THE HAGUE — The European Commission should act “as soon as possible” to give clear guidance on U.S. sanctions against the International Criminal Court, its top administrative official told POLITICO in an interview.

Osvaldo Zavala Giler, who oversees the day-to-day functioning of the Hague-based court as the institution’s registrar, said his job became “preparing for sanctions” as the White House imposed an escalating regime of restrictions against it.

The Trump administration targeted prosecutors and judges from the court first in February 2025 before announcing blanket sanctions on Oct. 9 this year. The EU has repeatedly backed the Court against Washington, but it has resisted calls to activate a mechanism that would forbid firms from complying with U.S. laws.

That has agonized senior figures in The Hague. Zavala Giler said the Commission’s “lack of clarity” left private companies and NGOs in the dark over whether they should comply with sanctions decided by Washington — and what risks they face if they don’t.

Zavala Giler’s call to the Commission adds to pressure from EU lawmakers for a swift response after the Oct. 9 announcement. Kallas told the European Parliament on Tuesday that Brussels would use the next few months “to open dialogue” on the issue. The new sanctions are set to take effect in April next year.

“What I would hope is that the space for dialogue is not interpreted as a space for waiting to protect the court,” Zavala Giler said, who spoke from his glass office on the eve of a visit to the Court’s headquarters by the EU’s top diplomat, Kaja Kallas.

Damocles sword

Anticipating sweeping sanctions, the Court spent six months abandoning U.S. tech providers and moving to an open-source software environment, and 20 months to make its financial transactions dollar-proof. That move has been a huge undertaking for Zavala Giler’s team, he said.

The Court initially deepened its reliance on U.S. technology after it was hit by a massive cyber attack in 2023, but what seemed a solution at that time became a problem in the face of sanctions. Even though the current regime includes a carveout for telecommunications, there is no guarantee it will remain the case.

“It becomes a sort of Damocles sword on top of our head that could be revoked at any time,” Zavala Giler said. “I cannot count on U.S. tech companies anymore.”

U.S. platforms operate as entire ecosystems, offering all-encompassing solutions under a single contract. To do without them, “you need to start creating your own architecture and systems that need to speak to each other,” the registrar said.

Financial autonomy was equally hard to achieve. The Court mapped all its suppliers’ transactions to ensure there was no U.S. nexus, meaning that no U.S. person, bank or currency is involved in a payment. “We made all of our staff members have European bank accounts. It was a very detailed process that we had to do, person by person, company by company, making sure that the contracts were in euros,” the registrar said.

The Court also went from working with tens of banks to only “a few,” since only a handful of institutions are comfortable with dollar-proof payments.

Chilling effect

That situation is likely to worsen without clear guidance from EU countries and the Commission. As Zavala Giler put it, “if the International Criminal Court cannot transact in Europe, in euros within the SEPA zone with no U.S. nexus, then there is a bigger question about European financial sovereignty.”

The Court has long called the EU to use a legislative shield — known as blocking statute — that would forbid EU firms from complying with U.S. sanctions. The request was backed by dozens of lawmakers at the European Parliament, which incidentally awarded the court its human rights Sakharov Prize on Thursday.

The blocking statute “becomes an instrument to reassert the minimum space that should not be affected by unilateral extraterritorial sanctions … that minimum space should be, at the very least, the eurozone,” Zavala Giler said. Even without it, the court needs “the reassurances that, at least within the eurozone, [it] can continue to operate,” he added.

So far, however, the Commission has taken a cautious approach, choosing dialogue with the U.S. as a way of “buying time,” as a EU diplomat put it to POLITICO.

In a balancing act, EU heads of state and government backed Brussels’ diplomatic effort at their summit last week, while also committing to do whatever is needed to support the Court.

“I hope that now that the European Council has opened this door, the Commission will feel more comfortable in taking an extra step. And at the very least, providing some kind of clear guidance,” Zavala Giler said.

As an intermediate step, the registrar suggested the use of “comfort letters” reassuring firms that they should not comply with the U.S. measures.

