Casey Ellis, on the record.

Broadcast

I'm Not AGI Pilled. I'm Human Pilled - with Casey Ellis

Broadcast

Sponsored: What npm 12 fixes… and what it doesn’t

In this Risky Business sponsored interview, Casey Ellis chats with Socket founder Feross Aboukhadijeh about npm 12’s move to disable insta [Read More]

Press

Uncle Sam Seeks Private Hackers to Disrupt Criminal Networks

The White House, in a major expansion of how it works with the private sector, has launched a program to engage private cybersecurity firms to conduct cyber

Stage

SLOP ROULETTE at SLOPCON 2026

Casey presented the 00:15 [SLOP ROULETTE] slot at SLOPCON 2026 (“AI Generated, Human Presented”), held overnight 7-8 August 2026 in W222, L2 at DEF CON 34, LVCC, Las Vegas.

Stage

Filibuffer Overflow: Hackers Stage a Congressional Hearing

Policy @ DEF CON, Friday 7 August 2026, 16:30 to 18:00 in the Policy Village (W210 to W211). Casey appeared on stage as a mock Congressional testimony witness in this staged hearing, a format the group had previously run in a real Senate hearing room. The published program credits the panel as Katherine Pratt, Jeff Rothblum, Maurice Turner, Ayan Islam and Beau Woods; witness roles are not enumerated in the listing.

Broadcast

Slopdemic, Not Vulnpocalypse (Yet)

AI has collapsed the cost of finding and reporting vulnerabilities at the same time, and Casey Ellis breaks down what that means for bug bounties, open source, and security research policy.

Broadcast

Sponsored: Thinkst on building companies that don’t suck

A sponsored interview segment from Risky Business Media features Casey Ellis discussing company culture and customer relations with Haroon Meer of Thinkst. Ellis and Meer explore principles for building organizations that maintain positive relationships with their customer base rather than generating frustration or dissatisfaction.

Press

Gold Eagle Clearinghouse Targets Security Gap, but How Is Unclear

Dark Reading published an article on Gold Eagle Clearinghouse's exploitation of security gaps in financial systems. Casey Ellis is quoted discussing the vulnerabilities involved and their broader implications for sector-wide security practices.

Broadcast

Casey Ellis on How AI Is Reshaping Vulnerability Research and Patching

An episode of the Microsoft Threat Intelligence Podcast features Casey Ellis discussing how artificial intelligence is transforming vulnerability research, bug bounty programs, and cyber defense strategies. Ellis addresses the expanding volume of vulnerabilities, responsible disclosure challenges, AI-assisted attacks, and the implications of advanced tools for both defenders and attackers.

Press

Cybersecurity vets protest 'dangerous' US government ban on Anthropic's most powerful models

A TechCrunch article covers cybersecurity experts' objection to US government export controls on Anthropic's advanced AI models. Casey Ellis joined dozens of security professionals in urging the White House to lift restrictions, contending the ban undermines defenders' ability to secure software and products.

Press

Will AI Kill the Bug Bounty Industry?

Anthropic's Mythos is accelerating vulnerability discovery to machine speed, forcing the bug bounty industry and offensive security teams to adapt to a future where finding flaws is no longer the hard part.

Press

Microsoft says it won't go after security researchers after the internet called them out

Microsoft announced it will not pursue legal action against security researchers following public criticism, according to Windows Central. Casey Ellis contributed to the discussion around responsible disclosure practices and the importance of constructive collaboration between software vendors and the security research community.

Stage

Smashing the (Policy) Stack for Public Safety & (Not) Profit?!

Josh Corman and Casey John Ellis presented a NaClCON session examining cybersecurity policy, public safety, and public-interest work.

Broadcast

Sponsored: Inside CISA's disastrous secrets leak

Risky Business Media published a sponsored interview segment in which Casey Ellis discusses the recent CISA secrets leak with Truffle Security founder and CEO Dylan Ayrey. Ellis examines the incident's implications and security lessons relevant to the vulnerability disclosure and cybersecurity community.

Press

Microsoft's Zero-Day Legal Threats Spark Backlash

Dark Reading published an article examining legal threats and industry backlash following a Microsoft zero-day vulnerability disclosure. Casey Ellis commented on the broader implications of how security researchers and coordinated disclosure practices navigate legal risks and responsible vulnerability reporting in the current threat landscape.

