Paris set to host difficult negotiations on tackling commercial hacking tools

A joint Franco-British initiative, the Pall Mall Process, seeks to introduce a voluntary code of practice governing commercial cyber intrusion capabilities (CCICs), including export regulation, domestic oversight, vulnerability equity processes, procurement bans on irresponsible vendors, and penalties for misuse. The effort faces participation challenges from major exporting states (e.g., Israel, India, Austria, Egypt, North Macedonia), though there are early signs of engagement by Israel and NSO Group. Uncertainty remains over how many attendees in Paris will sign the document, with observers warning that failure to progress could signal collective fatigue.