Zavala Giler stressed that sanctions were not only a matter to address for banks and tech operators, as the current uncertainty has already affected NGOs working with the Court. NGOs play a critical role in supporting the work of the Court, for instance “to provide reparations for victims in Uganda” or “to assist the work of the court in providing assistance to victims in Ukraine.”

“This has created an enormous chilling effect,” he said. “They don’t know if they have the legal protections or not, to continue supporting the work of the court.”

The registrar’s office overlooks the moat circling the court’s six towers across the compound’s 46,000 square meters. In one of these buildings, the trial of former Philippine President Rodrigo Duterte over alleged crimes against humanity is due to begin next month. Reporters who will cover the proceeds won’t be allowed to use their phones — only paper and pen.

It is Zavala Giler’s job to oversee this huge institution, which relies on secure communications, cross-border funding for investigations and the contribution of many NGOs.

“This court has for victims the promise of the never again,” Zavala Giler said.

BRUSSELS — Centrist parties backing European Commission President Ursula von der Leyen clashed at Thursday’s European Parliament plenary over whether to hold artificial intelligence firms accountable for harm.

The EU executive had considered specific liability rules for AI in 2022, but withdrew these last year as part of the EU’s major simplification effort to make the bloc more competitive.

“To withdraw the AI liability directive was a big mistake,” said Alex Agius Saliba, a Maltese vice-president of the Socialists and Democrats, part of the majority coalition. “We strongly urge the Commission to bring forward this important piece of legislation.”

Thursday’s plenary debate, in which discussions centered on a global framework to regulate AI, showed strong tensions inside Europe between the centrist coalition backing von der Leyen. While the center-left pushed for new rules to address a series of AI-fueled hacking incidents, the center-right doubled down on simplification to ensure European companies can compete in the global AI race.

Socialist and Green lawmakers called for a new AI Liability Act in a bid to hold AI companies liable for harm done by their models, as with more traditional manufacturers’ products.

OpenAI CEO Sam Altman floated a similar idea for a new liability framework for companies whose models are capable of autonomous cyberattacks in the wake of this summer’s hack by autonomous OpenAI agents into another AI platform, Hugging Face.

“If a phone charger explodes in your house, we never call it innovative. We call it cheap, dangerous junk, and we hold the manufacturer liable for damages,” said Dutch Green European Parliament lawmaker Kim van Sparrentak.

She urged the Commission to “stop scrapping rules to please [U.S. President Donald] Trump” and come up with a “strong new liability act that covers the testing and the development of AI.”

The debate quickly descended into a fierce back-and-forth between key AI-focused lawmakers from von der Leyen’s centrist coalition.

“It feels [to] me like the Greens and the Socialists are living [on] a completely different planet than the rest of us when they are screaming for more regulation,” said Swedish center-right lawmaker Arba Kokalari, who led the work on the AI omnibus, which delayed a core section of the EU’s flagship AI law.

She said the EU already had a comprehensive regulatory framework — the AI Act — of which some parts are not even into force, and said the EU should focus on avoiding falling behind in the global AI race instead. She called for “less bureaucracy, more private investments, better access to data and computing infrastructure.”

Italian Social Democrat Brando Benifei, who led work on the AI Act in the previous mandate, snapped back that Europe should lead with new liability rules, “or we will need to wait for the next blogpost of a CEO to know what is happening.”

German Green lawmaker Sergey Lagodinsky also fired back at Kokalari: “What planet do you live on? Not on the planet where [AI] agents break out.”

International Partnerships Commissioner Jozef Síkela pointed out at the end of the debate that the rules were withdrawn because EU countries and European Parliament lawmakers couldn’t reach an agreement on them.

PARIS — The French government has called on leading online marketplaces such as Vinted and eBay to bar listings that include goods stolen during this weekend’s looting spree across France. 

“We expect these platforms to remove the listings in question without delay,” France’s Digital Affairs Minister Anne Le Hénanff wrote Monday in a post on X. “They will also be required to work closely with public authorities so that those reselling potentially stolen goods can be identified and prosecuted.”  

