technology Council expert panel. Casey Ellis contributed a recommendation for a tool that helps remote teams maintain efficiency while working from distributed locations.
Here’s what security professionals took away from Verizon’s annual data breach report
An article in Silicon Angle features security professionals discussing key takeaways from Verizon's 2020 Data Breach Investigations Report. Ellis contributes analysis of the report's findings alongside other security experts examining trends and implications in the data.
U.S. to Accuse China of Trying to Hack Vaccine Data, as Virus Redirects Cyberattacks
A New York Times article from May 2020 reports on U.S. government warnings that Chinese-linked hackers were targeting coronavirus vaccine and treatment research. The piece includes analysis of the geopolitical implications of cyber espionage during the pandemic and efforts by security researchers to counter such threats.
The Weekly Notable Startup Funding Report
The Weekly Notable Startup Funding Report from Alley Watch covers startup capital activity for the week of April 13, 2020. Bugcrowd, where Casey Ellis serves as co-founder and chief executive, closed a $30 million Series D funding round to expand its crowdsourced security platform.
Hacking Into Security #6 - Entrepreneurship in cybersecurity - Casey Ellis from Bugcrowd
Hacking Into Security podcast episode #6, published by Hacking into Security, features a discussion on entrepreneurship in cybersecurity. Casey Ellis discusses his career trajectory as an entrepreneur, including his path to founding and leading Bugcrowd in the security industry.
Disclose.io - Connecting the Ghosts of Disclosure Past, Present, and Future
A video presentation from AirGap 2020 titled "Disclose.io - Connecting the Ghosts of Disclosure Past, Present, and Future" explores vulnerability disclosure practices and frameworks. Casey Ellis discusses the evolution of disclosure processes and the role of disclose.io in standardizing and improving coordination between researchers, vendors, and platforms.
Bugcrowd launches 'classic' penetration testing service
Search Security reports on Bugcrowd's launch of a classic penetration testing service designed to complement its crowdsourced security platform. Casey Ellis explains how the offering combines traditional penetration testing methodologies with Bugcrowd's existing crowd-based approach to vulnerability research.
Where Tech Meets Legal: Discussing Crowdsourced Security Testing with Bugcrowd’s Casey Ellis
A Security Nation podcast episode from Rapid7 features Casey Ellis discussing the intersection of technology and legal frameworks in crowdsourced security testing. Ellis addresses safe harbor protections and disclosure policies as key considerations for organizations implementing bug bounty and vulnerability disclosure programs.
Remote Work: A How-To For Digital Boomers
This Forbes Technology Council article, published by Forbes on April 20, 2020, is a written contributor post titled Remote Work: A How-To For Digital Boomers. Casey Ellis, a former Forbes Councils member, wrote the piece, which urges leaders to lean into remote work by listening to themselves, their teams, and their digital natives.
Disclose.io - Vulnerability Disclosure and Hacker Safeharbor in 2020
A presentation delivered at GrimmCon in April 2020 examines vulnerability disclosure practices and hacker safe harbor protections during that year. Ellis outlines the state of disclosure coordination, legal safeguards for security researchers, and the role of standardized frameworks in connecting hackers with organizations seeking their help.
Panel: Vulnerability Disclosure (Casey Ellis, Costin Raiu, The Grugq)
vOPCDE #3 published a panel discussion on vulnerability disclosure featuring Casey Ellis, Costin Raiu, and The Grugq. Ellis participated in the conversation examining disclosure practices, responsible reporting frameworks, and industry coordination challenges in handling security vulnerabilities.
KEYNOTE: Disclose.io - Vulnerability Disclosure and Hacker Safeharbor in 2020
ComfyCon hosted a keynote address on vulnerability disclosure and hacker safeharbor practices in 2020. Ellis discussed the role of Disclose.io in standardizing disclosure policies and protecting security researchers from legal risk.
Cybersécurité: 30 millions de dollars pour la plateforme de bug bounty Bugcrowd
Frenchweb reported on Bugcrowd's $30 million Series D funding round in April 2020, covering the company's expansion in the bug bounty and crowdsourced security market. Casey Ellis, Bugcrowd's founder and CEO, led the company through the funding milestone as it scaled its platform for identifying and remediating software vulnerabilities.
