Elad Yoran

Mobile networks are vulnerable to attack and surveillance can take place from anywhere in the world with relative ease.

Commercially-available, end-to-end encryption software application solutions address cyber threats from advanced nation-state actors by securing mobile voice communications from eavesdropping. Existing mobile security frame-works, such as explained in a recent Department of Homeland Security (DHS) study, provide a good base for analysis, but are shown to have dealt insufficiently with the threat to mobile voice and corresponding encryption-based safeguards. A… Show more

Commercially-available, end-to-end encryption software application solutions address cyber threats from advanced nation-state actors by securing mobile voice communications from eavesdropping. Existing mobile security frame-works, such as explained in a recent Department of Homeland Security (DHS) study, provide a good base for analysis, but are shown to have dealt insufficiently with the threat to mobile voice and corresponding encryption-based safeguards. A secure cyberspace thus requires increased attention to securing voice in addition to data when using mobile devices Show less

The mobile industry faces serious risks and needs additional important cybersecurity innovation.

There are several security and business-related factors that companies should consider before adopting WhatsApp as a communications tool.

As the world gears up for the PyeongChang 2018 Olympic and Paralympic Winter Games athletes, volunteers, sponsors, media, and spectators will bring with them their personal, business, or dual use electronics to document the events, work remotely, and communicate. Connecting mobile devices to a foreign telephone network introduces a variety of risk for communications security.

The New York Department of Financial Services 23 NYCRR 500 Cybersecurity Requirements for Financial Companies went into effect on March 1st of this year.  While the requirements are New York based, given the state's concentration of financial services firms, the regulation reaches far beyond the Hudson River.

It appears that Congress is waking up to the risks posed by systemic flaws in the American telecommunications network, and is demanding more action from the executive branch in securing that network and protecting consumer privacy. This is a positive development that should be encouraged.

Vault7 demonstrates the vulnerability of devices and software, and the CIA's ability to use these vulnerabilities to gain control of smartphones and other devices

A description of the tremendous value in metadata and that it can often be as valuable (or dangerous, depending on your perspective) as the actual underlying data.

Threats evolve as technology advances. Here are some thoughts on risks and staying safe during the Olympic Games in Rio

The public safety versus privacy debate regarding cybersecurity and end-to-end encryption has entered the mainstream of society and jurisprudence.

Phone call, a killer application? Think about it. Phone calls are used for all types of conversations, including those too sensitive to put into writing. Most people assume that their calls are fleeting, and other than a time stamp, do not have a record. But any communication, whether data-driven or voice-based, is high in value to the adversaries who should not have access to it.

Four key security scenes and encryption lessons from Ghostbusters

In an age of pervasive government data mining and surveillance of the “cloud” can attorneys responsibly entrust client information to storage or transmission in the cloud?

At a crossroads of generational shifts in computing and security threats can Microsoft adapt?

Once data is in the cloud an organizations ability to control who can do what with that data is eliminated. To control data in the cloud it must also be encrypted "in use".

Microsoft encryption tools focus solely on security, and not on the underlying issue that's putting customer data at risk in the first place – control.

What you need to know to secure and control your data

For cloud computing to grow, we need a balance between individual privacy and control of data, and the government's ability to fight crime and terrorism. Persistent encryption may be the answer.

Video of the Fox Business Program "Firewall" discussing cloud computing and security

There is little doubt, however, that the roll-out of the Affordable Care Act's website Healthcare.gov leaves something to be desired. Since its launch, there have been hundreds of bugs as well as hacking attempts and security warnings. There are lessons, here, for enterprises as they consider a move to the cloud.

Companies can no longer discount the risk of losing control of confidential corporate data in the cloud. Government data mining is here to stay, in one invasive form or another.

Video - Interviewed on BloombergTV

Quoted in this article by Chris Paoli

Quoted in this article by TJ Keitt

Video - Interviewed on Fox Business Network

Analysis of Security Innovation in the US

Video - participated in this panel on the cyber security threats facing the country

Video - Interviewed about the code war threatening our cyber security