To get in touch about speaking at your event, email [email protected]
Media Packet
1,066 items across 6 categories — press, broadcast, stage, and paperwork. Captured, displayed, and archived for posterity.
1,066 items
Press
A piece published by Information Security Buzz covers Britain's decision to withdraw its demand for Apple encryption backdoors following U.S. opposition. Casey Ellis is quoted commenting on the policy reversal and its implications for technology security standards.
Press
A SC Media article from August 2025 reports on the UK's decision to rescind an order requiring a backdoor to Apple cloud data. Casey Ellis provides commentary on the implications of the regulatory reversal and encryption policy.
Press
ComputerWeekly.com published "Would you hire a hacker?" examining unconventional talent recruitment amid rising cyber breaches and security skill shortages. Casey Ellis discusses hiring reformed hackers and non-traditional backgrounds as a practical approach to addressing the cybersecurity talent gap.
Broadcast
The Decibel Podcast featured Casey Ellis, founder of BugCrowd, in an episode examining the critical importance of addressing known vulnerabilities before they become systemic threats. Ellis discusses how unpatched and disclosed vulnerabilities pose significant risks to organizations and the broader security landscape.
Stage
At DEF CON 33, Casey John Ellis discussed how a government agency successfully welcomed good-faith hackers and built a constructive vulnerability disclosure program.
Press
Security Boulevard reported on joint "hunt-forward" engagements launched by CISA and the U.S. Coast Guard to detect and disrupt cyber threats targeting critical U.S. infrastructure sectors. Casey Ellis contributed insights on how federal and private sector partnerships strengthen cyber resilience through proactive threat detection and intelligence sharing.
Stage
Casey John Ellis presented a BSides Las Vegas session about intergenerational knowledge sharing, intellectual humility, and practical wisdom in cybersecurity.
Press
Axios reported on Corridor's $5.4 million funding round and Alex Stamos's appointment as security leader on August 5, 2025. Casey Ellis participated as an angel investor in the funding round for the AI security startup.
Press
SecurityWeek published "Vibe Coding: When Everyone's a Developer, Who Secures the Code?" on August 5, 2025. Casey Ellis discusses the security challenges that emerge as development tools become more accessible to non-traditional developers and addresses the responsibility for code security in this shifting landscape.
Broadcast
A Risky Business sponsored interview features Tines Field CISO Matt Muller discussing the platform with Casey Ellis. The conversation covers unconventional approaches Tines uses to address security automation and problem-solving challenges.
Press
Dark Reading published an article examining security vulnerabilities in code generated by large language models. Casey Ellis is quoted discussing the risks of AI-generated code and the need for organizations to implement proper security controls when using these tools.
Broadcast
Unicorn Dispatch LIVE, a broadcast series by SCYTHE, featured Bryson Bort interviewing Casey Ellis on the mechanics and applications of bug bounty programs. Ellis discussed how organizations use crowdsourced security research to identify vulnerabilities before malicious actors do.
Press
A SC Media article examines patterns in hacker activity preceding CVE disclosures. Casey Ellis is quoted discussing how spikes in malicious activity can appear weeks before vulnerabilities are publicly announced.
Broadcast
A sponsored interview with Risky Business features Nucleus Security co-founder Scott Kuffer discussing vulnerability management practices and industry trends. Casey Ellis participates in the conversation, exploring how organizations approach vulnerability prioritization and remediation in modern security programs.
Press
TechCrunch published an article examining how AI-generated security reports are affecting bug bounty programs, with participants reporting challenges distinguishing legitimate findings from low-quality submissions. Casey Ellis discusses the impact of artificial intelligence on vulnerability disclosure workflows and the strain it places on security teams managing large volumes of submissions.
Broadcast
Risky Business published a sponsored interview featuring Thinkst Canary CEO Haroon Meer discussing the company's growth trajectory. Casey Ellis participates in the conversation, exploring Meer's approach to building and scaling the security company.
Press
Hackread published a security news article on the Chinese Salt Typhoon group's infiltration of US National Guard networks. The article covers the breach details and implications for critical infrastructure security.
Press
A SecureWorld article reports that Chinese hackers breached a U.S. Army National Guard network for nine months and stole sensitive data, according to a Department of Homeland Security memo. The article includes expert analysis on the breach's implications for U.S. cybersecurity infrastructure and broader threat patterns.
Stage
A panel discussion at the ICML 2025 Workshop on Technical AI Governance addressed third-party evaluation and vulnerability disclosure practices for general-purpose AI systems. Casey Ellis participated as a panelist, contributing perspective on responsible flaw disclosure approaches in the AI governance context.
Press
CyberScoop published an article examining whether XBOW's automated vulnerability discovery capabilities signal the decline of human-led bug hunting. Ellis discusses how automation is reshaping the balance between human and automated work in cybersecurity, while noting that current AI tools have not yet reached a threshold that eliminates the need for human researchers.
Broadcast
A sponsored interview published on Risky Business examines trust and artificial intelligence in enterprise security. Casey Ellis participates in a discussion with Zero Networks Field CTO Chris Boehm about the proliferation of AI tools across organizations and implications for security teams.
Broadcast
The Boring AppSec Podcast episode 21 features a discussion on AI's role in security measures with Casey Ellis, founder and advisor at Bugcrowd. Ellis explores how artificial intelligence intersects with application security practices and their practical implementation in modern security programs.
Press
Dark Reading reported on a breach at Qantas Airlines affecting 6 million customers. Casey Ellis commented on the incident, addressing the scope of the compromise and implications for airline industry security practices.
Press
Dark Reading published an article titled "And Now Malware That Tells AI to Ignore It?" examining emerging threats where malware attempts to evade AI-based security detection systems. Casey Ellis is quoted in the piece discussing how adversaries are adapting tactics to circumvent automated threat detection mechanisms and the implications for enterprise security strategies.
Press
Dice Insights published an analysis of cybersecurity salary trends showing that high-skilled security professionals are receiving significant pay increases as hiring rebounds. Casey Ellis is cited for insights on compensation patterns and the market value of specialized security expertise.
Press
GitHub has introduced private vulnerability reporting for public repositories, according to Infosecurity Magazine. Casey Ellis notes the feature requires manual enablement by maintainers and represents a significant step toward making coordinated disclosure more accessible to open-source projects.
Press
SC Media published an article on June 18, 2025, detailing how GodFather banking malware creates virtual environments on compromised devices to evade detection. Casey Ellis is quoted providing analysis on the malware's techniques and implications for enterprise security defenses.
Press
Infosecurity Magazine reported on an upgrade to GodFather banking malware that leverages on-device virtualization to hijack legitimate mobile applications. Casey Ellis commented on the technical sophistication of the attack method and its implications for mobile banking security defenses.
Press
Hackread published an article about GodFather, an Android malware that executes legitimate applications within a sandbox environment to intercept and steal user data. Casey Ellis is cited as a security expert providing analysis on the malware's sophisticated evasion techniques and the implications for mobile device security.
Broadcast
Bugcrowd Security Flash: CVE-2025-0133 is a video broadcast from Bugcrowd published on June 18, 2025. Casey Ellis, Bugcrowd Founder and CTO, discusses the vulnerability with Von, Senior Manager of Security Operations, covering how it works and associated risks.