Le Hénanff and fellow cabinet members called a 7 p.m. meeting with representatives of Vinted, Amazon, eBay, Meta, and TikTok, as well as France’s leading independent reselling platform Leboncoin. 

During a government press conference earlier in the day, Minister for Small Businesses Serge Papin said officials were working on “coordination between investigators and online platforms” to identify the individuals behind suspicious listings. A specific protocol is expected to be put in place, according to a government source speaking to POLITICO. 

A spokesperson for Vinted France said the sale of stolen goods, or soliciting the purchase of such goods, is strictly prohibited on the platform. “We have a zero-tolerance policy on this matter,” said the company representative. “Since this past weekend, our teams have taken immediate action to identify and remove listings that may involve stolen goods, and we have stepped up our monitoring of suspicious listings.”

Other platforms weren’t immediately available for comment.

The discussions with the reselling websites are also likely to touch on longer-term questions around platform responsibility and the monitoring of illicit trade within the EU’s digital marketplace. 

The issue of looted goods sold on online marketplaces “is a new dimension and the Commission is happy to look at it in collaboration with French authorities,” European Commission spokesperson Thomas Regnier told POLITICO.

French Prime Minister Sébastien Lecornu has instructed local authorities to enact “partial curfews” Monday evening to prevent further looting and rioting. Papin said a “special support fund” will be set up to provide financial assistance to the estimated 3,000 local businesses affected by the weekend’s unrest. 

Eliza Gkritsi contributed to this report.

As Europe plans its response to the neurological disease burden, a fundamental measurement gap is being overlooked — and the cost of ignoring it is being felt.

A briefing requested earlier this year by the European Parliament’s Committee on Public Health (SANT) put it plainly: neurological diseases are one of Europe’s most urgent and rapidly expanding health, social and economic challenges. Published in February 2026, it calls for a coordinated European plan linking prevention, early diagnosis, research and innovation.¹ But before Europe considers what that plan should look like, a foundational question demands attention: are we measuring the right things?

Multiple sclerosis (MS), a chronic, progressive disease of the central nervous system that disrupts communication between the brain and the body, offers a revealing case study. Consider a woman in her mid-30s, working, raising a family, managing what her neurologist calls “stable” MS. She has not slept properly in years, her memory has been slipping and she is cutting her hours at work. Her last clinical note reads: “No change.” On paper, she is stable, but in reality she is anything but.

Her story is not unusual. According to research commissioned by Sanofi^*, the gap between what health systems measure and what people with MS experience may be costing individuals, families and economies more than we realize.³

The stakes for Europe

Over 3 million people globally live with MS and Europe has the highest prevalence, at 133 per 100,000 people.^2,3 The condition strikes primarily during prime working years, meaning hundreds of thousands of people are navigating a progressive, unpredictable disease at precisely the point when inadequate support is felt most acutely.³

That support begins with measurement. And right now, the tools used to assess MS in clinical practice do not fully capture what people with the disease experience.³

The consequences extend far beyond the clinic: 82 percent of people with severe MS rely on unpaid family caregiving, yet this burden rarely appears in standard health data or policy design.³ When the full impact of disease is not measured, health systems can underestimate need, delay support, and overlook the wider effects on work, welfare and family life.³

The measurement gap

The Expanded Disability Status Scale (EDSS), the primary tool used to measure MS disability, was developed in 1983 to assess walking ability. We now know that MS affects far more than mobility. Fatigue affects 94 percent of people with MS, while 75 percent report cognitive difficulties, but both are absent in the EDSS assessment.³ In a field where clinical consensus is rare, seven in ten neurologists agree: a more comprehensive approach is needed.³

Growing recognition of smouldering neuroinflammation has made the need for new methods of quantifying MS progression increasingly urgent. This slow, chronic disease activity can persist even when a patient appears clinically stable, with effects that are subtle, cumulative and easy to miss until significant damage has already occurred.⁴

This is why Sanofi initiated the development of the Smouldering Associated Worsening (SAW) Index⁺. The SAW Index Study — led by an international steering committee of leading MS clinicians, researchers and patient advocates — is due to complete in 2027. Based on hundreds of hours of in-depth qualitative research with people with MS, the goal of the SAW Index is to provide neurologists with a comprehensive measurement framework that bridges the gap between lived experience and what clinical tools are currently able to detect.

