Media Packet
1,053 items across 6 categories — press, broadcast, stage, and paperwork. Captured, displayed, and archived for posterity.
112 items · 2025
Press
TechCrunch published an article examining how AI-generated security reports are affecting bug bounty programs, with participants reporting challenges distinguishing legitimate findings from low-quality submissions. Casey Ellis discusses the impact of artificial intelligence on vulnerability disclosure workflows and the strain it places on security teams managing large volumes of submissions.
Broadcast
Risky Business published a sponsored interview featuring Thinkst Canary CEO Haroon Meer discussing the company's growth trajectory. Casey Ellis participates in the conversation, exploring Meer's approach to building and scaling the security company.
Press
Hackread published a security news article on the Chinese Salt Typhoon group's infiltration of US National Guard networks. The article covers the breach details and implications for critical infrastructure security.
Press
A SecureWorld article reports that Chinese hackers breached a U.S. Army National Guard network for nine months and stole sensitive data, according to a Department of Homeland Security memo. The article includes expert analysis on the breach's implications for U.S. cybersecurity infrastructure and broader threat patterns.
Stage
A panel discussion at the ICML 2025 Workshop on Technical AI Governance addressed third-party evaluation and vulnerability disclosure practices for general-purpose AI systems. Casey Ellis participated as a panelist, contributing perspective on responsible flaw disclosure approaches in the AI governance context.
Press
CyberScoop published an article examining whether XBOW's automated vulnerability discovery capabilities signal the decline of human-led bug hunting. Ellis discusses how automation is reshaping the balance between human and automated work in cybersecurity, while noting that current AI tools have not yet reached a threshold that eliminates the need for human researchers.
Broadcast
A sponsored interview published on Risky Business examines trust and artificial intelligence in enterprise security. Casey Ellis participates in a discussion with Zero Networks Field CTO Chris Boehm about the proliferation of AI tools across organizations and implications for security teams.
Broadcast
The Boring AppSec Podcast episode 21 features a discussion on AI's role in security measures with Casey Ellis, founder and advisor at Bugcrowd. Ellis explores how artificial intelligence intersects with application security practices and their practical implementation in modern security programs.
Press
Dark Reading reported on a breach at Qantas Airlines affecting 6 million customers. Casey Ellis commented on the incident, addressing the scope of the compromise and implications for airline industry security practices.
Press
Dark Reading published an article titled "And Now Malware That Tells AI to Ignore It?" examining emerging threats where malware attempts to evade AI-based security detection systems. Casey Ellis is quoted in the piece discussing how adversaries are adapting tactics to circumvent automated threat detection mechanisms and the implications for enterprise security strategies.
Press
Dice Insights published an analysis of cybersecurity salary trends showing that high-skilled security professionals are receiving significant pay increases as hiring rebounds. Casey Ellis is cited for insights on compensation patterns and the market value of specialized security expertise.
Press
GitHub has introduced private vulnerability reporting for public repositories, according to Infosecurity Magazine. Casey Ellis notes the feature requires manual enablement by maintainers and represents a significant step toward making coordinated disclosure more accessible to open-source projects.
Press
SC Media published an article on June 18, 2025, detailing how GodFather banking malware creates virtual environments on compromised devices to evade detection. Casey Ellis is quoted providing analysis on the malware's techniques and implications for enterprise security defenses.
Press
Infosecurity Magazine reported on an upgrade to GodFather banking malware that leverages on-device virtualization to hijack legitimate mobile applications. Casey Ellis commented on the technical sophistication of the attack method and its implications for mobile banking security defenses.
Press
Hackread published an article about GodFather, an Android malware that executes legitimate applications within a sandbox environment to intercept and steal user data. Casey Ellis is cited as a security expert providing analysis on the malware's sophisticated evasion techniques and the implications for mobile device security.
Broadcast
Bugcrowd Security Flash: CVE-2025-0133 is a video broadcast from Bugcrowd published on June 18, 2025. Casey Ellis, Bugcrowd Founder and CTO, discusses the vulnerability with Von, Senior Manager of Security Operations, covering how it works and associated risks.
Press
Dark Reading published an article titled "Hacking the Hackers: When Bad Guys Let Their Guard Down" on their threat intelligence section. Casey Ellis is quoted discussing how attackers can be caught when their operational security lapses, contributing perspective on adversary vulnerability and detection methods.
Press
Bugcrowd launched an open-source disclosure framework aimed at encouraging responsible vulnerability disclosure practices, as reported by Infosecurity Magazine. Casey Ellis, Bugcrowd's founder, led the initiative to provide organizations with standardized tools for managing security reports from researchers.
Press
CSO Online reported on a China-linked espionage campaign in which PurpleHaze and ShadowPad targeted over 70 organizations globally, including government and critical infrastructure entities, between June 2024 and March 2025. Casey Ellis provided analysis and context on the threat landscape and implications for cybersecurity defenses.
Press
SecureWorld published a report on Chinese state-sponsored hackers targeting SentinelOne as part of a broader espionage campaign against critical infrastructure and supply chains. Casey Ellis commented on the incident's implications for endpoint security vendors and the importance of transparency in disclosing attacks on security companies.
Broadcast
A sponsored segment on Risky Business features Casey Ellis interviewing Push Security co-founder and Chief Product Officer Jaques Louw about phishing evasion techniques and their effectiveness. Ellis and Louw discuss how phishing campaigns have advanced their methods to bypass modern security defenses.
Press
CyberScoop published an article examining security risks in AI-generated code and industry responsibility for mitigation. Casey Ellis discusses approaches to addressing vulnerabilities introduced by vibe coding and the steps needed to make the practice more secure.
Press
A SC Media article from June 2025 discusses a critical Cisco IOS XE vulnerability rated 10.0 in severity. Casey Ellis is quoted providing perspective on the urgency and implications of the flaw for affected organizations.
Press
Dark Reading reported on the rising exploitation risk for a critical Cisco vulnerability. Casey Ellis commented on the threat landscape and the factors driving increased weaponization of the flaw in active attacks.
Broadcast
Risky Business published a sponsored interview in which Casey Ellis speaks with runZero founder and CEO HD Moore about the limitations and failures of vulnerability scanners. Ellis conducts the discussion as part of Risky Business Media's interview programming.
Press
Indian police arrested a cybercrime gang that replicated a Myanmar-based business model for financial fraud, as reported by Dark Reading. Casey Ellis provided commentary on the operation's tactics and how such cross-border schemes adapt criminal methodologies across regions.
Press
NIST's LEV Equation to Rate Chances a Bug Was Exploited, published by Dark Reading, explains a new NIST framework for assessing the likelihood that a vulnerability has been actively exploited. Casey Ellis is quoted discussing the practical implications of the LEV equation and its application to vulnerability prioritization in real-world security operations.
Press
A Security Boulevard article examines allegations that Roblox secretly tracked children's data without consent, potentially violating federal privacy law. Casey Ellis discusses the privacy implications of the tracking practices and their broader significance for platform accountability.
Press
Dice Insights published an article on offensive security skills that cybersecurity professionals need to develop. Casey Ellis discussed how offensive security is becoming increasingly important as attacks and AI reshape the threat landscape and career opportunities for security professionals.
Press
TeleMessage's Signal app vulnerability was added to CISA's list of exploited flaws, according to reporting by SC Media. Casey Ellis commented on the significance of the vulnerability being tracked by federal authorities and its implications for enterprise security practices.