To get in touch about speaking at your event, email [email protected]
Media Packet · Press
853 items
77 items · 2019
Press
A GovTech blog post from December 2019 compiled twenty security predictions for the coming year from industry practitioners. Casey Ellis contributed a forecast on how security testing would evolve in 2020, examining anticipated shifts in vulnerability identification and remediation practices.
Press
A Journal of Cyber Policy article reports on Visa's warning about cybercriminals scraping payment card details from gas pump terminals. Casey Ellis provides expert commentary on the threat and its implications for payment security infrastructure.
Press
Readers Digest published an article on digital security fundamentals that most Americans lack in December 2019. Casey Ellis explains how to verify website security through simple steps like checking for HTTPS protocols.
Press
CIO Dive reported on the reintroduction of a federal "hack back" bill that would allow companies to conduct offensive cyber operations against attackers. Casey Ellis raised concerns about the proposal's potential for unintended consequences and blind spots in its implementation.
Press
Forbes published a compilation of 141 cybersecurity predictions for 2020 from multiple industry experts on December 3, 2019. Casey Ellis contributed his perspective on emerging cybersecurity trends expected to shape the year ahead.
Press
Google announced a $1.5 million maximum bounty for remote exploitation of the Titan M2 chip through its Android Security Rewards program, as reported by Techworm. Casey Ellis commented on the significance of the increased reward tier for securing hardware-level security components.
Press
Silicon Angle reported on Google's expansion of its Android Security Rewards program to offer bounties up to $1.5 million. Casey Ellis analyzed how the increased rewards would influence participation and practices within the security research community.
Press
Information Security Buzz published expert commentary on the security risks jailbroken mobile devices pose to financial services. Casey Ellis contributed analysis on how device jailbreaking compromises security controls and increases vulnerability to financial fraud and malware exploitation.
Press
The Washington Post's Cybersecurity 202 column examines the arrest of two Coalfire penetration testers in Iowa and the concerns it raised within the security community. Casey Ellis comments on the legal ambiguity surrounding authorized security testing and its implications for professional security practitioners.
Press
A CNBC article covers the 2019 incident in which two Coalfire employees were arrested after completing a court-authorized penetration test at an Iowa courthouse. Casey Ellis is cited regarding the broader security testing practices and the importance of clear authorization protocols in vulnerability assessment work.
Press
CyberScoop's Securiosity podcast episode explores insider threats through recent events and mitigation approaches. Casey Ellis discusses the insider threat landscape and strategies organizations can deploy to address this security challenge.
Press
Bugcrowd announced its Attack Surface Management platform in an article published by Tech Times on October 31, 2019. Casey Ellis commented on the platform's growth and Bugcrowd's record bug bounty payouts during a single week.
Press
Channel Futures published a cybersecurity roundup covering product announcements and developments from Splunk, SonicWall, Bugcrowd, and Exabeam. The piece included coverage of Bugcrowd's launch of a new asset inventory and management solution designed to help organizations track and manage their digital assets.
Press
An SC Magazine article reports on voting equipment vendors requesting details from DEF CON's Voting Machine Hacking Village about establishing vulnerability disclosure programs. Casey Ellis contributed perspective on structuring effective disclosure processes for the election infrastructure sector.
Press
Dark Reading published an article on Bugcrowd's expansion into IT asset discovery with a new platform to help companies identify their attack surface. Casey Ellis, Bugcrowd's founder and CTO, discusses the company's strategic move into this market and its implications for vulnerability management.
Press
Journal of Cyber Policy published an article on the crowdsourcing model in cybersecurity in October 2019. Casey Ellis contributed insights on how organizations can leverage a global community of hackers to identify and address security vulnerabilities at scale.
Press
The Financial Times published a feature on ethical hacking and bug bounties, examining the economics of security research platforms. Casey Ellis discusses how bug bounty programs create incentives for security researchers to identify vulnerabilities in critical infrastructure systems.
Press
Google disclosed that Triada backdoors were pre-installed on certain Android devices, according to a report covered by SearchSecurity. Casey Ellis commented on the supply chain security implications of the discovery.
Press
SearchSecurity reported on the U.S. Air Force's plans to expand its bug bounty program following a successful pilot with Bugcrowd. Casey Ellis, Bugcrowd's founder and CEO, commented on the pilot results and the Air Force's interest in scaling crowdsourced security efforts across its operations.
Press
A Dark Reading article examines the escalation of cryptomining attacks and their shift toward establishing persistent access on compromised systems. Casey Ellis discusses the technical sophistication of these attacks and their implications for enterprise security infrastructure.
Press
Information Security Buzz published expert commentary on Skidmap, a Linux malware strain used for illicit cryptocurrency mining. Casey Ellis provided analysis of the malware's capabilities and threat implications for systems running Linux environments.
Press
The Parallax published an article examining how bug bounty programs enable security researchers to build sustainable careers and businesses. Casey Ellis discusses the economic model of bug bounties and their role in creating opportunities for independent security professionals and entrepreneurs.
Press
CyberScoop published an article examining Apple's $1 million bug bounty program in the context of a widespread iOS hacking campaign attributed to China. Casey Ellis is quoted discussing the economics of vulnerability disclosure and the competitive pressure Apple faces from exploit brokers offering substantial payments for zero-day exploits.
Press
ExecutiveBiz published an article in August 2019 examining industry perspectives on network visibility gaps in federal IT infrastructure. Casey Ellis contributed insights on the need for improved visibility mechanisms within government technology systems.
Press
The Fifth Domain published an article from Black Hat 2019 examining strategies for strengthening government cybersecurity posture. Casey Ellis contributed perspective on how federal agencies can enhance their defensive capabilities and security practices.
Press
Dark Reading published an analysis of Apple's expanded bug bounty program and its large potential payouts alongside associated risks. Casey Ellis provided commentary on the incentive structure and implications of Apple's approach to vulnerability disclosure and researcher engagement.
Press
Federal News Network reported that the U.S. Air Force's cloud environment contained 54 vulnerabilities before security researchers identified them through the service's bug bounty program. Casey Ellis commented on how the program successfully enabled proactive discovery of these flaws rather than waiting for malicious actors to find them.
Press
An August 2019 article in The Fifth Domain examines strategies for the government to attract and retain cybersecurity personnel. Casey Ellis contributes commentary on workforce retention approaches in the federal cyber sector.
Press
Bleeping Computer reported that Bugcrowd paid out over $500,000 in bug bounties to researchers in a single week, marking a significant milestone for the platform. Casey Ellis, Bugcrowd's founder and CEO, commented on the achievement as a reflection of the growing security researcher community's effectiveness in identifying and reporting vulnerabilities.
Press
TechTarget reported on Apple's expansion of its bug bounty program to include macOS and announcement of up to $1 million rewards for critical iOS vulnerabilities. Casey Ellis commented on the significance of Apple's increased commitment to security research incentives and vulnerability disclosure.