Sources: Microsoft and Google haven't been contacted by Assange, two days after he said WikiLeaks would share details of CIA hacking tools with tech firms
It's been two days since Julian Assange promised Wikileaks would hand over more information on Central Intelligence Agency (CIA) hacker tools to tech giants.
Context & Ripple Effects
The gap matters because of what came just before it: WikiLeaks' CIA document cache focused on compromising devices rather than apps — a framing that flattered encrypted messengers like Signal and WhatsApp while leaving device makers exposed. Assange's pledge to hand tech firms more detail was the announced next step, and two days of silence from Microsoft and Google suggests that step hasn't started.
There is also history coloring how these firms receive overtures from WikiLeaks: back in 2015, Google handed over three WikiLeaks staffers' emails to the US government, a episode Assange publicly protested. Any outreach now lands on companies that have already seen their dealings with WikiLeaks become a law-enforcement matter.
First-order effects
- Microsoft and Google's security teams are still waiting for the promised details on CIA hacking tools, leaving them unable to begin assessing whether their platforms are affected.
- Assange's public commitment goes unfulfilled on his own timeline, putting pressure on WikiLeaks to show the handover is real rather than rhetorical.
Second-order effects
- WikiLeaks' answer, per subsequent reporting, was to ask tech firms to agree to conditions before receiving the zero-day details — converting a disclosure into a negotiation and forcing each vendor to weigh legal and political exposure before accepting anything.
- The standoff hands the initiative to whoever moves first: a firm that engages on WikiLeaks' terms risks the same government scrutiny Google faced in 2015, while one that refuses can be cast as indifferent to its users' security.
Third-order effects
- If the pattern holds, critical vulnerability information reaches major vendors through leak-mediated bargaining rather than coordinated disclosure, making WikiLeaks an unofficial gatekeeper over which companies learn about exploits first.
- That structure deepens the trust gap between Silicon Valley and the intelligence community, pushing device makers toward defensive assumptions — as the cache itself showed, endpoint compromise rather than broken encryption is the threat model they must plan around.
The trend: Disclosure of state hacking tools is shifting from direct responsible-disclosure channels to negotiated exchanges between leak organizations and the vendors they target.