{"status":"OK","status-code":200,"version":"1.0","access":"public","total":1015,"offset":0,"limit":100,"data":[{"id":41230,"title":"Episode 57: Vijay Sarvepalli and Christopher Cullen, FIRSTCON26 Speakers","summary":"In this episode of the First Impressions Podcast, we sit down with Vijay Sarvepalli and Christopher Cullen to unpack the chaotic reality of modern vulnerability coordination. From AI-generated bug reports and patching nightmares to insecure pickle files, Log4j flashbacks, and the race to secure open source software before attackers strike, the conversation dives deep into how security teams can “push left” and automate the path from vulnerability discovery to secure release. Equal parts technical insight, cautionary tale, and therapy session for anyone who survived Log4Shell, this episode explores why fixing vulnerabilities is still harder than finding them, and what the future of coordinated vulnerability disclosure might look like in an AI-driven world.","link":"https://media.first.org/podcasts/FIRST_Impressions-vijay-chris","published":"Fri, 29 May 2026 00:00:00 GMT"},{"id":41216,"title":"Training, CCB, and CORE","published":"Tue, 26 May 2026 00:00:00 GMT"},{"id":41217,"title":"Peak Incident Response 2026","summary":"This year we held our first Swiss Technical Colloquium - [Peak Incident Response](https://www.first.org/events/colloquia/geneva2026) - as part of the [Geneva Cyber Week (GCW)](https://genevacyberweek.com/en). So, why another TC? The GCW is an annual global platform to advance international cooperation and resilience in cyberspace. This sounds a bit like it could describe just about any FIRST event. But the GCW mostly caters to policy folks, diplomats, and members of civil society, including some of our trusted partners such as DCAF and the HD Centre.","link":"https://www.first.org/blog/20260518-Peak-Incident-Response-2026","image":"https://www.first.org/_/img/news/firstpost2606-peak.jpg","published":"Tue, 26 May 2026 00:00:00 GMT"},{"id":41218,"title":"FIRSTCTI26 Recap: Threat Intel & Pretzels Sold Out!","summary":"Ten years ago, a group of cybersecurity professionals gathered in Munich with a simple but ambitious idea: create a trusted space where threat intelligence experts from different sectors could actually talk to each other, collaborate openly, and tackle emerging challenges together.","link":"https://www.first.org/blog/20260518-FIRSTCTI26-Event-Recap","image":"https://www.first.org/_/img/news/firstpost2606-firstcti26.jpg","published":"Tue, 26 May 2026 00:00:00 GMT"},{"id":41219,"title":"VulnCon 2026 Recap: Sun, Strategy, and Security!","summary":"What happens when you gather hundreds of vulnerability management professionals in the Arizona sunshine for a week of collaboration, workshops, debates, and margaritas? VulnCon 2026: and this year's event was bigger, bolder, and more collaborative than ever.","link":"https://www.first.org/blog/20260518-Vulncon26-Event-Recap","image":"https://www.first.org/_/img/news/firstpost2606-vulncon26.jpg","published":"Tue, 26 May 2026 00:00:00 GMT"},{"id":41220,"title":"PR updates","published":"Tue, 26 May 2026 00:00:00 GMT"},{"id":41221,"title":"Membership Dues","published":"Tue, 26 May 2026 00:00:00 GMT"},{"id":41222,"title":"AGM Update","published":"Tue, 26 May 2026 00:00:00 GMT"},{"id":41223,"title":"2026 Mexico City Technical Colloquium","summary":"August 17-19, 2026
\nMexico City (MX)
\n\\#FIRSTMX26","link":"https://www.first.org/events/colloquia/firstmx26/","image":"https://www.first.org/_/e/firstmx26/firstmx26-sq.jpg","published":"Tue, 26 May 2026 00:00:00 GMT"},{"id":41224,"title":"FIRST-APNIC Technical Colloquium","summary":"September 8-10, 2026
\nMumbai, India
","link":"https://www.first.org/events/colloquia/apnic26/","image":"https://www.first.org/_/e/apnic26/apnic26-sq.jpg","published":"Tue, 26 May 2026 00:00:00 GMT"},{"id":41225,"title":"2026 VulnOptiCON","summary":"September 24-25, 2026
\nLuxembourg
","link":"https://vulnopticon.org/","image":"https://www.first.org/_/img/news/vulnopticon-sq.jpg","published":"Tue, 26 May 2026 00:00:00 GMT"},{"id":41226,"title":"2026 FIRST Regional Symposium Latin America & Caribbean","summary":"October 21-22, 2026
\nMendoza, Argentina
","image":"https://www.first.org/_/e/latam2026/latam26-sq.jpg","published":"Tue, 26 May 2026 00:00:00 GMT"},{"id":41227,"title":"2026 FIRST Regional Symposium for Africa & Joint AfricaCERT Meeting","summary":"October 27-30, 2026
\nNairobi, Kenya
\n\\#FIRSTAA26","image":"https://www.first.org/_/e/firstaa26/firstaa26-sq.jpg","published":"Tue, 26 May 2026 00:00:00 GMT"},{"id":41228,"title":"2026 FIRST Regional Symposium for Asia Pacific & Joint APCERT AGM","summary":"November 5-6, 2026
\nBusan, Republic of Korea
\n","image":"https://www.first.org/_/e/asia-pacific2026/asia-pacific2026-sq.jpg","published":"Tue, 26 May 2026 00:00:00 GMT"},{"id":41213,"title":"Member spotlight","published":"Tue, 26 May 2026 00:00:00 GMT"},{"id":41214,"title":"Standards Update","published":"Tue, 26 May 2026 00:00:00 GMT"},{"id":41215,"title":"Special Interest Group Updates","image":"https://www.first.org/_/img/news/firstpost2026-sig-news.jpg","published":"Tue, 26 May 2026 00:00:00 GMT"},{"id":41229,"title":"Sector CERTs and How To Build Them","summary":"CERT Ghana has been creating a network of sector CERTs in significant areas and has created strong bonds in the process.","link":"https://www.first.org/blog/20260525-Sector-CERTs-and-how-to-build-them","image":"https://www.first.org/blog/","published":"Mon, 25 May 2026 00:00:00 GMT"},{"id":41209,"title":"Episode 56: Mor Weinberger and Lior Kaplan, FIRSTCON26 Speakers","summary":"In the first episode of the 2026 season of the First Impressions Podcast, Mor Weinberger and Lior Kaplan preview their upcoming FIRST Conference session, “From Discovery to Fix: What 10,000 Open Source