According to the European Multiple Sclerosis Platform, people with MS experience an average of 14 symptoms within the first five years of diagnosis, with fatigue, sensory problems, sleep disturbances, cognitive impairment and balance problems among the most common.⁵ These are precisely the experiences the SAW Index is designed to surface, replacing static labels like “moderately affected” with measurement metrics grounded in the experience and words of people with MS.

The cost of this gap

These aspects of MS can be challenging to quantify and are associated with substantial societal and economic burdens. Lifetime productivity loss per person with MS ranges from €394,000 in France to €668,000 in Germany.³ The cost profile shifts significantly as the disease progresses: in mild MS, direct healthcare costs dominate; in severe MS, indirect costs become the primary driver.³ Indeed, lost wages, absenteeism, early retirement, disability payments and the growing burden on unpaid carers outweigh medical costs in many countries, placing growing long-term pressure on social insurance and disability systems.³

Early identification of progression could change that trajectory, extending years of employment, preserving household income, and reducing long-term dependence on disability and social benefits.^3,6 That is a cost-avoidance opportunity current measurement frameworks are missing.

Progress in motion

There is no single fix, but there is momentum.

MS care has advanced significantly in recent decades: diagnosis is happening earlier, treatment options have expanded and the focus is shifting from relapse control alone to slowing long-term disability progression.⁷ Furthermore, there is growing recognition of the importance of cognition, mental health, rehabilitation and the day-to-day realities that shape whether people living with MS can remain independent and active.⁸

The challenge now is to ensure policy keeps pace with that progress, and better measurement is part of the answer. If Europe wants health spending to deliver lasting value, it should see these improvements not as costs to be managed, but as investments in independence, participation, productivity and more sustainable health systems.

Time to act

The European Parliament’s SANT Committee has called for a fully funded European neurological health plan — one with the scale and ambition of Europe’s Beating Cancer Plan, aligning health, research and societal action in a unified framework.¹ MS offers a clear and immediate test case for what that ambition looks like in practice.

But ambitious plans require accurate data. If Europe is serious about a coordinated response to neurological disease, getting measurement right is not a secondary concern; it is the foundation on which everything else depends.

The people living with MS across the continent cannot wait for the tools that measure their disease to catch up with the science that understands it. Neither should policymakers.

^*Research commissioned by Sanofi. All editorial control retained by Economist Impact.
⁺Sanofi initiated and funds the SAW Index Study.

---

References

1. European Parliament. Strengthening Brain Health: Policy Recommendations to Tackle the Rising Burden of Neurological Diseases. Available at: https://www.europarl.europa.eu/telastatic/cmsdata/302850/Briefing_Strengthening%20Brain%20Health_EN.pdf. Accessed: September 2026
2. MS International Federation. MS Atlas. Available at: https://atlasofms.org/map/global/epidemiology/number-of-people-with-ms. Accessed: September 2026
3. Economist Impact. Measuring what matters: Bridging the gap between disability impact and economic burden in multiple sclerosis. Available at: https://impact.economist.com/health-society/measuring-what-matters. Accessed: September 2026
4. Scalfari, A, et al. (2024) Smouldering-Associated Worsening in Multiple Sclerosis: An International Consensus Statement on Definition, Biology, Clinical Implications, and Future Directions. Ann Neurol 2024;00:1. DOI: 10.1002/ana.27034.
5. European Multiple Sclerosis Platform. (n.d.). Impact of multiple sclerosis symptoms (IMSS) [Fact sheet]. Accessed: October 2026
6. Cicely Dudley, Victoria Donnaloja and Karen Steadman. A guide for Health Care Professionals to have Conversations on Work with People with Multiple Sclerosis. Available at: https://emsp.org/wp-content/uploads/2017/02/Ready-for-Work-Employment-Guide.pdf. Accessed: September 2026
7. Montague T, Drummond J, Ng K, Parratt J. Advancements in multiple sclerosis. Intern Med J. 2025 Jun;55(6):895-904. DOI: 10.1111/imj.70023.
8. Giovannoni G, et al. MS care: integrating advanced therapies and holistic management. Front Neurol. 2024 Jan 30;14:1286122. doi: 10.3389/fneur.2023    