As The U.S. Prepares For COVID-19 Disinformation Stokes Panic And Discord
A Forbes article examines how disinformation and cyber threats linked to the COVID-19 pandemic fuel panic and social division across the United States. Casey Ellis discusses the intersection of security vulnerabilities and misinformation campaigns during public health crises and their potential to undermine critical response efforts.
5.2M customer records stolen in latest hack targeting Marriott hotel group
Silicon Angle reported on a data breach at Marriott that exposed 5.2 million customer records in March 2020. Casey Ellis commented on the difficulties large organizations encounter in securing customer data at scale.
Vulnerability Detection in IT Assets by utilizing Crowdsourcing techniques
A patent application published by patents.justia.com in 2020 describes systems and methods for detecting vulnerabilities in IT assets through crowdsourcing techniques. Casey Ellis is listed as an inventor on the patent, which covers approaches to identifying security gaps across networked systems by leveraging distributed human input.
Bug Bounty Radar // The latest bug bounty programs for February 2020
Bug Bounty Radar is a monthly column in The Daily Swig that tracks newly launched bug bounty initiatives. Ellis provides analysis and commentary on notable programs added to the Bugcrowd platform during February 2020.
Hacking Home Security
FOX KTVU 2 aired a segment in which Casey Ellis demonstrates vulnerabilities in smart home and IoT devices. Ellis explains how consumers can identify and protect themselves against common security gaps in connected home technology.
Knowledge transfer: Casey Ellis on IoT bug bounties and live hacking events
The Daily Swig published an interview with Casey Ellis discussing bug bounty programs for IoT devices and live hacking events. Ellis addresses the distinctive challenges of running bounties on connected devices and explains how live hacking competitions create different dynamics than traditional security research programs.
Iowa vote tally app debacle should inform security, tech in future elections
SC Magazine published an article analyzing security failures in the Iowa caucus voting app and lessons for future elections. Casey Ellis comments on the necessity of transparent and public security testing for critical election software systems.
Hacking Democracy: On Securing an Election
Shmoocon hosted a stage presentation titled "Hacking Democracy: On Securing an Election" in January 2020. Casey Ellis discussed vulnerabilities in election infrastructure and approaches to identifying and addressing security gaps in voting systems.
Microsoft, DHS Warn of Zero-Day Attack Targeting IE Users
Dark Reading published a report on a joint Microsoft and Department of Homeland Security warning about an actively exploited zero-day vulnerability in Internet Explorer. Casey Ellis commented on the incident's significance for enterprise security teams monitoring threat activity and the importance of rapid patching protocols.
Innovation Wrap: Living Robots, Climate Change, The End Of Privacy
A Share Cafe innovation roundup from January 2020 covers emerging technologies and cybersecurity developments. The piece highlights Bugcrowd's role in the cybersecurity landscape and its work with organizations including the U.S. Department of Defense.
Combining the Power of Builders and Breakers
A presentation titled Combining the Power of Builders and Breakers appeared at the USENIX Enigma 2018 conference. Casey Ellis discusses how security researchers and developers can work together more effectively to identify and resolve vulnerabilities in software systems.
Why Companies Like Google And Facebook Pay Hackers Millions
CNBC broadcast from January 2020 examines why companies including Google and Facebook allocate millions of dollars to bug bounty programs. Casey Ellis provides analysis of the economic and security logic that drives major tech companies to fund these researcher-led vulnerability-discovery initiatives.
White hat hackers legally hack into companies like Uber, Starbucks, and Atlassian
Business Insider published a feature on white-hat hackers and bug bounty platforms that facilitate authorized security testing at major companies. Casey Ellis is featured as a founder of a leading platform enabling these legal vulnerability disclosures and coordinated security research efforts.
Google Project Zero Changes Rules On Revealing Cyberattacks
Information Security Buzz published expert commentary on Google Project Zero's updated vulnerability disclosure policy. Casey Ellis provided analysis on how the revised timeline and transparency rules affect researchers and organizations responding to cyberattacks.
Risky Business #567 -- ToTok, Iran and big-game ransomware galore
Risky Business episode 567, published by Risky Business on January 8, 2020, covers major cybersecurity developments including spyware applications, nation-state threats, and ransomware activity. Casey Ellis joins the podcast to discuss these threats and emerging trends in the threat landscape.