Cyber Warfare

In August 2022, I co-authored a post on the English case of Al-Masarir v. Saudi Arabia [2022] EWHC 2199, where Knowles J held that Saudi Arabia had no immunity under Section 5 of the UK State Immunity Act 1978 (‘UK SIA’) for its use of Pegasus spyware to hack the devices of Mr Al-Masarir,…

By 21 April 2026, Iran’s internet blackout had entered its fifty-third consecutive day, the longest nationwide internet disruption ever recorded (NetBlocks; IODA Iran shutdown report). Connectivity remained at approximately one per cent of pre-war levels. The shutdown was costing the economy an estimated $35–40 million per day in direct losses, rising to $70–80 million when indirect…

This article is cross-posted at Lawfare. On March 6, the Office of the Prosecutor of the International Criminal Court (ICC) published a draft Policy on cyber-enabled crimes, which is now open for public consultation. States and non-state actors are increasingly using advanced cyber tools, including artificial intelligence (AI), to commit or facilitate crimes against international law. This…

Recently, arguments have emerged that a universal source exists from which it is automatically possible to derive binding due diligence obligations for states in relation to all forms of activities. Specifically, these claims contend that international law imposes a general obligation on states to act with due diligence to prevent their territory being used for activity which harms…