This past spring, the FBI bought a hacking tool to break into the San Bernardino shooter’s iPhone—then refused to disclose it to Apple. In August, the mysterious “Shadow Brokers” published a stolen cache of NSA’s hacking tools—revealing two previously unknown or “zero-day” vulnerabilities in Cisco routers that the NSA had secretly stockpiled and that Cisco had to rush to patch. And just a few weeks ago, researchers discovered three new iPhone vulnerabilities by analyzing spyware being sold to repressive governments to spy on human rights defenders.

The issue of government hacking—and the question of when and how the government should disclose the software vulnerabilities it buys or discovers—is now front-page news. This news in turn raises hard questions: Do we need new laws to regulate government hacking or the government’s disclosure of vulnerabilities, and if so, what should they look like? Should law enforcement be allowed to hack, or participate in the market for hacking tools, at all?

Building upon its recent paper on the topic, Bugs in the System: A Primer on the Software Vulnerability Ecosystem and its Policy Implications, New America’s Open Technology Institute is convening a pair of panels where a wide range of experts with backgrounds in government, industry, civil society and academia will tackle these questions and more. The event will be held at New America in Washington, D.C., on Monday, Sept. 19, 9:15 a.m.­ to 12:30 p.m.

For more information and to RSVP, visit the New America website.