---

Disclaimer

POLITICAL ADVERTISEMENT

• The sponsor is Sanofi.
• The political advertisement is linked to driving action in how neurological disease is measured in the EU (using MS as a case study) and driving action around the briefing requested by the SANT committee aimed at strengthening brain health (Policy Recommendations to Tackle the Rising Burden of Neurological Diseases).

More information here.

French presidential candidate Gabriel Attal reiterated his call to grant the government power to selectively block access to social media platforms to quell riots in the aftermath of widespread unrest across France over the weekend.

“You have young people at home who see their friends going out to loot, which gives the impression that they’re getting away with it; they see them on social media, and then they go out too,” Attal said in an interview with French radio station RTL.

Attal, a former prime minister who now leads French President Emmanuel Macron’s political party, said the measures must be “temporary” and “limited to the area where the riots are taking place.”

Saturday saw hundreds of thousands of protesters take to the streets nationwide across France, with students — who have been blockading schools in recent weeks to call for better study conditions, more teachers and more funding — joining trade unions and members of the public to protest the cost of living. While many protested peacefully, scenes of extreme violence also played out across the country. According to the latest figures from the interior ministry, some 2,000 people were arrested during the turmoil.

During Attal’s tenure as prime minister in 2024, France blocked TikTok access to one of its overseas territories, New Caledonia, amid widespread protests there. But France’s highest administrative court ruled that this suspension constituted “a disproportionate infringement of rights and freedoms.”

It’s unclear whether Attal’s latest proposal would survive a judicial review given that over the summer, France’s Constitutional Council, which reviews the constitutionality of French legislation, blocked a bill seeking to ban access to social media for under-15s after finding the legislation disproportionately infringed on minors’ right to freedom of expression and communication.

Such internet restrictions are more commonly associated with countries like China, Iran, Russia and, more recently, India. These countries either have permanent blocks on certain social media platforms or have more recently restricted them during protest movements, with India and Iran going so far as to block internet access completely.

Klara Durand contributed to this report.

DUBLIN — The Irish capital, which doubles as Europe’s de facto tech capital, hosted two very different AI summits in the past week.

Most eyes were on the International AI Summit, the signature tech event of Ireland’s six-month presidency of the Council of the EU, where top brass from the world’s biggest tech firms discussed ways to harness artificial intelligence and minimize safety risks.

But the weekend before, a very different conversation was taking place at the Workers’ AI Counter Summit, as Ireland’s tech workers demanded a say in how the burgeoning technology reshapes the workplace and society.

Ireland’s lucrative tech sector has been rattled by waves of AI-driven layoffs — and the country’s fledgling tech union has seen an exponential spike in sign-ups from workers who are worried about their future.  

There’s an “awakening” happening right now among workers in Ireland’s tech sector, and a growing “awareness that they’re not bulletproof,” said Sinéad Gibney, a social democrat lawmaker who previously worked for Google.  

“I do think what we will see is that parts of roles will be automated, which means that people will be competing more heavily for the same roles,” she said. “They won’t have the same labor power and therefore we’re going to see a drop in quality of work, we’re going to see more zero-hour contracts, in more places than we already see it.”

The labor movement brewing in Ireland, where many of the world’s tech giants have their EU bases, is part of a wider trend among tech workers globally, who have seen their work disrupted by rapidly evolving AI.

Rise in layoffs

Ireland’s dedicated union for tech workers, the Digital and Techworker Alliance (DATA), has seen a five-fold increase in membership since it was first founded in 2023.  

In its first year and a half of existence, membership hovered around 270 people. In the past year-and-a-half, it’s jumped to more than 1,350 members, DATA organizer John Bohan told POLITICO.  He added that this number tends to spike around layoffs and other actions.