Projects Reveal About CVE Remediation.” The discussion explores why vulnerability remediation remains slow despite the growing speed of CVE discovery, especially as AI accelerates vulnerability research and exploit development. Drawing from research across thousands of open source projects, they examine the challenges of patch adoption, dependency management, and supply chain complexity. The episode also highlights practical ways organizations can reduce risk and improve remediation efforts ahead of FIRSTCON26 in Denver.","link":"https://media.first.org/podcasts/FIRST_Impressions-MorLior.mp3","published":"Fri, 22 May 2026 00:00:00 GMT"},{"id":41212,"title":"The 2026 Vulnerability Forecast Update: Navigating the AI Epoch","summary":"The cumulative drift is currently +46.3% above the original forecast (an excess of 6,420 CVEs), leading to a revised 2026 projection of ~68K CVEs.There were many questions earlier this year when we produced prediction intervals as wide as 100k. Still, an important feature of a forecast is that it encompasses unlikely but realistically possible outcomes. AI-assisted discovery has increased the chances that we see what many people would consider an extreme number of vulnerabilities this year, and we take such things into account when producing the strategic forecast.","link":"https://www.first.org/blog/20260522-vulnerability-forecast-update","published":"Fri, 22 May 2026 00:00:00 GMT"},{"id":41208,"title":"Peak Incident Response 2026","summary":"This year we held our first Swiss Technical Colloquium - Peak Incident Response - as part of the Geneva Cyber Week (GCW). So, why another TC? The GCW is an annual global platform to advance international cooperation and resilience in cyberspace. This sounds a bit like it could describe just about any FIRST event. But the GCW mostly caters to policy folks, diplomats, and members of civil society, including some of our trusted partners such as DCAF and the HD Centre.","link":"https://www.first.org/blog/20260518-Peak-Incident-Response-2026","image":"https://www.first.org/blog/","published":"Mon, 18 May 2026 00:00:00 GMT"},{"id":41210,"title":"FIRSTCTI26 Recap: Threat Intel & Pretzels Sold Out!","summary":"Ten years ago, a group of cybersecurity professionals gathered in Munich with a simple but ambitious idea: create a trusted space where threat intelligence experts from different sectors could actually talk to each other, collaborate openly, and tackle emerging challenges together.","link":"https://www.first.org/blog/20260518-FIRSTCTI26-Event-Recap","image":"https://www.first.org/blog/","published":"Mon, 18 May 2026 00:00:00 GMT"},{"id":41211,"title":"VulnCon 2026 Recap: Sun, Strategy, and Security!","summary":"What happens when you gather hundreds of vulnerability management professionals in the Arizona sunshine for a week of collaboration, workshops, debates, and margaritas? VulnCon 2026: and this year's event was bigger, bolder, and more collaborative than ever.","link":"https://www.first.org/blog/20260518-Vulncon26-Event-Recap","image":"https://www.first.org/blog/","published":"Mon, 18 May 2026 00:00:00 GMT"},{"id":41207,"title":"Episode 55: Merike Kaeo, FIRSTCON26 Program Chair","summary":"The FIRST Impressions Podcast returns for FIRSTCON26! This kick off episode brings Program Chair, Merike Kaeo, to the table to discuss the vision behind the 38th Annual FIRST Conference program and the goals and challenges faced. Centered around the theme “Peak Defense: Building Adaptive Systems for Modern Threats,” Merike shares how this year’s program was carefully designed to balance technical depth, operational strategy, incident response, and AI security topics while ensuring diverse perspectives and skill levels. The episode highlights the importance of community collaboration, knowledge sharing, and making cybersecurity capabilities more accessible for smaller and underserved organizations through automation, practical incident response planning, and stronger global cooperation.","link":"https://media.first.org/podcasts/FIRST_Impressions-MerikeKaeo26.mp3","published":"Fri, 15 May 2026 00:00:00 GMT"},{"id":41205,"title":"FIRST POST: Apr-Jun 2026","link":"https://www.first.org/newsroom/post/202606","published":"Thu, 30 Apr 2026 00:00:00 GMT"},{"id":41206,"title":"Message from the Chair","published":"Thu, 30 Apr 2026 00:00:00 GMT"},{"id":41173,"title":"FIRST POST: Jan-Mar 2026","summary":"Message from the Chair; Board Spotlight; Member Spotlight; From Operational Experience to Global Policy: The UN Global Cybersecurity Mechanism; Special Interest Group Updates; Training, CCB, and CORE; Membership Dues; AGM Update; Seven signals cyber experts agreed on at FIRST Paris 2026; Bangalore 2026 FIRST Technical Colloquium highlights resilience, AI, and community; Threats, Tech, and Tashkent: FIRSTUZ26 Recap; Breakthrough Vulnerability Projections, Global Conference Series Launch, and CVSS Implementation Leadership; Upcoming Events","link":"https://www.first.org/newsroom/post/202603","published":"Tue, 28 Apr 2026 00:00:00 GMT"},{"id":41174,"title":"Message from the Chair","summary":"Vulnerabilities ... What's in a name? (again)\n\nVulnCon 2026 came at a perfect time. Over the years, vulnerabilities have become a subject of choice. \n\nVulnerabilities are all over the press, social media, blogs, reports and ... our mailing lists, our messaging apps, discussions in our FIRST community. And vulnerabilities translate for most into CVEs. But some are not CVEs.