FIRST Cyber Threat Intelligence Conference 2026 (#FIRSTCTI26)
FIRST's annual cyber threat intelligence conference in Munich: plenary talks on making CTI actionable, AI and automation in threat intel, RAG poisoning risks, Telegram hunting, vulnerability-sighting forecasting, threat-informed detection engineering and scenario planning.
→ See editor’s top picks at FIRST Cyber Threat Intelligence Conference 2026 (#FIRSTCTI26)
- Billions of Indicators, Zero Action: How We Fixed That — Daniel Lima, Gabriel Testoni
In an era defined by an overwhelming deluge of cybersecurity data, security teams often find themselves "drowning by data, but starving for actionable outcomes." This critical challenge was the…
- Unlocking Insights: The Role of TI in Modern DFIR Operations — Efstratios Lontzetidis, Stef Collart
This talk, "Unlocking Insights: The Role of TI in Modern DFIR Operations," delivered by Stef Collart and Efstratios Lontzetidis of NVISO, addresses a critical challenge in cybersecurity: effectively…
- IC5 – Integrated CERT Cyber Communications, Collaboration & Coordination Framework — Rakesh Kumar Singh, Yudhishthira Sapru
National Computer Emergency Response Teams (CERTs) play a pivotal role in national cybersecurity, issuing a constant stream of advisories, alerts, and threat intelligence reports to a diverse…
- How NOT to be Your Adversary's Best Friend - Doing What Matters... — Brian Hein, James Shank
In their compelling FIRST CTI Conference talk, "How NOT to be Your Adversary's Best Friend - Doing What Matters...", Brian Hein and James Shank of Expel delivered a sharp critique of the current…
- Forecasting Vulnerability Sightings Under Data Scarcity: Modeling Sparse and Bursty Cyber Threat ... — Alexandre Dulaunoy, Cédric Bonhomme
In an era of rapidly escalating cyber threats and an overwhelming volume of vulnerability disclosures, security professionals face a critical challenge: identifying which vulnerabilities truly…
- Beyond Human Scale: AI and Automation as Force Multipliers in Cyber Threat Intelligence — Cydney Stude, Steve de Vera, Vamshi Krishna Edamadaka
In an era where cyber threats are escalating in volume and sophistication, security teams often find themselves outmatched by the sheer scale of data and the scarcity of human resources. The talk…
- Operational Efficiency in CTI: A Blueprint for SME's Using Open-Source AI and Cognitive Automation — Omar Saenz, Raquel Guzman
In the rapidly evolving landscape of cyber threats, small and medium enterprises (SMEs) face an increasingly challenging paradox: they confront the same sophisticated attacks as large corporations…
- One Bad OSINT Can Ruin Everything: How Secure is Your CTI RAG System, and Can You Minimize the Risk? — Sian-Yao Huang, Yen-Shan Chen
In an era where large language models (LLMs) are rapidly integrating into critical security operations, their inherent vulnerabilities pose significant risks. This talk, "One Bad OSINT Can Ruin…
- Hunting Cyber Threat Intelligence on Telegram — Emmanuele Zambon, Luca Allodi, Roy Ricaldi, Victor Asanache
In an increasingly fragmented and noisy cybercriminal landscape, monitoring platforms like Telegram for actionable Cyber Threat Intelligence (CTI) presents a significant challenge. This talk…
- OpenTide: From Raw Intelligence to Structured Threat-Informed Detections — Amine Besson, Rémi Séguy
In the rapidly evolving landscape of cyber threats, the ability to translate raw threat intelligence into actionable, deployable detections is paramount for any security operations center (SOC)…
- Filtering the Noise: Crafting an Actionable Threat Feed from Community-Shared Intelligence — JJ Josing
In the realm of cybersecurity, the sheer volume of threat intelligence can be overwhelming, often leading to analyst fatigue, delayed responses, and reduced trust in shared data. This talk…
- CTI-Transmute: Harmonizing Threat Intelligence in a Multi-Standard Ecosystem — Alexandre Dulaunoy, Christian Studer
The landscape of Cyber Threat Intelligence (CTI) is rich with diverse data formats, standards, and tools, each serving specific purposes and communities. While this variety fosters innovation, it…
- Dealing With Uncertainty: Scenario Planning for Cybersecurity Decision-Making — Gert-Jan Bruggink
In the dynamic and often chaotic landscape of modern cybersecurity, decision-makers frequently find themselves ill-equipped to answer critical questions about future threats. Gert-Jan Bruggink…
- Evaluating Threat Intelligence Through Velocity — Joe Slowik
In his compelling talk at the FIRST CTI Conference, Joe Slowik of Paralus presented a critical re-evaluation of how cyber threat intelligence (CTI) is assessed, arguing that velocity—the speed of…