“The tech industry was founded on the idea that it would never have a union, because they’re making people rich, and treat them really well,” Bohan said.  “But post-Covid, workforce adjustments happened again and again, with layoffs and declining conditions in the sector. We started to see more people wanting to get organized around redundancies.”  

The spike in sign-ups coincides with a wave of layoffs in Ireland’s tech bubble (and the tech sector globally), as companies corrected pandemic-era overhiring, and diverted investment to AI.  

Ireland hosts the EU headquarters of most of the world’s largest tech companies, and more than 170,000 people are employed in the tech sector, according to the country’s statistics institute.

Social media giant Meta has roughly halved its workforce in Ireland since the pandemic, axing well over 1,000 roles to offset AI investment and boost efficiency. Separately, Meta subcontractor Covalen also announced massive layoffs earlier this year, cutting more than 700 people.  

Video-sharing platform TikTok announced this year it would shed around 300 Irish jobs, mostly from its trust and safety team, shifting the work to other countries, outsourced vendors or automated AI solutions.  

A report by the IMF earlier this year warned that Ireland’s labor market is “relatively more exposed” to AI than many advanced economies, partly due to its concentration of tech workers.  

The AI race is also creating new jobs on the Irish market – as AI firms like Anthropic and OpenAI are setting up Irish bases and trying to lure Big Tech workers with even bigger salaries.  

Amid the uncertainty and volatility of the AI boom, tech workers are turning to unions for the first time as a safety net. One tech worker who used to work in trust and safety at a big tech firm told POLITICO that there used to be a feeling that as a “pampered” tech worker you “can’t ask for your rights, because you already have it so much better.” 

But as layoffs continue and teams get leaner, workers in fields like trust and safety “now have to deal with these issues with fewer and fewer resources”, and face a “constant threat of being chopped,” the worker said.  

That’s causing an “undoing of a certain perspective that we have of ourselves as tech sector workers,” they said, “because of undeniable experiences that now put us in situations where we clearly see our rights being violated, even if we may have it so much or somewhat better than most people.” 

A different tech worker who currently works for Covalen told POLITICO that there is a sense that “if they believe they can replace you with AI, they will do that.”  

“All these Big Tech firms only care about profit, and what I have realized is the Irish government protects that Big Tech capital [rather than workers],” the Covalen worker said. “But the question is, what’s the government going to do when the tech bros change their mind and move elsewhere?”  

Workers at the center

The speaker list at this week’s AI summit was a flex of the country’s strength as a tech hub, as top names from the world’s biggest companies like Google and Microsoft took to the stage.

Fionnuala Ní Bhrógáin, head of organizing and campaigning at Ireland’s Communications Workers’ Union (DATA’s parent union), was the only union voice on the line-up.

“The fact that 36 executives and industry bosses featured on the program, compared with just one trade union speaker — invited at the last minute after attention was drawn to the absence of workers’ voices — says a lot about the value the Irish government places on AI’s impact on workers,” she told POLITICO.

“The reality is that a meaningful conversation about AI’s future can only happen through genuine engagement with workers and collective bargaining,” Ní Bhrógáin added. “Without that voice, we risk deepening mistrust and resistance rather than creating the conditions for workers to shape these changes collectively.”

DATA organized its counter-AI summit the previous weekend, to put “workers at the center of the debate about power, AI, technology and the future of work.” 

The event cut through the “hype and futurism of politicians and industry figures to focus on the real present harms faced by ordinary workers and communities,” DATA’s Bohan said.  

The union is pushing for stronger legal protections for tech workers caught up in AI-driven layoffs in Ireland, including making it mandatory for employers to recognize unions during collective bargaining. It is also calling for a ban on cooling-off clauses that prevent laid-off workers from moving between Big Tech subcontractors.  

A spokesperson for Ireland’s department for enterprise told POLITICO in a written statement that the government is “committed to strengthening collective bargaining and industrial relations” and has published an action plan to do so between now and 2030.  