\n","link":"https://www.first.org/newsroom/releases/202603-1","image":"https://www.first.org/_/img/news/firstpost2603-message-chair.jpg","published":"Tue, 28 Apr 2026 00:00:00 GMT"},{"id":41175,"title":"Member Spotlight","summary":"**Building the infrastructure of trust — one open-source contribution at a time**\n\nKoen Van Impe is one of those community figures whose impact is greater than the sum of its visible parts. With over 20 years of experience in cybersecurity, Koen works as a freelancer specializing in threat intelligence, incident response and security operations, and is part of the core team behind the MISP project, the world's most widely used open-source platform for structured threat intelligence sharing. His profile as a FIRST member reflects a consistent track record of contribution to the global community of CSIRTs and response teams.","link":"https://www.first.org/newsroom/releases/202603-3","image":"https://www.first.org/_/img/news/firstpost2603-koen-van-imp.jpg","published":"Tue, 28 Apr 2026 00:00:00 GMT"},{"id":41177,"title":"Special Interest Group Updates","summary":"**STP SIG White Paper published on the future of CERTs/CSIRTs/ISACs and their operating models** \n\n“This white paper, authored by AUSCERT, examines the rapid evolution of CERTs/CSIRTs/ISACs as the cyber threat landscape grows increasingly complex and interconnected. Originally created as technical response units, CERTs have since expanded into strategic institutions supporting national resilience, sectoral preparedness, and organisational cyber maturity. Rising regulatory pressures, globalised supply‑chain risk, and competition from commercial cybersecurity providers have reshaped expectations of CERTs, demanding both technical excellence and the ability to coordinate diverse stakeholders during high‑impact events, whilst maintaining sustainable operations.","link":"https://www.first.org/newsroom/releases/202603-7","image":"https://www.first.org/_/img/news/firstpost2026-sig-news.jpg","published":"Tue, 28 Apr 2026 00:00:00 GMT"},{"id":41178,"title":"Training, CCB, and CORE","summary":"FIRST CORE is excited to welcome the support of the Internet Society and Internet Society Foundation through the newly launched Common Good Cyber Fund (CGCF). As part of the initial pilot phase, the CGCF grant will bolster FIRST’s community and capacity building program to better support and grow our community training efforts. ","link":"https://www.first.org/newsroom/releases/202603-9","image":"https://www.first.org/_/img/news/firstpost2603-core.jpg","published":"Tue, 28 Apr 2026 00:00:00 GMT"},{"id":41179,"title":"Breakthrough Vulnerability Projections, Global Conference Series Launch, and CVSS Implementation Leadership","summary":"Growth Stack Media secured and tracked 120+ pieces of earned media coverage, generating more than 1M views of content for FIRST in Q1FY26 across notable publications including Fast Company, CSO, SC Media, and Infosecurity Magazine. You can view the full CoverageBook of articles [here](https://www.first.org/newsroom/newsletters/FIRST_FY26Q1_PR_Coverage.pdf). This robust coverage reinforced FIRST's position as the authoritative voice in vulnerability management and global cybersecurity coordination.","link":"https://www.first.org/newsroom/releases/202603-20","image":"https://www.first.org/_/img/news/firstpost2603-media.jpg","published":"Tue, 28 Apr 2026 00:00:00 GMT"},{"id":41194,"title":"Membership Dues","summary":"As Chair of FIRST, I want to inform you about an upcoming adjustment to the annual membership fee for full members (teams). Starting with the 2027 membership year, and for the period 2027–2029, the fee will increase from 2,800 USD to 3,000 USD per year.","link":"https://www.first.org/newsroom/releases/202603-12","image":"https://www.first.org/_/img/news/firstpost2603-dues.jpg","published":"Tue, 28 Apr 2026 00:00:00 GMT"},{"id":41195,"title":"AGM Update","summary":"FIRST holds its Annual General Meeting (AGM) during the Annual Conference. The 2026 FIRST AGM will take place on June 15, 2026 22:00 UTC (16:00 MDT, local time) and will also be streamed for observation.","link":"https://www.first.org/newsroom/releases/202603-13","image":"https://www.first.org/_/img/news/firstpost2603-agm-2.jpg","published":"Tue, 28 Apr 2026 00:00:00 GMT"},{"id":41196,"title":"From Operational Experience to Global Policy: The UN Global Cybersecurity Mechanism","summary":"The launch of the United Nations Global Cybersecurity Mechanism (G-Mech) marks an important step toward more stable and continuous governance of cyberspace. Unlike previous processes, this new arrangement has been established as a permanent framework, with an organizational session that began in March 2026, a first substantive plenary next July, and dedicated thematic groups in December. Its structure combines general discussions in plenary with more focused exchanges in the Dedicated Thematic Groups, under the five well-established pillars of the framework for responsible State behaviour: threats, norms, international law, confidence-building measures, and capacity-building.","link":"https://www.first.org/newsroom/releases/202603-6","image":"https://www.first.org/_/img/news/firstpost2603-global-cybersecurity.jpg","published":"Tue, 28 Apr 2026 00:00:00 GMT"},{"id":41204,"title":"Board Spotlight ","summary":"**Can you walk us through your career background and how that experience brought you into the organization?