FIRST.org

FIRST.org

@first.org

Improving Security Together

304 followers0 following514 posts

FIRST.org
@first.org

🎙️ Watch Infosecurity Magazine's "What to Fix First" webinar on risk-based remediation, with Nick Leali, @first.org CVSS SIG Co-Chair and PSIRT Incident Manager at @cisco.com. 🔗 go.first.org/XQqWy #CVSS #VulnerabilityManagement

infosecurity-magazine.comWhat to Fix First: A Practical Guide to Risk-Based RemediationA panel of vulnerability management experts will explore how to move beyond broad metrics like CVSS to prioritize vulnerabilities, make practical remediation decisions and verify that risks have been effectively addressed
FIRST.org
@first.org

📰 @techtargetnews.bsky.social's James Walker featured Art Manion, co-chair of the @first.org Vulnerability Coordination SIG, on the PHP2Shell disclosure and what AI-driven co-discovery means for long embargoes. 🔗 Read more: go.first.org/dKmnD #cybersecurity #infosec

techtarget.comPHP2Shell disclosure unravels after leaks forced early patch drop | TechTargetLeaked CVE details and a broken embargo turned a routine PHP patch into an emergency scramble, forcing preemptive website shutdowns.
FIRST.org
@first.org

(1/3) FIRST recently co-facilited Operation Crossroad, a TTX designed for executive-level cyber security professionals, to train skills in cybersecurity leadership and cross-border cooperation in Africa. There were two sessions - one for directors and one for directors general.

FIRST.org
@first.org

(2/3) The scenario followed four fictional African countries dealing with a cyber crisis that had political ramifications and spilled dramatically across borders.

FIRST.org
@first.org

(3/3) Our thanks goes out to the Kingdom of Morocco for their collaboration with the Smart Africa Digital Academy (@SADASmartAfrica) and the World Bank (@WorldBankGroup) for creating this opportunity for African teams to increase their capabilities.

FIRST.org
@first.org

BankInfoSecurity's Tiffany Wang digs into CVSS 4.0's Exploit Maturity metric and what it means for how teams prioritize vulnerabilities. @first.org CVSS SIG Co-Chair and Cisco PSIRT Incident Manager Nick Leali explains the design. 🔗 go.first.org/ZiMet #cybersecurity

bankinfosecurity.comCVE Authorities Make Score 8 Look More Like the New 10CVSS 4.0 lets threat intelligence alter a vulnerability's enriched score without changing its Base severity, prompting experts to warn that vendors and defenders
FIRST.org
@first.org

We just wrapped up the 7th Operator Cybersecurity Technical Training and 6th Cybersecurity Drill in Uganda with the UCC and @UgCERT and one of our T3 trainers: Richmond Redwood-Sawyerr (seen in the picture, right, with our Regional Liaison Lawrence Muchilwa).

FIRST.org
@first.org

The training focused on using agentic AI as a way to increase the skills of each team during an incident. Giving smaller teams a chance to narrow any technical gaps.

FIRST.org
@first.org

Charles-Louis Machuron, Silicon Luxembourg, recently interviewed @jvdham.nl, @first.org liaison member and associate professor at the University of Twente, on VulnOptiCON 2026. Read more: go.first.org/JxwxD #cybersecurity #infosec #VulnerabilityManagement

siliconluxembourg.luLuxembourg Set To Host Cyber Event VulnOptiCON 2026 - Silicon LuxembourgFIRST rebrands Vuln4Cast as VulnOptiCON 2026, a three-day Luxembourg conference on AI, vulnerability forecasting and cybersecurity risk, Sept 23-25.
FIRST.org
@first.org

Want to help shape the #FIRSTCTI27 agenda? Consider applying to be a part of the 2027 Cyber Threat Intelligence Conference Program Committee! The form will close September 15, so if you're interested, fill out the form today: firstdotorg.wufoo.com/forms/cti27-... 🥨

firstdotorg.wufoo.comCTI27 Program Committee InterestIf you wish to be considered for the CTI27 Program Committee, please complete this interest form. Interest is due by September 15, 2026. Thank you for your support!
FIRST.org
@first.org

🌐 @first.org's 2025 Annual Report is here. 834 member teams across 113 countries, 133 new applications, 1,056 delegates at #FIRSTCON25, and 41 training workshops worldwide. Read the full report: go.first.org/mMkDK #cybersecurity #IncidentResponse

