Casey Ellis on How AI Is Reshaping Vulnerability Research and Patching
Summary
Sherrod DeGrupa interviews Casey John Ellis, founder of BugCrowd, on this video debut of the Microsoft Threat Intelligence Podcast. They discuss the "Vulnpocalypse," exploring how AI accelerates vulnerability discovery for both elite researchers and newcomers. The conversation covers coordinated disclosure challenges, the waning altruism in bug bounties, and the rise of "vibe crime" as lower barriers enable chaotic threat actors.
Topics discussed
Introduction and guest Casey John Ellis
Is the Vulnpocalypse here yet?
AI's impact on elite vs. novice researchers
Vulnerability disclosure policies and noise
Evolution of hacker culture and incentives
Philosophy of responsible disclosure timelines
AI anxiety and the bug bounty economy
Bug bounty programs as fireproof safes
AI-assisted coding and new attack surfaces
Hacktivism, Scattered Spider, and chaos
Mental health and burnout in cybersecurity
Balancing AI utility with human connection
Utopian ideals for future security transparency
Listen ad-free on Castria