Media Packet
1,053 items across 6 categories — press, broadcast, stage, and paperwork. Captured, displayed, and archived for posterity.
112 items · 2025
Press
Hackread reported on CISA's addition of a TeleMessage vulnerability to its Known Exploited Vulnerabilities list. The article covers the security agency's ongoing efforts to track and document actively exploited flaws affecting critical infrastructure and government systems.
Press
Security Magazine reported on a lawsuit alleging Roblox tracks children's data without parental consent. Casey Ellis characterized the case as highlighting the "trust tax" companies incur when mishandling user data, noting how consent complexity in digital environments may establish new legal precedents.
Press
CSO Online reported on CISA's addition of a Telemessage vulnerability to its Known Exploited Vulnerabilities list. Casey Ellis characterized the incident as a classic supply chain risk, noting that vendor security trust is essential and highlighting how a single vulnerability can have cascading impacts across dependent systems.
Broadcast
Future Secured published a broadcast episode titled "Bug Bounties, The Wanted Poster For Ethical Hackers" on its Future Secured show. Casey Ellis discusses lessons from building Bugcrowd and explains how bug bounties function as a mechanism to coordinate ethical hackers toward organizational security objectives.
Press
SC Magazine published Casey Ellis's perspective on Netflix's "Zero Day" series and its portrayal of incident response. Ellis notes that the series accurately captures the high-pressure environment of major incidents and the complex coordination required among technical teams, leadership, and government agencies.
Press
Dark Reading published an article examining how vulnerability exploitation tactics are changing in 2024-25. Casey Ellis argues that defenders have recently gained advantage through expanded bug bounty programs, improved disclosure practices, and more proactive vendor security efforts.
Press
CIO Dive reported on a bipartisan bill to renew the Cybersecurity Information Sharing Act. Casey Ellis stated that the legislation is crucial for reinforcing the public-private trust framework essential for national cybersecurity.
Press
HackRead published an article on April 16, 2025, explaining slopsquatting, an attack that exploits inaccuracies in AI-generated code. Ellis outlines how the threat exploits developer trust in AI tools and underscores the importance of verification practices for generated code.
Press
Forbes published an article on the potential disruption of the Common Vulnerabilities and Exposures program and its impact on cybersecurity. Casey Ellis describes the CVE program as a common language for vulnerabilities that prevents chaos and enables coordinated defense across the industry.
Broadcast
Down the Security Rabbithole published episode 649 of its video podcast series on April 10, 2025, featuring Casey Ellis discussing bug bounties and the vulnerability disclosure landscape. Ellis addresses the evolution of coordinated vulnerability management and shares perspective on industry direction with hosts Rafal, James, and Jim.
Press
SC Magazine published an article on April 8, 2025, examining Xanthorox, a malicious AI tool designed to enable criminal activity without requiring jailbreaks. Casey Ellis discusses how Xanthorox demonstrates AI's dual-use potential, noting that while AI democratizes technology, it simultaneously reduces the technical barriers required to execute sophisticated cyberattacks.
Broadcast
Coffee & Pizza Podcast episode 023 features Casey Ellis, founder of Bugcrowd, discussing his background and career path. Ellis shares his early experiences as a hacker in Australia and the journey that led him to establish Bugcrowd as a crowdsourced security platform.
Press
An SC Magazine article covers an NSA advisory warning about fast-flux DNS evasion techniques as a national security threat. Casey Ellis describes the method as a shell game that conceals malicious servers and points to how cybercrime has become industrialized.
Press
Forbes published "Hack OpenAI And Win $100,000? What You Need To Know" on March 29, 2025, examining OpenAI's bug bounty initiative. Casey Ellis comments that the program represents a positive commitment to security and transparency that strengthens trust with users and security researchers.
Press
Forbes published an article on the surge in ransomware attacks and the security vulnerabilities enabling them. Casey Ellis attributes the increase to threat actors leveraging AI for sophisticated phishing campaigns and developing techniques to circumvent multi-factor authentication, while advocating for stronger defensive measures.
Broadcast
Bugcrowd released a video on H.R. 872 featuring founder Casey Ellis and Americas CISO Trey Ford discussing the legislation's implications for cybersecurity. Ellis and Ford examine what the bill means for the industry and outline anticipated next steps in regulatory and security policy development.
Papers
arXiv.org published a research paper examining gaps in how flaws in general-purpose AI systems are reported and evaluated compared to established software security practices. The paper, developed by collaborators across security, machine learning, law, and policy, proposes standardized flaw reporting formats, broad disclosure programs with legal protections for researchers, and improved infrastructure for coordinating reports across AI providers.
Broadcast
A CyberRisk TV video segment features an interview between host Deb Radcliff and Bugcrowd founder Casey Ellis about artificial intelligence's role in application security attacks and defenses. Ellis discusses how AI is reshaping both offensive and defensive strategies in the evolving landscape of application security threats.
Broadcast
The Phillip Wylie Show features an interview with Casey Ellis, founder of Bugcrowd, discussing his background in technology and the development of bug bounty platforms. Ellis describes how Bugcrowd connects organizations with ethical hackers to identify security vulnerabilities, and explains his approach to leveraging the white hat hacker community to enhance internet security.
Broadcast
Bugcrowd published a Security Flash video featuring founder Casey Ellis and America's CISO Trey Ford discussing the Salt Typhoon threat. The 20-minute broadcast covers Salt Typhoon's background, organizational impact, and implications for security teams.
Broadcast
Delinea's 401 Access Denied podcast features a discussion on crowdsourced security and vulnerability disclosure practices. Ellis explains how crowdsourced models improve security outcomes and discusses the role of coordinated disclosure in modern threat management.
Awards & Judging
Casey Ellis has been accepted as a member of the Black Hat Review Board for 2025. In this role, he will serve as a judge evaluating submissions for the annual information security conference.