**\n\nI started installing firewalls in the mid-1990s and looked at the logs... and I right away entered incident management! Long story short, I joined the emerging informal association of CSIRTs in France - aka InterCERT France - at the turn of the century, then TF-CSIRT, and FIRST in 2013 while joining French GovCERT, CERT-FR.","link":"https://www.first.org/newsroom/releases/202603-2","image":"https://www.first.org/_/img/news/firstpost2603-olivier-caleff.jpg","published":"Tue, 28 Apr 2026 00:00:00 GMT"},{"id":41201,"title":"The Infrastructure Nobody Owns: (Residential) Proxy Networks and the Case for Collective Visibility","link":"https://www.first.org/blog/20260424-Infrastructure-Nobody-Owns","image":"https://www.first.org/blog/","published":"Fri, 24 Apr 2026 16:00:00 GMT"},{"id":41203,"title":"FIRST Concludes Sold-Out 2026 Cyber Threat Intelligence Conference in Munich","summary":"Global practitioners gathered to advance AI-driven CTI, detection engineering, and threat intelligence standards","link":"https://www.first.org/newsroom/releases/20260423","published":"Thu, 23 Apr 2026 09:00:00 GMT"},{"id":41202,"title":"A Reef Takes Time to Grow: CIRT-BS","summary":"A reef is a great metaphor for cybersecurity. It protects an ecosystem, allows good things through, keeping bad things out. But it also takes a long time to build. We talked to Bahamas CIRT ahead of the official launch of their Cyber Reef.","link":"https://www.first.org/blog/20260422-A-Reef-Takes-Time-to-Grow","published":"Wed, 22 Apr 2026 08:00:00 GMT"},{"id":41199,"title":"Malicious Packages Don't Fit the Vulnerability Intelligence Model","summary":"Malicious open source packages and software vulnerabilities may look alike on the surface, but they demand entirely different response playbooks. Treating a malicious npm or PyPI package like a CVE leaves critical questions unanswered: what did it execute, where did it phone home, and what campaign is it part of? Purpose-built malicious package intelligence infrastructure is needed to answer those questions.","link":"https://www.first.org/blog/20260420-Malicious-Packages-Dont-Fit","image":"https://www.first.org/blog/","published":"Mon, 20 Apr 2026 16:00:00 GMT"},{"id":41198,"title":"FIRST Wraps CVE/VulnCon 2026 with 500+ Attendees, New Product Launches, and Key Vulnerability Management Milestones","summary":"Four-day summit in Scottsdale draws global security leaders to advance CVE quality, AI security, and coordinated disclosure.","link":"https://www.first.org/newsroom/releases/20260416","published":"Thu, 16 Apr 2026 20:30:00 GMT"},{"id":41187,"title":"Threats, Tech, and Tashkent: FIRSTUZ26 Recap","summary":"The 2026 FIRST Regional Symposium for Central Asia brought the global cybersecurity community to Tashkent, Uzbekistan over February 26-27, 2026, marking an exciting milestone for the organization. Hosted by [UZCERT](https://uzcert.uz/en/) and [INHA University in Tashkent](https://inha.uz/), it was the very first regional symposium organized by the Forum of Incident Response and Security Teams (FIRST) in Central Asia, and it did not disappoint.","link":"https://www.first.org/blog/20260318-FIRSTUZ26-Recap","image":"https://www.first.org/blog/_media/FIRSTUZ26-03.jpg","published":"Mon, 30 Mar 2026 00:00:00 GMT"},{"id":41188,"title":"Bangalore 2026 FIRST Technical Colloquium highlights resilience, AI, and community","summary":"The 2026 FIRST Technical Colloquium in Bangalore brought together a group of security professionals and students for two days of practical learning, technical discussion, and community building on Cisco's campus on February 10-11, 2026. The event created space for attendees to exchange ideas, share lessons learned, and strengthen connections across the incident response community.","link":"https://www.first.org/blog/20260319-Bangalore-TC","image":"https://www.first.org/_/img/news/firstpost2603-bangalore.jpg","published":"Mon, 30 Mar 2026 00:00:00 GMT"},{"id":41189,"title":"Seven signals cyber experts agreed on at FIRST Paris 2026","summary":"Group-IB hosted the FIRST Technical Colloquium in Paris, where cybersecurity experts challenged assumptions around modern cyber defense. FIRST Chair Olivier Caleff opened and moderated the event. \nThe cybersecurity industry has been facing multiple parallel challenges in recent years. The pace at which cybercrime evolves is hard to match, but gatherings like FIRST provide a unique opportunity for the community to convene, reflect, and move forward together.","link":"https://www.first.org/blog/20260323-Paris-TC","image":"https://www.first.org/_/img/news/firstpost2603-paris.jpg","published":"Mon, 30 Mar 2026 00:00:00 GMT"},{"id":41190,"title":"The Trust Builders: FIRST’s African Liaisons","summary":"In the past two years, the FIRST Africa Regional Liaison (ARL) initiative has directly supported 1,210 cybersecurity professionals, delivered more than 50 targeted initiatives across 33 countries, and maintained sustained engagement with at least 70 Computer Security Incident Response Teams (CSIRTs).\n\nThat’s a lot of work for the two liaisons: Eric Akumiah (Ghana) and myself, Lawrence Muchilwa (Kenya).","link":"https://www.first.org/blog/20260311-Trust-Builders","image":"https://www.first.org/_/img/news/firstpost2603-africa-liaisons.jpg","published":"Mon, 30 Mar 2026 00:00:00 GMT"},{"id":41182,"title":"2026 Peak Incident Response Technical Colloquium","summary":"May 5-6, 2026
\nGeneva (CH)
\n","link":"https://www.first.org/events/colloquia/geneva2026/","image":"https://www.first.org/_/e/geneva2026/geneva2026-sq.jpg","published":"Fri, 27 Mar 2026 00:00:00 GMT"},{"id":41183,"title":"Zimbabwe FIRST Technical Colloquium","summary":"May 6-8, 2026
\nVictoria Falls (ZW)
","link":"https://www.first.org/events/colloquia/zimbabwe2026/","image":"https://www.first.org/_/e/zimbabwe2026/zimbabwe2026-sq.jpg","published":"Fri, 27 Mar 2026 00:00:00 GMT"},{"id":41184,"title":"38th Annual FIRST Conference","summary":"June 14-19, 2026
\nDenver (US)
\n\\#FIRSTCON26","link":"https://www.first.org/conference/2026/","image":"https://www.first.org/_/e/firstcon26/firstcon26-sq.jpg","published":"Fri, 27 Mar 2026 00:00:00 GMT"},{"id":41185,"title":"2026 Mexico City Technical Colloquium","summary":"SAVE THE DATE!
\nAugust 17-19, 2026
\nMexico City (MX)
\n\\#FIRSTMX26","link":"https://www.first.org/events/colloquia/firstmx26/","image":"https://www.first.org/_/e/firstmx26/firstmx26-sq.jpg","published":"Fri, 27 Mar 2026 00:00:00 GMT"},{"id":41186,"title":"2026 FIRST Regional Symposium for Africa & Joint AfricaCERT Meeting","summary":"SAVE THE DATE!
