Zero-Day Diplomacy: How Much Should Governments Disclose?

In recent years we’ve seen hacks like Stuxnet (2010), the WannaCry ransomware (2017), and NSO Group’s Pegasus spyware. All of these relied on zero-day bugs – secret software flaws that no one has patched yet. Stuxnet used four unknown Windows bugs to...