Allied Intelligence — 2026-10-07

Paragon CEO Speaks Publicly About Graphite Spyware Italy Abuse and Admits Lack of Technical Oversight

BLUFParagon's own admissions confirm its abuse-prevention model relies entirely on external detection, giving customers a functionally unsupervised window to operate spyware without accountability.

Paragon and REDLattice CEO Andrew Boyd told WIRED, as reported by Zetter Zero Day Graphite Spyware Speaks for First Time about Italy Abuse and Accountability" data-source="Zetter Zero Day" data-url="https://www.zetter-zeroday.com/company-behind-graphite-spyware-speaks-for-first-time-about-italy-abuse-and-accountability/" data-rt="secondary" data-otype="digital_news">1, that Paragon "fired" Italy's two intelligence customers after WhatsApp's allegations because retaining them was not worth the risk, and that it conducted no investigation 1. Boyd also said Paragon cannot see customer targets or extracted data, and has no kill switch, but can halt support and updates, which he said would disable the system in about 12 hours 12. WhatsApp alleged Graphite infected more than 60 people in over 20 countries, and Citizen Lab named two Italian journalists and two activists 12. Italian investigators found the activist hacking occurred but was legal under criminal investigations, and confirmed one journalist was hacked without evidence of Italian agency responsibility 1.

Analysis
Paragon's zero-tolerance policy has no technical enforcement, because its oversight depends on customers self-reporting or third parties exposing misuse. Boyd's account that Italy was dropped over risk, without investigation, indicates a commercial decision rather than a finding of abuse. Halting support and updates, which Paragon says disables the system in about 12 hours, is its only lever, and it works only if others reveal misuse first. Italian findings that the activist hacking was legal and that no agency was tied to the journalist's compromise leave attribution unresolved. This reverses April's refusal to engage Italian prosecutors, though all reporting traces to one WIRED interview. Boyd's candor may be positioning ahead of REDLattice's planned public offering, framing blindness as a sovereignty feature. Buyers and regulators now hold the vendor's own admission that it cannot audit use.

4 sources

Company Behind Graphite Spyware Speaks for First Time about Italy Abuse and Accountability - Zetter Zero Day
Cosa c'è dietro Paragon? I segreti del re dello spyware statunitense - Everyeye Tech
The Secrets of the US Spyware King - DNYUZ (republishing WIRED)
The Secrets of the US Spyware King - WIRED