\nOctober 27-30, 2026
\nNairobi (KE)","image":"https://www.first.org/_/e/firstaa26/firstaa26-sq.jpg","published":"Fri, 27 Mar 2026 00:00:00 GMT"},{"id":41191,"title":"Critical Thinking Within CTI","summary":"All too often in 2026, analysts now rely upon tools, technology, and artificial intelligence (AI) to do the “thinking for us” instead of using our brains in the cyber threat intelligence (CTI) lifecycle. Analysts are “drowning in data” with a wealth of emails, tweets, texts, messages, feeds, and other information that all have to be read, processed, normalized, correlated, understood, and potentially weaponized into tools and technology for defensive posture. A reliance upon tools and artificial intelligence (AI) is quickly becoming the new standard, a threat to \"human in the loop” and our most important asset, people!","link":"https://www.first.org/global/sigs/cti/blog/20260326-Critical-Thinking-Within-CTI","image":"https://www.first.org/global/sigs/cti/blog/","published":"Thu, 26 Mar 2026 00:00:00 GMT"},{"id":41192,"title":"Hypothesis and Theory: Words do Matter!","summary":"The terms hypothesis and theory are widely recognized, yet their precise meanings are often misunderstood. As a result, they are frequently used interchangeably - most commonly with theory being misapplied in situations where hypothesis would be more accurate.","link":"https://www.first.org/global/sigs/cti/blog/20260326-Hypothesis-and-Theory","image":"https://www.first.org/global/sigs/cti/blog/","published":"Thu, 26 Mar 2026 00:00:00 GMT"},{"id":41193,"title":"What is Cyber Threat Hunting?","summary":"As a pioneer in the world of Cyber Threat Intelligence (CTI), I see many technologies, tools, and people attempting to perform “threat hunting”, without a proper understanding or guidance in how to do it effectively within the lifecycle of CTI. Today, many rely upon tools and technology for “good enough” intelligence, while others chase Indicators of Compromise (IoCs), thinking that is threat hunting - it is not. Join me on a journey to understanding what threat hunting is and is not, and the types of hunts one performs to actionably move the needle to lower cyber risk.","link":"https://www.first.org/global/sigs/cti/blog/20260326-What-is-Cyber-Threat-Hunting","image":"https://www.first.org/global/sigs/cti/blog/","published":"Thu, 26 Mar 2026 00:00:00 GMT"},{"id":41172,"title":"Seven signals cyber experts agreed on at FIRST Paris 2026","summary":"The cybersecurity industry has been facing multiple parallel challenges in recent years. The pace at which cybercrime evolves is hard to match, but gatherings like FIRST provide a unique opportunity for the community to convene, reflect, and move forward together.","link":"https://www.first.org/blog/20260323-Paris-TC","image":"https://www.first.org/blog/","published":"Mon, 23 Mar 2026 00:00:00 GMT"},{"id":41171,"title":"Bangalore 2026 FIRST Technical Colloquium highlights resilience, AI, and community","summary":"The 2026 FIRST Technical Colloquium in Bangalore brought together a group of security professionals and students for two days of practical learning, technical discussion, and community building on Cisco's campus on February 10-11, 2026. The event created space for attendees to exchange ideas, share lessons learned, and strengthen connections across the incident response community.","link":"https://www.first.org/blog/20260319-Bangalore-TC","image":"https://www.first.org/blog/","published":"Thu, 19 Mar 2026 00:00:00 GMT"},{"id":41170,"title":"Threats, Tech, and Tashkent: FIRSTUZ26 Recap","summary":"The 2026 FIRST Regional Symposium for Central Asia brought the global cybersecurity community to Tashkent, Uzbekistan over February 26-27, 2026, marking an exciting milestone for the organization. Hosted by UZCERT and INHA University in Tashkent, it was the very first regional symposium organized by the Forum of Incident Response and Security Teams (FIRST) in Central Asia, and it did not disappoint.","link":"https://www.first.org/blog/20260318-FIRSTUZ26-Recap","image":"https://www.first.org/blog/","published":"Wed, 18 Mar 2026 00:00:00 GMT"},{"id":41169,"title":"FIRST Unveils Three Global Conferences to Strengthen the World's Cyber Defenses in 2026","summary":"Speakers include cybersecurity leaders from organizations including the Cybersecurity and Infrastructure Security Agency (CISA), Google, Microsoft, Nvidia, European Commission, Munich University of Applied Sciences, and others","link":"https://www.first.org/newsroom/releases/20260312","published":"Thu, 12 Mar 2026 05:00:00 GMT"},{"id":41168,"title":"The Trust Builders: FIRST’s African Liaisons","link":"https://www.first.org/blog/20260311-Trust-Builders","image":"https://www.first.org/blog/","published":"Wed, 11 Mar 2026 00:00:00 GMT"},{"id":41164,"title":"FIRST Releases 2026 Vulnerability Report, Projecting Record-Breaking Common Vulnerabilities and Exposures","summary":"For the first time ever, annual CVE disclosures expected to surpass 50,000, signaling a potential paradigm shift in vulnerability management workloads","link":"https://www.first.org/newsroom/releases/20260211","published":"Wed, 11 Feb 2026 00:00:00 GMT"},{"id":41165,"title":"FIRST Welcomes New Members and Thanks Sponsoring Teams!","summary":"FIRST has welcomed 64 new members over the second semester of 2025: 39 Teams, 23 Liaisons, and 2 Associates. \n\nMost growth comes from new Teams and Liaisons from the US (+9), Dominican Republic (+7), Taiwan, Province of China (+5), Switzerland (+3), Germany (+3), Great Britain (+3), Republic of Korea (+3), and Mexico (+3). \n \nOverall at the end of 2025, FIRST community covers 116 countries, and is composed of 824 Teams (+87), 4 Associates (+4), and 202 Liaisons (+44).\n","link":"https://www.first.org/newsroom/releases/202512-18","image":"https://www.first.org/_/img/news/firstpost2512-welcome.jpg","published":"Mon, 26 Jan 2026 00:00:00 GMT"},{"id":41163,"title":"Zimbabwe FIRST Technical Colloquium","summary":"May 06-08, 2026
\nVictoria Falls (ZW)
