Macron's forest promise and a 2019 spyware flirtation: two stories the Élysée would rather not tell together

On Thursday at 12:17 UTC, French President Emmanuel Macron stood before the cameras and promised to replant the Fontainebleau forest, the vast woodland south of Paris that has spent much of July in flames. Four hours later, on the same news cycle, a separate investigation landed: France 24 reported that in 2019 French officials had briefly explored acquiring Pegasus, the Israeli-made surveillance tool from NSO Group, even as Morocco was allegedly using it against figures in the French government itself. Two stories, one Élysée newsroom, and a question no headline in either story quite resolved: why would a sovereign European state weigh buying the same weapon that was being turned on its ministers?

Read together, the two dispatches expose a pattern the Macron presidency would prefer to keep in separate columns. The first is a textbook green-recovery announcement, the kind of image-of-the-president moment French Fifth Republic governments have relied on for decades. The second is a quieter, slower story about the cost of digital dependency on a small handful of Israeli and American vendors, and the compromises that dependency extracts from democracies that present themselves as champions of digital sovereignty.

The replant and the political calendar

The Fontainebleau fire moved fast and the presidential reaction moved faster. On Thursday Macron framed the replanting as a generational project: a forest that took centuries to grow and weeks to lose deserves a state-led, state-finished recovery. The political logic is straightforward. Wildfire response is one of the rare issues on which French public sentiment, regardless of left-right alignment, rewards visible executive action. A replanting programme lets the Élysée convert an environmental shock into a patronage opportunity, with funding lines that flow through prefectures and onto municipal ledgers. The Macron presidency is intimately familiar with that arithmetic, having used it after previous climate events to harden its rural and peri-urban base.

What the announcement does not do is engage the longer policy question the fires are forcing: how France intends to manage its Mediterranean-adjacent forests as warming extends the high-risk season. The French forestry code is one of the oldest in Europe. The replant, by contrast, is a campaign promise on a two-week cycle.

The 2019 Pegasus probe, and what was not said

The second story is the harder one. According to France 24's reporting on Thursday at 12:45 UTC, French officials in 2019 held early-stage discussions about acquiring Pegasus for French state use. The timing is the point that bites. Those same months had already produced credible reporting that the Moroccan security services were using Pegasus against French cabinet members, including, in widely cited accounts, then-interior minister Gérard Collomb and other figures around Emmanuel Macron himself. The Paris prosecutor's office opened a formal investigation in July 2021 into the alleged targeting of French officials by Morocco, a case that is still grinding through the French courts.

Two readings of the 2019 flirtation are plausible, and France 24's investigation does not finally resolve which one a court would accept. On the first reading, France was performing due diligence on a tool it knew was being abused, in order to assess whether the vendor could be trusted with French operational data. On the second, France was actively weighing procurement of a tool that, at the moment of evaluation, was being run against French interests by a partner state. The political answer turns on whether those two tracks were ever separated inside the Élysée, or whether the same desks that were tracking the Moroccan targeting were also reviewing Pegasus as a candidate product.

NSO Group has, in separate litigation and in statements to European parliaments, maintained that Pegasus is sold only to vetted state customers and that the company investigates credible abuse reports. Critics of NSO, including Citizen Lab and the Forbidden Stories consortium, have published extensive evidence that the company's claims of due diligence do not match the operational reality of where Pegasus ends up. The France 24 report does not resolve that dispute; it adds a new data point to it, namely that one of Europe's most rule-of-law-anchored democracies was, for at least several months in 2019, prepared to treat the vendor as a counterparty even while it was complaining about the vendor's product.

Surveillance, sovereignty and the gulf between rhetoric and procurement

The harder question is structural. Paris has spent the last five years positioning itself as Europe's standard-bearer on digital sovereignty, championing stricter export controls on surveillance tools inside the European Union and pushing member states toward domestic alternatives to foreign spyware. French diplomats have, in multilateral fora, pointeded to the abuse of commercial spyware against journalists and opposition figures as a human-rights issue of the first order. The new disclosure does not contradict that posture, but it does undermine the certainty with which Paris can hold it.

If Pegasus was under active review by French services while French ministers were being targeted by the same tool, the European debate on spyware export controls starts to look less like a north-south story of democratic Europe versus authoritarian clients and more like a story of everyone in the same procurement pool, with different rules of disclosure. The same Israeli vendor sat across the negotiating table from the Moroccan security services that allegedly spied on Paris and from the French services that were evaluating whether to do business with that vendor. That is not a scandal in the legal sense; the 2019 talks appear to have gone nowhere. It is, however, a quiet embarrassment for a government that wants to be the moral and technical pacesetter on European digital sovereignty.

Stakes, and what the next weeks will tell

Two trajectories now diverge. The replant can be delivered on a normal political timeline: a funding announcement, a regional prefectural plan, a presidential visit to a sapling nursery. The 2019 disclosure settles into a slower timeline, the kind that produces committee hearings in the Assemblée nationale's law commission, requests from the Commission nationale de contrôle des techniques de renseignement, and quiet follow-on reporting from the newspapers that broke the original Moroccan-targeting story. The Moroccan case is already in court, and the Pegasus question is now bolted to it.

The most useful number to watch in the coming weeks is not hectares replanted but disclosure. France 24's investigation does not name the agencies that explored Pegasus, the ministers who authorised the contact with NSO, or the legal framework under which the talks were conducted. Each of those unknowns is a line that a determined parliamentary committee, or a determined prosecutor, can draw in the public record. Whether French institutions draw those lines will be a cleaner measure of how seriously Paris treats the surveillance question than any number of trees planted in the sandier parts of the Île-de-France.

What remains genuinely uncertain, and the sources do not settle, is whether the 2019 talks were the work of one isolated cell inside the French intelligence services, or whether they were a coordinated interministerial review. The political and legal answer matters: the former is a bureaucratic curiosity; the latter is a strategic posture. On the evidence currently public, this publication cannot choose between the two. It can only note that the Élysée, which produces two story-a-day news cycles with metronomic discipline, now has to live with both of these stories in the same news cycle.

This article was built from two France 24 dispatches filed on 16 July 2026 at 12:17 UTC and 12:45 UTC, with the Fontainebleau-replant piece merged against the Pegasus-france investigation. Where the wire left specifics unstated, this publication has used qualifying language rather than reconstructed claims.

Wire provenance

This editorial synthesis draws on the following public wire/social posts:

• https://t.me/s/france24_en
• https://t.me/s/france24_en