What is This Is How They Tell Me the World Ends about?

This Is How They Tell Me the World Ends is Nicole Perlroth's investigation into the global market for zero-day exploits — previously unknown software vulnerabilities that can be used to compromise systems before the vendor knows they exist and before any patch is available. Perlroth, who covered cybersecurity for The New York Times for a decade, spent years interviewing vulnerability brokers, intelligence officials, hackers, and government contractors to map an ecosystem that operates largely in secret and has become one of the most consequential and least understood corners of national security.

The book opens with Stuxnet, the U.S.-Israeli cyberweapon that destroyed Iranian centrifuges at Natanz around 2010 and was the first known instance of a digital weapon causing significant physical damage to industrial infrastructure. Stuxnet required multiple zero-days to deploy, and its discovery — by accident, when it escaped onto the open internet — revealed to the world that state-level cyberweapons had already reached a level of sophistication that most had assumed was years away.

Perlroth traces the development of the zero-day market from its origins among teenage hackers and bug bounty programs into a global arms bazaar where governments, intelligence agencies, and private contractors buy and hoard vulnerabilities for offensive use. The central tension is that every zero-day the U.S. government hoards for offense is a vulnerability that remains unpatched in American systems — including power grids, water treatment facilities, hospitals, and financial infrastructure. The decision to stockpile rather than disclose involves trading offensive capability against defensive vulnerability, and it is made with essentially no public accountability.

The book is strongest in its portraits of the people operating in this ecosystem — researchers who discovered they could earn six or seven figures selling vulnerabilities rather than disclosing them responsibly, contractors building exploit capabilities for governments that couldn't always control them, and intelligence officials trying to manage a technology that spreads faster than any precedent. Perlroth's reporting on Shadow Brokers, the group that leaked NSA cyberweapon stockpiles in 2017 and whose tools were subsequently used in WannaCry and NotPetya — attacks that collectively caused tens of billions of dollars in damage — is particularly important.