\n","link":"https://www.first.org/events/colloquia/zimbabwe2026/","image":"https://www.first.org/_/e/zimbabwe2026/zimbabwe2026-sq.jpg","published":"Fri, 16 Jan 2026 00:00:00 GMT"},{"id":41162,"title":"Why We Can’t Stop Talking About Information Sharing","summary":"I know — it’s a tired topic. So much has been written about information sharing that it can feel like white noise. Yet, it remains a critical issue that we haven't quite solved. \n\nDuring a recent trip to China, I heard a recurring concern: “People no longer share vulnerabilities with us.” When I mention this back home, the common retort is, “Well, of course — their state actors will just use that data to attack us.”\n","link":"https://www.first.org/newsroom/releases/202512-17","image":"https://www.first.org/_/img/news/firstpost2512-sharing.jpg","published":"Thu, 08 Jan 2026 00:00:00 GMT"},{"id":41145,"title":"FIRST POST: Oct-Dec 2025","summary":"Message from the Chair; Member Spotlight; Standards Update; Special Interest Group Updates; Training and CCB; Record Growth Announcement, Cybersecurity Awareness Month and African Cyber Capacity Building; Why We Can’t Stop Talking About Information Sharing; FIRST Welcomes New Members and Thanks Sponsoring Teams!; Upcoming Events","link":"https://www.first.org/newsroom/post/202512","published":"Wed, 31 Dec 2025 00:00:00 GMT"},{"id":41159,"title":"2025 Vulnerability Forecast: Year-End Review","summary":"As 2025 draws to a close, we find ourselves in the satisfying position of reviewing forecasts that worked. Next year’s forecast will look and feel a bit different, but you can expect that in January and we like to keep them separate.","link":"https://www.first.org/blog/20251229-Vulnerability-Forecast-Review","published":"Mon, 29 Dec 2025 00:30:00 GMT"},{"id":41153,"title":"Upskilling Communications","summary":"Sharing information in cybersecurity is vital for prevention and response. There’s a lot of technical processes available, and best practice to learn from. FIRST, for example, was created for that exact reason back in the 90s, to share techniques and information between teams.","link":"https://www.first.org/blog/20251216-upskilling_communications","image":"https://www.first.org/blog/","published":"Tue, 16 Dec 2025 00:00:00 GMT"},{"id":41154,"title":"Training and CCB","summary":"FIRST continues to provide training on different cybersecurity topics and in different parts of the world through our Community Trainers and CCB program. From October to December, FIRST has delivered nine trainings across seven economies with support from our training community, thanks to everyone for sharing their expertise and experience!","link":"https://www.first.org/newsroom/releases/202512-10","image":"https://www.first.org/_/img/news/firstpost2512-training.jpg","published":"Tue, 16 Dec 2025 00:00:00 GMT"},{"id":41155,"title":"Record Growth Announcement, Cybersecurity Awareness Month and African Cyber Capacity Building","summary":"Growth Stack Media secured and tracked 29 pieces of earned media coverage for FIRST in Q4FY25 across notable publications including Dark Reading, SecurityBrief, and IT Brief. [You can view the full CoverageBook of articles here](https://www.first.org/newsroom/newsletters/FIRST_FY25Q4_PR_Coverage.pdf).","link":"https://www.first.org/newsroom/releases/202512-15","image":"https://www.first.org/_/img/news/firstpost2512-media.jpg","published":"Tue, 16 Dec 2025 00:00:00 GMT"},{"id":41156,"title":"Special Interest Group Updates","summary":"The new [**Time Security SIG**](https://www.first.org/global/sigs/time/) was approved and started operating. It exists to help the global FIRST community prepare for the 2036–2038 epoch rollovers. By coordinating research, testing, and outreach on time integrity, the SIG connects CSIRTs, vendors, and standards bodies to strengthen resilience across critical infrastructure. It´s goal is to ensure the world’s clocks keep running — securely — long past 2038. If you are interested in more information or want to join, head over to https://www.first.org/global/sigs/time/.","link":"https://www.first.org/newsroom/releases/202512-7","image":"https://www.first.org/_/img/news/firstpost2026-sig-news.jpg","published":"Tue, 16 Dec 2025 00:00:00 GMT"},{"id":41157,"title":"Standards Update","summary":"Big milestone at the ITU-T SG17 closing plenary (Thursday 2025-12-11) in Geneva! The membership officially approved C396 XS.TP.epoch \"Technical Report on Global Coordination Requirements for 2038-class rollover events (including but not limited to 2036, 2038, and 2106)\".","link":"https://www.first.org/newsroom/releases/202512-5","image":"https://www.first.org/_/img/news/firstpost2512-standard.jpg","published":"Tue, 16 Dec 2025 00:00:00 GMT"},{"id":41158,"title":"Member Spotlight","summary":"Let's cast some light on our first FIRST member spotlight: Dr Kaleem Ahmed Usmani from CERT-MU in Mauritius. The aim of this award is to recognize **outstanding contributions and exceptional leadership in advancing cybersecurity collaboration and community engagement within the FIRST network**. \n\nDr Kaleem Ahmed Usmani played a key role in organizing the [2025 FIRST & AfricaCERT Symposium: Africa and Arab Regions](https://www.first.org/events/symposium/africa-arab-regions2025/) in December 2025. His dedication and hard work made the event a success. Not a surprise from a FIRST member who has paid enormous efforts for the success of the community since an initial AfricaCERT event hosted in Mauritius in 2014. \n\n_“Hosting the FIRST and AfricaCERT Technical Symposium in Mauritius in December 2025 demonstrated the power of collaboration in building cyber resilience, uniting experts across regions to address today's challenges and prepare for tomorrow's digital threats”_ said Dr Kaleem Ahmed Usmani.\n\n\n","image":"https://www.first.org/_/img/news/firstpost2512-spotlight-drkaleem.jpg","published":"Tue, 16 Dec 2025 00:00:00 GMT"},{"id":41144,"title":"FIRST Reports Record Growth and Expanding Global Impact","summary":"Momentum Year Marked by Record Membership, New Resources, and Broader Collaboration Across 110+ Countries","link":"https://www.first.org/newsroom/releases/20251210","image":"https://www.first.org/_/img/first-big-icon.png","published":"Wed, 10 Dec 2025 14:00:00 GMT"},{"id":41146,"title":"Paris 2026 FIRST Technical Colloquium","summary":"February 9-10, 2026
\nParis (FR)
","link":"https://www.first.org/events/colloquia/paris2026/","image":"https://www.first.org/_/e/paris2026/paris2026-sq.jpg","published":"Tue, 09 Dec 2025 00:00:00 GMT"},{"id":41147,"title":"Bangalore 2026 FIRST Technical Colloquium","summary":"February 10-11, 2026
\nBangalore (IN)
\n\\#BANGALORETC26","link":"https://www.first.org/events/colloquia/bangalore2026/","image":"https://www.first.org/_/e/bangalore2026/bangalore-2026-sq.jpg","published":"Tue, 09 Dec 2025 00:00:00 GMT"},{"id":41148,"title":"2026 FIRST Regional Symposium for Central Asia","summary":"February 26-27, 2026
\nTashkent (UZ)
\nCo-hosted by UZCERT","link":"https://www.first.org/events/symposium/central-asia2026/","image":"https://www.first.org/_/e/central-asia2026/central-asia2026-sq.jpg","published":"Tue, 09 Dec 2025 00:00:00 GMT"},{"id":41149,"title":"CVE | FIRST VulnCon 2026 & Annual CNA Summit","summary":"Early Registration Available!
