A proposed system intended to respond to the criticism that software security is context dependent, to minimize the cost of litigation, and to incentivize improvements in software security.

Law is the foundation of cybersecurity.

Only a binding multistakeholder legal framework can effectively regulate a legitimate and efficiently controlled market for spyware.

The fast-developing law of AI appears to be… risk regulation. But there is more to risk regulation’s toolkit than impact assessments.

Small-group cooperation and unilateral efforts to develop settled expectations around the use of national security AI are far more likely than an international regime analogous to nuclear arms control.

Technology companies are more active than ever in trying to stop hateful individuals, organizations, and movements from exploiting their platforms, but government and public pressure to do more is growing.