Experts debate global offensive cyber market
A panel of policy experts discusses the proliferation, regulation challenges, and geopolitical implications of the commercial offensive cyber capabilities market.
Sourceatlanticcouncil.org — open the original
What to check
- Applies to
- Whether this concerns you is not assessed; the names the report mentions are listed below.
This Atlantic Council 5x5 article compiles expert commentary on the global market for offensive cyber capabilities (OCC), covering companies such as NSO Group and Hacking Team that supply surveillance and exploitation tools to governments. The piece discusses how the commercialization of OCC lowers the barrier for states and other actors to acquire sophisticated cyber capabilities without developing them in-house, referencing the US Commerce Department's November 2021 Entity List additions and the EU's April 2022 inquiry into NSO Group's Pegasus spyware.
Experts debate the difficulty of regulating this market compared to traditional arms control, citing challenges such as jurisdictional ambiguity, the dual-use nature of vulnerability research, and the risk that overly restrictive controls in Western nations could push talent and capabilities toward less regulated or adversarial jurisdictions like Russia and China. The article is a policy discussion piece with no specific incident, malware, or IOC content, focusing instead on geopolitical and regulatory considerations around the OCC industry.
Mentioned in this report
Source reporting: https://www.atlanticcouncil.org/content-series/the-5x5/the-5x5-addressing-the-global-market-for-offensive-cyber-capabilities
Free public brief. Slack alerts on the vendors you run come with the paid plans, and a new account gets three days of them, no card.
What this brief leaves out
This page is the free tier: the write-up, the severity, the names. In the app the same report carries live profiles of the actors it names. The paid plans add the security research and news reporting the free tier leaves out.
It sits in a corpus of 16,445 reports from 149 sources, 666 of them written in the last seven days, and it grows through the day.
A new account starts with three days of all of it, no card, then keeps the government and CERT reporting free. Slack alerts are a paid-plan feature: name the vendors you run and Slack hears about the reports that touch them, not the rest of the week's. Nothing is charged unless you subscribe.
Create a free account What it costs