\nApril 13-16, 2026
\nScottsdale (USA)
\n\\#VULNCON26","link":"https://www.first.org/conference/vulncon26","image":"https://www.first.org/_/e/vulncon26/vulncon26-sq.jpg","published":"Tue, 09 Dec 2025 00:00:00 GMT"},{"id":41150,"title":"2026 Cyber Threat Intelligence Conference","summary":"SAVE THE DATE
\nApril 21-23, 2026
\nMunich (DE)
\n\\#FIRSTCTI26","link":"https://www.first.org/conference/firstcti26/","image":"https://www.first.org/_/e/firstcti26/firstcti26-sq.jpg","published":"Tue, 09 Dec 2025 00:00:00 GMT"},{"id":41151,"title":"38th Annual FIRST Conference","summary":"Early Registration Available!
\nJune 14-19, 2026
\nDenver (US)
\n\\#FIRSTCON26","link":"https://www.first.org/conference/2026/","image":"https://www.first.org/_/e/firstcon26/firstcon26-sq.jpg","published":"Tue, 09 Dec 2025 00:00:00 GMT"},{"id":41152,"title":"Message from the Chair","summary":"We all know that FIRST stands for **Forum of Incident Response and Security Teams**. Even though most FIRST members are focusing on Incident Response the cohort of Security Teams is increasing too. During the last quarter of 2025, we reached the **1,024 milestone** of active members split in 825 teams, 196 Liaisons, and 3 Associates. It took 35 years, but let's guess that reaching 2,048 active members will come faster. \n\nMost member teams bear 'CSIRT', 'CERT' or 'PSIRT' in their names, and have been built, got inspiration from or evolved using the well known [**CSIRT Framework**](https://www.first.org/standards/frameworks/csirts/) or the [**PSIRT Framework**](https://www.first.org/standards/frameworks/psirts). Many use [**SIM3**](https://opencsirt.org/csirt-maturity/sim3-and-references/) maturity model as a way to assess then improve their organisation, procedures, and better handle human and tooling aspects.","link":"https://www.first.org/newsroom/releases/202512-1","image":"https://www.first.org/_/img/news/firstpost2512-message-chair-2.jpg","published":"Tue, 09 Dec 2025 00:00:00 GMT"},{"id":41160,"title":"Balkan Cybersecurity Days 2026","summary":"March 18-20, 2026
\nShkodër, Albania (AL)
\n\\#BCD2026","link":"https://www.first.org/events/colloquia/bcd2026/","image":"https://www.first.org/_/e/bcd2026/bcd2026-sq.jpg","published":"Tue, 09 Dec 2025 00:00:00 GMT"},{"id":41142,"title":"Building Resilience Through Reporting","summary":"The Actioning Alerts and Advisories (A4) project aimed to improve threat reporting in cybersecurity by providing technical expertise, analysis, and communications support to National Cybersecurity Incident Response Teams (CSIRTs). The project worked with teams from four countries, fostering collaboration and knowledge-sharing","link":"https://www.first.org/blog/20251201-NatCSIRT","image":"https://www.first.org/blog/","published":"Mon, 01 Dec 2025 00:00:00 GMT"},{"id":41143,"title":"Building Resilience Through Reporting","summary":"he Actioning Alerts and Advisories (A4) project aimed to improve threat reporting in cybersecurity by providing technical expertise, analysis, and communications support to National Cybersecurity Incident Response Teams (CSIRTs). The project worked with teams from four countries, fostering collaboration and knowledge-sharing\namong stakeholders, and empowering CSIRTs to create actionable reports that can be used to prevent cyber threats.","link":"https://www.first.org/blog/20251201-NatCSIRT","published":"Mon, 01 Dec 2025 00:00:00 GMT"},{"id":41141,"title":"2025 Q4 Vulnerability Publication Forecast","summary":"Usually, we begin a blog post with a review of last quarter, but our volunteer team couldn’t get a forecast out last quarter. We had several pressing matters between multiple team members, and we apologise. So, we’ll move swiftly on to this quarter’s predictions.","link":"https://www.first.org/blog/20251016-Q4Vulnerability-Forecast","image":"https://www.first.org/blog/_media/20240923-image01.png","published":"Thu, 16 Oct 2025 00:30:00 GMT"},{"id":41140,"title":"Paris 2026 FIRST Technical Colloquium","summary":"SAVE THE DATE
\nFebruary 9-10, 2026
\nParis (FR)
\nMore details coming soon!","image":"https://www.first.org/_/e/paris2026/paris2026-sq.jpg","published":"Tue, 07 Oct 2025 00:00:00 GMT"},{"id":41139,"title":"FIRST CORE","summary":"A new direction for sponsorship was announced at the 37th Annual FIRST conference in Denmark. [FIRST CORE](https://www.first.org/global/core/) provides critical funding to expand FIRST’s Community and Capacity Building Program (CCB), which focuses on developing incident response capabilities in regions where resources are limited. \n\nCORE’s goals are to foster **community**; improve **operational** capacity across the globe, build **resilience** across the digital ecosystem, and **empower** incident responders and their teams. ","link":"https://www.first.org/newsroom/releases/202509-6","image":"https://www.first.org/_/img/news/firstpost2509-core.jpg","published":"Mon, 29 Sep 2025 00:00:00 GMT"},{"id":41137,"title":"Training and CCB","summary":"FIRST continues to provide training on different cyber security topics and in different parts of the world through our Community Trainers and CCB program. From June onwards, FIRST has conducted the following training, supported by the trainers in the [FIRST community](https://www.first.org/community). We highly appreciate the contribution by the trainers. ","link":"https://www.first.org/newsroom/releases/202509-8","image":"https://www.first.org/_/img/news/firstpost2509-training-2.jpg","published":"Thu, 25 Sep 2025 00:00:00 GMT"},{"id":41129,"title":"Digital Sovereignty and Communities","summary":"In September, I was invited to give a talk on digital sovereignty, which is a hot topic these days, given that an increasing number of states seem to depend on a handful of hyperscalers from just two countries. Most solutions range from the fairly naive 'Just use Linux' to the probably overly ambitious 'Let's build our own hyperscalers'. I won't comment on the former, but I will add that building a hyperscaler is not a trivial undertaking. However, one thing that is constantly forgotten is that great technology doesn't develop in isolation. Silicon Valley is called that for a reason, not Silicon Island.","link":"https://www.first.org/newsroom/releases/202509-3","image":"https://www.first.org/_/img/news/firstpost2509-dsc.jpg","published":"Wed, 24 Sep 2025 00:00:00 GMT"},{"id":41130,"title":"Member Spotlight","summary":"FIRST is adding a new feature to our quarterly newsletter called the Member Spotlight. This will be a recurring article that will recognize member contributions to the FIRST community including:\n \n- **Impact**: The contribution has made an impact on the development or growth of FIRST or the global Incident Response and Security community.