They said that employers already have to comply with obligations under Irish employment law, including consultation and notification procedures for collective redundancies, and workers who feel those rules have been broken can complain to the Workplace Relations Commission. 

Firefighting to future-proofing 

Naoise Ó Cearúil, a center-right Fianna Fáil lawmaker who chairs the AI committee, pointed out that while there have been high-profile job cuts in Ireland’s tech sector, “the actual net is that there has been an increase [in jobs], particularly over the past year and even five years.” 

According to Ireland’s central statistics office, total employment in tech and related sectors surpassed 177,000 in the second quarter of this year, up from around 144,000 at the same time in 2021.  

Ó Cearúil pointed out that many job losses were in trust and safety jobs like content moderation that are “very difficult mentally,” and now tech firms are able to “utilize AI and software to be able to do a lot of detection, rather than using humans.”  

He has called for a national program to be established, to support workers whose jobs are at risk due to AI and automation.  

A spokesperson for Ireland’s department of enterprise acknowledged that the country’s tech sector has “experienced significant adjustment in recent years,” but said the changes were generally part of wider global restructuring “rather than reflecting any Ireland-specific weakness.” 

They said the Irish government is currently focused on “ensuring workers and businesses are equipped to adapt to technological change through investment in education, training, lifelong learning and digital skills.”  

An Israeli surveillance technology firm has run a large-scale operation to infect mobile phones with spyware using online advertisements to hack the devices, researchers said on Thursday.

An investigation by the University of Toronto’s Citizen Lab and cybersecurity firm Confiant Threat Intelligence laid bare an ad-based infection technique developed by an Israeli company that researchers named “AdFection.” The hacks weaponized legitimate online ad systems for espionage purposes, allowing spyware manufacturers to connect to millions of devices and identify, track and target victims.

“Plugging into the online ads ecosystem provides the mercenary spyware industry a stealthy delivery system,” said Bill Marczak, senior researcher at The Citizen Lab. He said the findings were “surely just the tip of the iceberg” of how online ads are abused for espionage.

Researchers discovered critical details of the hacking tools by analyzing devices belonging to journalists and staff at the Al Jazeera media network, finding that 45 devices of journalists and staff were targeted and some infected with Israeli-made spyware known as Candiru.

At the heart of the hacking campaign is the Israeli company Discover-Tech that describes itself as an advertising business. Citizen Lab researchers said the company facilitated surveillance for commercial spyware operators. Its platform, called Controlium, allegedly allowed spyware makers like Candiru — which in 2025 was acquired by Integrity Labs — to identify, track and target devices by loading advertisements on websites and apps.

Discover-Tech and Integrity Labs did not immediately respond to a request for comment.

The scale is striking: An analysis of four billion advertising records found that Discover-Tech’s ads appeared across nearly 200,000 websites and mobile apps in dozens of countries over four months. Among the websites that featured the ads were institutional sites of NATO, the United Nations, the European Parliament, European Commission and Council of the EU.

The technique exploits real-time bidding — the automated system used by platforms such as Google to sell advertising space and target users. Rather than persuading victims to click a malicious link, attackers can exploit advertisements to identify and potentially infect devices without any interaction from the user — a technique known as “zero-click” infections.

Discover-Tech’s advertisements directed millions of devices to servers associated with Candiru, potentially enabling large-scale surveillance and reconnaissance, researchers said. That does not mean all those devices were infected.

Citizen Lab, based in Toronto, is a globally recognized research group that previously uncovered spyware scandals targeting Catalan political figures, a member of the European Parliament and the inner circle of murdered Saudi journalist Jamal Khashoggi.

The findings triggered calls for further investigation on Thursday. “The possibility that EU institutions have been exposed should set off alarm bells across Brussels,” said Hannah Neumann, a German European Parliament lawmaker of the Greens group. Neumann herself was the victim of a cyber-espionage operation by an Iranian hacking group.

“Europe cannot claim to defend democracy while leaving its own democratic institutions vulnerable to spyware,” Neumann said.

Jio plans to use most of its IPO proceeds to repay debt as it expands beyond telecom.