Open Access

Roland Klein

• For centuries, export control regulations have accompanied the development of new weapon technologies. The revelations of the ‘Pegasus Project’ have put the question of whether and how to regulate the export of the new technology ‘cyberweapons’ in the limelight: Is the current international export control law up to the challenge of sufficiently regulating the proliferation of ‘cyberweapons’ or does it need an update? To answer this question, the blog post will, first, turn to the definition and relevance of ‘cyberweapons’. Secondly, international export control law is introduced as a possible measure to mitigate the risks posed by ‘cyberweapons’ against the backdrop of regulating the use of ‘cyberweapons’ or establishing a moratorium on its trade. Third, the blog post will assess the export of ‘cyberweapons’ in general and the export of Pegasus in particular within the current international export control framework. The current framework seems to touch upon partial aspects of the trade with ‘cyberweapons’. However, it stands to fear that it is not up to the task of sufficiently curtailing the proliferation of ‘cyberweapons’ and the associated risks, as it especially leaves the underlying problem of the trade with zero-day vulnerabilities untouched.