\n- **Influence**: The contribution has supported or influenced the work of others in FIRST or their region/sector.\n- **Innovation**: The contribution has broken new ground with original thinking and creativity\n","link":"https://www.first.org/newsroom/releases/202509-5","image":"https://www.first.org/_/img/news/firstpost2509-spotlight.jpg","published":"Wed, 24 Sep 2025 00:00:00 GMT"},{"id":41131,"title":"Special Interest Group Updates","summary":"**General Update** \nThe annual conference is always an important milestone for the Special Interest Groups, as they usually present on what they have done over the past year and many also enjoy getting the chance to meet in person. For those of you who have missed the SIG Updates, you can find the [slides on the conference website.](https://www.first.org/conference/2025/program#pSIG-Updates) \n","link":"https://www.first.org/newsroom/releases/202509-7","image":"https://www.first.org/_/img/news/firstpost2401-sig-news.jpg","published":"Wed, 24 Sep 2025 00:00:00 GMT"},{"id":41132,"title":"Strategic Initiatives Amplification, Video Series Completion and LinkedIn Growth Surge","summary":"Growth Stack Media secured 41 pieces of earned media coverage for FIRST in Q3FY25 across notable publications including Cybernews, Cyber Defense Wire, and SecurityBrief. You can view the full CoverageBook of articles [here](https://www.first.org/newsroom/newsletters/FIRST_FY25Q3_PR_Coverage.pdf).","link":"https://www.first.org/newsroom/releases/202509-9","image":"https://www.first.org/_/img/news/firstpost2509-media.jpg","published":"Wed, 24 Sep 2025 00:00:00 GMT"},{"id":41133,"title":"Bangalore 2026 FIRST Technical Colloquium","summary":"SAVE THE DATE
\nFebruary 10-11, 2026
\nBangalore (IN)
\n\\#BANGALORETC26","link":"https://www.first.org/events/colloquia/bangalore2026/","image":"https://www.first.org/_/e/bangalore2026/bangalore-2026-sq.jpg","published":"Wed, 24 Sep 2025 00:00:00 GMT"},{"id":41134,"title":"2026 FIRST Regional Symposium for Central Asia","summary":"February 26-27, 2026
\nTashkent (UZ)
\nCo-hosted by UZCERT\n","link":"https://www.first.org/events/symposium/central-asia2026/","image":"https://www.first.org/_/e/central-asia2026/central-asia2026-sq.jpg","published":"Wed, 24 Sep 2025 00:00:00 GMT"},{"id":41135,"title":"2026 Cyber Threat Intelligence Conference","summary":"SAVE THE DATE
\nApril 21-23, 2026
\nMunich (DE)
\n\\#FIRSTCTI26","link":"https://www.first.org/conference/firstcti26/","image":"https://www.first.org/_/e/firstcti26/firstcti26-sq.jpg","published":"Wed, 24 Sep 2025 00:00:00 GMT"},{"id":41136,"title":"38th Annual FIRST Conference","summary":"Early Registration Available!
\nJune 14-19, 2026
\nDenver (US)
\n\\#FIRSTCON26","link":"https://www.first.org/conference/2026/","image":"https://www.first.org/_/e/firstcon26/firstcon26-sq.jpg","published":"Wed, 24 Sep 2025 00:00:00 GMT"},{"id":41138,"title":"FIRST Upcoming Events","summary":"FIRST Upcoming Events (as of September 2025)","link":"https://www.first.org/newsroom/digest/20250925","published":"Thu, 18 Sep 2025 18:00:00 GMT"},{"id":41128,"title":"FIRST Accelerates Global Security Initiatives with Upcoming Conference, Leadership Expansion, and Technical Advancement Programs","summary":"Vulnerability Forecasting Colloquium, New Threat Hunting SIG, and International Partnerships Drive Global Cybersecurity Impact","link":"https://www.first.org/newsroom/releases/20250916","published":"Tue, 16 Sep 2025 00:00:00 GMT"},{"id":41119,"title":"FIRST POST: Jul-Sep 2025","summary":"Message from the Chair; Digital Sovereignty and Communities; Member Spotlight; FIRST CORE; Special Interest Group Updates; Training and CCB; Strategic Initiatives Amplification, Video Series Completion and LinkedIn Growth Surge; Upcoming Events","link":"https://www.first.org/newsroom/post/202509","published":"Thu, 04 Sep 2025 00:00:00 GMT"},{"id":41120,"title":"2025 FIRST & AfricaCERT Symposium: Africa and Arab Regions","summary":"Call for Speakers is Open!
\nDecember 2–5, 2025
\nMauritius","link":"https://www.first.org/events/symposium/africa-arab-regions2025/","image":"https://www.first.org/_/e/africa-arab-regions2025/symposium-africa-arab-regions2025-sq.jpg","published":"Thu, 04 Sep 2025 00:00:00 GMT"},{"id":41121,"title":"Oslo 2025 FIRST Technical Colloquium Cold Incident Response","summary":"October 7-9, 2025
\nOslo (NO)","link":"https://www.coldincidentresponse.no/","image":"https://www.first.org/_/e/oslo2025/oslo2025-sq.jpg","published":"Thu, 04 Sep 2025 00:00:00 GMT"},{"id":41122,"title":"2025 FIRST Regional Symposium Latin America & Caribbean","summary":"October 8-9, 2025
\nSan Salvador (SV)
\nCo-located with LACNIC / LACNOG 2025","link":"https://www.first.org/events/symposium/latam2025/","image":"https://www.first.org/_/e/latam2025/latam2025-sq.jpg","published":"Thu, 04 Sep 2025 00:00:00 GMT"},{"id":41123,"title":"2025 Mexico City Technical Colloquium","summary":"October 27-29, 2025
\nMexico City (MX)
\n\\#FIRSTMX2025","link":"https://www.first.org/events/colloquia/firstmx2025/","image":"https://www.first.org/_/e/mexico2025/mexico2025-sq.jpg","published":"Thu, 04 Sep 2025 00:00:00 GMT"}]}