Did you miss VulnCon 2026? Check out the conversations everyone’s still talking about, now on YouTube!

Dive into expert discussions on CVE quality, VEX, AI-driven remediation, EPSS, supply chain security, vulnerability coordination, and more from leaders across the global cybersecurity community.

Explore the TLP:CLEAR sessions at: https://www.youtube.com/playlist?list=PLBAUUhONOrO_yESOH6JnwWBoRdDRVXDr0

#VulnCon2026 #FIRSTdotOrg #CyberSecurity #CVE

CVE | FIRST VulnCon 2026 & Annual CNA Summit

YouTube

Cyber threat intelligence with a Bavarian backdrop 🍻

#FIRSTCTI26 brought the global CTI community to Munich for a week filled with collaboration, intelligence sharing, technical discussions, and plenty of memorable moments along the way. Between thought-provoking sessions and conversations that continued well beyond the conference rooms, the event highlighted the power of bringing the international cybersecurity community together in one place.

From emerging threats to new partnerships (and maybe a pretzel or two), FIRSTCTI26 delivered an unforgettable experience.

Missed it, or just want to relive the energy from Munich? Read the official recap here: https://www.first.org/blog/20260518-FIRSTCTI26-Event-Recap

#FIRSTCTI #ThreatIntelligence #CyberSecurity #Munich #FIRSTdotOrg

FIRSTCTI26 Recap: Threat Intel & Pretzels Sold Out!

Ten years ago, a group of cybersecurity professionals gathered in Munich with a simple but ambitious idea: create a trusted space where threat intelligence experts from different sectors could actually talk to each other, collaborate openly, and tackle emerging challenges together.

FIRST — Forum of Incident Response and Security Teams

Sunshine, cacti, and #vulnerabilitycoordination done right ☀️🌵

#VulnCon2026 brought the global vulnerability management community to sunny Scottsdale for a week of technical sessions, industry collaboration, and conversations that carried from conference halls to poolside networking. The event blended serious discussions on vulnerability coordination and disclosure with the kind of atmosphere that makes attendees wish they’d booked one more day in Arizona.

From insightful presentations to new connections across the cybersecurity community, VulnCon 2026 proved once again why it continues to grow year after year.

Catch the highlights in the official recap blog: https://www.first.org/blog/20260518-Vulncon26-Event-Recap

#VulnCon #CyberSecurity #VulnerabilityManagement #Scottsdale #FIRSTdotOrg

VulnCon 2026 Recap: Sun, Strategy, and Security!

What happens when you gather hundreds of vulnerability management professionals in the Arizona sunshine for a week of collaboration, workshops, debates, and margaritas? VulnCon 2026: and this year's event was bigger, bolder, and more collaborative than ever.

FIRST — Forum of Incident Response and Security Teams

What happens when cyber threat intelligence professionals from around the world come together? Conversations turn into collaboration and collaboration strengthens the global security community ✊🌍

#FIRSTCTI26 brought together analysts, researchers, and security leaders for three days of discussion, knowledge sharing, and forward-looking conversations on the evolving threat landscape. From emerging trends and intelligence sharing to relationship building across organizations and borders, the event highlighted why community-driven CTI work matters more than ever.

If you couldn’t attend, or want to relive the experience, read the official event recap and catch some of the highlights and #FOMO from FIRSTCTI26: https://www.first.org/blog/20260518-FIRSTCTI26-Event-Recap

#FIRSTCTI #ThreatIntelligence #CyberSecurity #CyberThreatIntelligence #FIRSTdotOrg

FIRSTCTI26 Recap: Threat Intel & Pretzels Sold Out!

Ten years ago, a group of cybersecurity professionals gathered in Munich with a simple but ambitious idea: create a trusted space where threat intelligence experts from different sectors could actually talk to each other, collaborate openly, and tackle emerging challenges together.

FIRST — Forum of Incident Response and Security Teams

What happens when global incident response experts gather in the heart of Switzerland?

The recent FIRST #TechnicalColloquia, “Peak Incident Response,” hosted by CH-CERTs as part of Geneva Cyber Week, created a space for collaboration, knowledge sharing, and discussion around the evolving cybersecurity landscape.

Catch the full event recap on the FIRST blog: https://www.first.org/blog/20260518-Peak-Incident-Response-2026

#FIRSTdotOrg #CyberCommunity #CyberDefense #IncidentResponse #GenevaCyberWeek

Peak Incident Response 2026

This year we held our first Swiss Technical Colloquium - Peak Incident Response - as part of the Geneva Cyber Week (GCW). So, why another TC? The GCW is an annual global platform to advance international cooperation and resilience in cyberspace. This sounds a bit like it could describe just about any FIRST event. But the GCW mostly caters to policy folks, diplomats, and members of civil society, including some of our trusted partners such as DCAF and the HD Centre.

FIRST — Forum of Incident Response and Security Teams

@firstdotorg

I just want to say thank you and wow for offering FREE TRAINING & a CERTIFICATE for the new CVSS v4.0. You guys should promote this more. It really opened my eyes to the awesome potential in v4's base, threat, and environmental scoring (CVSS-BTE). Hope to see more tools supporting this.

Link: https://www.first.org/cvss/training

#FIRSTdotOrg #CVSS #BuildingTrust #PSIRT #CSIRT

FIRST — Forum of Incident Response and Security Teams

FIRST — Forum of Incident Response and Security Teams

The CVSS Special Interest Group is proud to announce the official release of CVSS v4.0. This latest release marks a significant step forward with added capabilities crucial for teams with the importance of using threat intelligence and environmental metrics for accurate scoring at its core.

Critical in the interface between supplier and consumer, CVSS provides a way to capture the principal characteristics of a security vulnerability and produces a numerical score reflecting its technical severity to inform and provide guidance to businesses, service providers, government, and the public.

The numerical score can be represented as a qualitative severity rating (such as low, medium, high, and critical) to help organizations properly assess and prioritize their vulnerability management processes and prepare defenses against cyber-attacks.

Furthermore, this system allows the consumer to also assess real-time threat and impact, arming them with vital information to help to defend themselves against an attack.

The Common Vulnerability Scoring System is a published standard used by organizations worldwide, and this latest version of CVSS 4.0 seeks to provide the highest fidelity of vulnerability assessment for both industry and the public.

More can be found here: https://first.org/cvss

#FIRSTdotOrg #CVSS #BuildingTrust #PSIRT #CSIRT

Common Vulnerability Scoring System SIG

FIRST — Forum of Incident Response and Security Teams
FIRST Post: Jul - Sep 2023 edition is out! New Chair, news from Montreal, SIG news, Training, Diversity & Inclusion, a new board member, an update from M3AAWG, our next conference in Japan and upcoming events.
https://www.first.org/newsroom/post/202307
#FIRSTdotOrg #collaboration #BuildingTrust
FIRST POST: Jul-Sep 2023

Great to see the FIRST CTI event recognised as a go-to event for Cyber Threat Intel.

Register now for this year's event: https://www.first.org/conference/berlin2023/ and save the date for 2024: Apr 15-17.

https://blog.pulsedive.com/the-biggest-best-cti-events/

#FIRSTdotOrg #collaboration #BuildingTrust #PSIRT #CSIRT #CTI

2023 Cyber Threat Intelligence Conference | #FIRSTCTI23

FIRST — Forum of Incident Response and Security Teams

Security conferences means stickers, and I love stickers.

Listening to some interesting talks and is preparing for my talk with Hasain Alshakarti on Friday here at @firstdotorg.

#security #conference #firstdotorg #incidentresponse #blueteam