Inside the (Real) Zero Day Industry
A common image of the zero day industry—which provides non-public vulnerabilities to government agencies—is that of a wild west, with merchants selling hacking technology to whomever is willing to buy, including authoritarian regimes and adversaries of democracies. But there is another, much harder to cover section of the industry: companies that provide high end exploits and other tools to members of the Five Eyes, including the UK, US, Canada, and Australia. These companies keep a low profile, don't advertise at surveillance fairs, and keep any information on their public websites vague.