To get in touch about speaking at your event, email [email protected]
Media Packet · Press
839 items
839 items
Press
SC Media published an article on June 18, 2025, detailing how GodFather banking malware creates virtual environments on compromised devices to evade detection. Casey Ellis is quoted providing analysis on the malware's techniques and implications for enterprise security defenses.
Press
Infosecurity Magazine reported on an upgrade to GodFather banking malware that leverages on-device virtualization to hijack legitimate mobile applications. Casey Ellis commented on the technical sophistication of the attack method and its implications for mobile banking security defenses.
Press
Hackread published an article about GodFather, an Android malware that executes legitimate applications within a sandbox environment to intercept and steal user data. Casey Ellis is cited as a security expert providing analysis on the malware's sophisticated evasion techniques and the implications for mobile device security.
Press
Dark Reading published an article titled "Hacking the Hackers: When Bad Guys Let Their Guard Down" on their threat intelligence section. Casey Ellis is quoted discussing how attackers can be caught when their operational security lapses, contributing perspective on adversary vulnerability and detection methods.
Press
Bugcrowd launched an open-source disclosure framework aimed at encouraging responsible vulnerability disclosure practices, as reported by Infosecurity Magazine. Casey Ellis, Bugcrowd's founder, led the initiative to provide organizations with standardized tools for managing security reports from researchers.
Press
CSO Online reported on a China-linked espionage campaign in which PurpleHaze and ShadowPad targeted over 70 organizations globally, including government and critical infrastructure entities, between June 2024 and March 2025. Casey Ellis provided analysis and context on the threat landscape and implications for cybersecurity defenses.
Press
SecureWorld published a report on Chinese state-sponsored hackers targeting SentinelOne as part of a broader espionage campaign against critical infrastructure and supply chains. Casey Ellis commented on the incident's implications for endpoint security vendors and the importance of transparency in disclosing attacks on security companies.
Press
CyberScoop published an article examining security risks in AI-generated code and industry responsibility for mitigation. Casey Ellis discusses approaches to addressing vulnerabilities introduced by vibe coding and the steps needed to make the practice more secure.
Press
A SC Media article from June 2025 discusses a critical Cisco IOS XE vulnerability rated 10.0 in severity. Casey Ellis is quoted providing perspective on the urgency and implications of the flaw for affected organizations.
Press
Dark Reading reported on the rising exploitation risk for a critical Cisco vulnerability. Casey Ellis commented on the threat landscape and the factors driving increased weaponization of the flaw in active attacks.
Press
Indian police arrested a cybercrime gang that replicated a Myanmar-based business model for financial fraud, as reported by Dark Reading. Casey Ellis provided commentary on the operation's tactics and how such cross-border schemes adapt criminal methodologies across regions.
Press
NIST's LEV Equation to Rate Chances a Bug Was Exploited, published by Dark Reading, explains a new NIST framework for assessing the likelihood that a vulnerability has been actively exploited. Casey Ellis is quoted discussing the practical implications of the LEV equation and its application to vulnerability prioritization in real-world security operations.
Press
A Security Boulevard article examines allegations that Roblox secretly tracked children's data without consent, potentially violating federal privacy law. Casey Ellis discusses the privacy implications of the tracking practices and their broader significance for platform accountability.
Press
Dice Insights published an article on offensive security skills that cybersecurity professionals need to develop. Casey Ellis discussed how offensive security is becoming increasingly important as attacks and AI reshape the threat landscape and career opportunities for security professionals.
Press
TeleMessage's Signal app vulnerability was added to CISA's list of exploited flaws, according to reporting by SC Media. Casey Ellis commented on the significance of the vulnerability being tracked by federal authorities and its implications for enterprise security practices.
Press
Hackread reported on CISA's addition of a TeleMessage vulnerability to its Known Exploited Vulnerabilities list. The article covers the security agency's ongoing efforts to track and document actively exploited flaws affecting critical infrastructure and government systems.
Press
Security Magazine reported on a lawsuit alleging Roblox tracks children's data without parental consent. Casey Ellis characterized the case as highlighting the "trust tax" companies incur when mishandling user data, noting how consent complexity in digital environments may establish new legal precedents.
Press
CSO Online reported on CISA's addition of a Telemessage vulnerability to its Known Exploited Vulnerabilities list. Casey Ellis characterized the incident as a classic supply chain risk, noting that vendor security trust is essential and highlighting how a single vulnerability can have cascading impacts across dependent systems.
Press
SC Magazine published Casey Ellis's perspective on Netflix's "Zero Day" series and its portrayal of incident response. Ellis notes that the series accurately captures the high-pressure environment of major incidents and the complex coordination required among technical teams, leadership, and government agencies.
Press
Dark Reading published an article examining how vulnerability exploitation tactics are changing in 2024-25. Casey Ellis argues that defenders have recently gained advantage through expanded bug bounty programs, improved disclosure practices, and more proactive vendor security efforts.
Press
CIO Dive reported on a bipartisan bill to renew the Cybersecurity Information Sharing Act. Casey Ellis stated that the legislation is crucial for reinforcing the public-private trust framework essential for national cybersecurity.
Press
HackRead published an article on April 16, 2025, explaining slopsquatting, an attack that exploits inaccuracies in AI-generated code. Ellis outlines how the threat exploits developer trust in AI tools and underscores the importance of verification practices for generated code.
Press
Forbes published an article on the potential disruption of the Common Vulnerabilities and Exposures program and its impact on cybersecurity. Casey Ellis describes the CVE program as a common language for vulnerabilities that prevents chaos and enables coordinated defense across the industry.
Press
SC Magazine published an article on April 8, 2025, examining Xanthorox, a malicious AI tool designed to enable criminal activity without requiring jailbreaks. Casey Ellis discusses how Xanthorox demonstrates AI's dual-use potential, noting that while AI democratizes technology, it simultaneously reduces the technical barriers required to execute sophisticated cyberattacks.
Press
An SC Magazine article covers an NSA advisory warning about fast-flux DNS evasion techniques as a national security threat. Casey Ellis describes the method as a shell game that conceals malicious servers and points to how cybercrime has become industrialized.
Press
Forbes published "Hack OpenAI And Win $100,000? What You Need To Know" on March 29, 2025, examining OpenAI's bug bounty initiative. Casey Ellis comments that the program represents a positive commitment to security and transparency that strengthens trust with users and security researchers.
Press
Forbes published an article on the surge in ransomware attacks and the security vulnerabilities enabling them. Casey Ellis attributes the increase to threat actors leveraging AI for sophisticated phishing campaigns and developing techniques to circumvent multi-factor authentication, while advocating for stronger defensive measures.
Press
Expert Insights published an interview with Dave Gerry and Casey Ellis from Bugcrowd at RSA 2024 on tackling AI bias. The two discuss how AI bias assessments can strengthen enterprise confidence in generative AI tools and large language models.
Press
CBS News Bay Area reported in May 2024 on the RSA Conference at San Francisco's Moscone Center, which drew over 40,000 attendees from 130 countries. The article covered the annual gathering of cybersecurity experts and entrepreneurs focused on industry trends and developments.
Press
A Dark Reading article details a critical authentication bypass vulnerability in Cisco small-to-medium business routers with publicly available proof-of-concept exploit code. Casey Ellis contributed security analysis and context on the vulnerability's impact and remediation guidance for affected organizations.