In plain terms
This article considers the legal implications of vulnerability disclosure in the context of international conflict. The author, Thomas Cross, explains that actors seeking to attack computer systems accumulate knowledge of security vulnerabilities to gain an offensive advantage, but that each exploitation of a vulnerability risks disclosing it to the victim, who may then patch the flaw or use the same knowledge to launch counterattacks against the original aggressor or other targets. The article uses this dynamic of exposure and re-use following widespread internet-based attacks as the starting point for examining the legal questions raised by vulnerability disclosure between adversarial state or non-state actors.