Broadcast

Vulnerability disclosure with Casey Ellis

Casey Ellis joined Open Source Security to discuss the persistent challenges of vulnerability disclosure and the additional pressure created by AI-generated findings.

Broadcast

From ‘Hackers Are Criminals’ to Industry Leaders — What Changed?

VulnCheck published a broadcast episode titled "From 'Hackers Are Criminals' to Industry Leaders — What Changed?" on YouTube. Casey Ellis discusses how the security industry's perception of hackers has shifted from viewing them purely as criminals to recognizing their role as contributors to industry advancement and vulnerability research.

Press

Thoughts on the #slopdemic

A LinkedIn post from Casey Ellis examines emerging trends in vulnerability reporting and security disclosure practices. Ellis proposes new terminology to describe the proliferation of low-quality vulnerability reports and discusses patterns he has observed throughout his career in the field.

Broadcast

Sponsored: runZero accidentally got good at OT

Risky Business Media published a sponsored interview segment featuring Casey Ellis discussing RunZero's 4.9 release with founder and CEO HD Moore. Ellis and Moore explore RunZero's capabilities for operational technology asset discovery and risk management.

Press

Cybersecurity Pros: What Hiring and HR Managers Are Looking For in 2026

Dice Insights published a 2026 guide on what cybersecurity hiring managers seek in candidates, drawing on interviews with CISOs and security leaders. Casey Ellis contributes insights on the skills, certifications, and professional qualities that help cybersecurity professionals stand out in the current job market.

Press

Who Decides What Happens Next with the Most Capable AI?

The Rip Current published an article examining governance and oversight of advanced AI capabilities and their potential economic impact. Casey Ellis contributes perspective on decision-making processes around transformative AI systems and the balance between industry self-regulation and institutional oversight.

Press

Here's how cyber heavyweights are reading the Claude Mythos AI cybersecurity report

CyberScoop published an article examining how cybersecurity leaders interpret findings from the Claude Mythos AI cybersecurity threat report. Casey Ellis contributed perspective on how defenders assess the tool's potential hacking capabilities and implications for security strategy.

Press

Why experts fear AI could tip the scales toward hackers

An AOL article examines how artificial intelligence capabilities could shift the balance toward attackers in cybersecurity. Casey Ellis, co-founder of Bugcrowd, discusses the potential security risks and timeline for when advanced AI tools might become broadly accessible to malicious actors.

Press

'Vulnpocalypse': What happens when AI gives hackers a superweapon

NBC News published an article titled "Vulnpocalypse: What happens when AI gives hackers a superweapon" examining concerns about advanced AI models and cybersecurity risks. Casey Ellis is featured discussing the implications of AI capabilities for vulnerability research and the security landscape.

Stage

Kernelcon 2026 Keynote

Casey John Ellis delivered a keynote at Kernelcon 2026 in Omaha. The event listing confirms the keynote appearance but does not publish a separate talk title.

Patents

Portal For Submitting Security Vulnerabilities Via Third-Party Websites

A patent application filed with the U.S. Patent Office describes a widget-based portal that enables users to submit security vulnerabilities for systems associated with websites, with reports routed through secure channels to designated vulnerability tracking systems. Casey Ellis is named as an inventor on the patent application.

Broadcast

Bugcrowd Founder Casey Ellis: AI Slop, and the Future of Hacking

The Secure Disclosure broadcast features Bugcrowd founder Casey Ellis discussing the evolution of bug bounty programs and the role of hackers as strategic assets. Ellis addresses how artificial intelligence is reshaping security research and the future trajectory of the hacking community.

Broadcast

Bug bounties in the age of AI

A runZero broadcast featuring Tod Beardsley and Casey Ellis examines how artificial intelligence is reshaping bug bounty programs and security research. Ellis argues that despite AI lowering entry barriers for attackers and defenders alike, human intent and agility remain the core drivers of effective security research.

Broadcast

Security Teams Are Gaslighting Hackers (Vulnerability Disclosure) - Hackers On The Rocks Podcast

Hackers On The Rocks podcast featured Casey Ellis discussing vulnerability disclosure and bug bounty program friction. Ellis examines why companies reject valid security reports and the disconnect between researcher expectations and organizational response practices.

Broadcast

Sponsored: What is Extended Identity Access Management?

Risky Business published a sponsored interview segment in which Casey Ellis and Fletcher Heisler, founder and CEO of open source identity provider Authe, discuss extended identity access management concepts and practices. Ellis explores the role of identity infrastructure in security strategy and access control frameworks within the interview.