FIRST.org
@first.org

Serbia's CERT has adaptive training as a core philosophy, ensuring it is relevant to specific roles, sectors, & maturity levels rather than delivered as a one-size-fits-all package. (This is how we at FIRST like to work, so we fully endorse this model) go.first.org/z2SYN

go.first.orgReaching Out: Serbia’s CERT Expands and Adapts TrainingSRB-CERT has a new training platform, a wide range of exercises and uses all of them to create the best experience for participants. Ensuring everyone gets what they need.
FIRST.org
@first.org

Join us in Luxembourg for #VulnOptiCON 2026, @first.org's evolution of Vuln4Cast. Hosted in partnership with the Computer Incident Response Centre Luxembourg (CIRCL). 📆 Sept 23-25, 2026 🎟️ Limited tickets available 🔗 go.first.org/kxOHk #cybersecurity #IncidentResponse #VulnerabilityManagement

first.orgFIRST Unveils VulnOptiCON 2026 to Address the Future of Vulnerability, Threats and Cybersecurity RiskGlobal security practitioners convene to advance vulnerability tracking and exploitation predictability, and explore security risks of Artificial Intelligence (AI)
FIRST.org
@first.org

New on the @first.org blog: John Hollenberger, Lead Consultant, FortiGuard Proactive Services at Fortinet and Jennifer Hollenberger, PhD, LCSW, on the psychological toll of #IncidentResponse. Read more: go.first.org/rymDE #cybersecurity #infosec

first.orgMind Over Malware: The Hidden Psychological Toll of Incident ResponseIt’s 3:16 a.m. A failed login alert triggers alongside a suspicious PowerShell command alert. The overnight analyst tags it for investigation and moves on.
FIRST.org
@first.org

❄️Save the date for Oslo 2026 FIRST TC: Cold Incident Response 📍 Oct 13–15 🔗go.first.org/ASews Join a community of hands-on defenders sharing real stories, practical insights, and lessons from the front lines of security operations.

go.first.orgFIRST TC Oslo: Cold Incident ResponseFIRST TC Oslo: Cold Incident Response is an annual conference organized by the Norwegian FIRST community, focusing on security monitoring and incident response. This website provides information on the current conference.
FIRST.org
@first.org

🌐 The new issue of NIC.br's Internet Sectoral Overview features @first.org Chair Olivier Caleff on 5 shifts reshaping #cybersecurity #IncidentResponse, plus how CSIRT-CERT trust and the SIM3 model hold it together. 📖 Read more (pages 19-29): go.first.org/KJkmf #CSIRT

cetic.brYear XVIII - No. 2 - Internet in Brazil: robustness, trust, and securityCentro Regional de Estudos para o Desenvolvimento da Sociedade da Informação. Departamento do NIC.br que produz indicadores e estatísticas sobre a adoção de TIC.
FIRST.org
@first.org

🎙️ New #FIRSTImpressions episode! Recorded live at #FIRSTCON26, keynote speaker Tim Brown (Team8, former SolarWinds CISO) shares powerful lessons on incident response, leadership, resilience, and the human side of cybersecurity🎧 media.first.org/podcasts/FIR...

FIRST.org
@first.org

New on the @first.org blog: Jon Baker, VP, Threat-Informed Defense, AttackIQ, and Co-founder of MITRE's Center for Threat-Informed Defense, on why "how fast can we patch" is no longer the right question. Read more: go.first.org/xaqpW #cybersecurity

first.orgThreat-INFORM to Optimize Security OperationsAt #FIRSTCON26 in Denver, Jon's session introduced MITRE INFORM, the open-source threat-informed defense maturity model, walking attendees through a self-assessment and practical steps to move from reactive to measurable defense.
FIRST.org
@first.org

The 2026 FIRST TC: Cold Incident Response (13–15 Oct, Oslo) is seeking sponsors to support lunches, refreshments, and the community dinner for ~400 cybersecurity practitioners. No sponsor booths. No paid talks. Just community. 📩 oslo-tc@first.org www.coldincidentresponse.no

coldincidentresponse.noFIRST TC Oslo: Cold Incident ResponseFIRST TC Oslo: Cold Incident Response is an annual conference organized by the Norwegian FIRST community, focusing on security monitoring and incident response. This website provides information on the current conference.
FIRST.org
@first.org

Happy Birthday to CERT Tonga! 🎉🇹🇴🥳 10 years of protecting the Pacific is a great achievement. We've written up a blog talking about how the team is going to celebrate. go.first.org/Jqvbp

FIRST.org
@first.org

The strongest partnerships in cybersecurity aren't built over email, they're built face to face. 🤝 Read how the connections made at #FIRSTCON26 become the relationships we rely on when it matters most: www.first.org/blog/2026070...

first.orgWhen FIRSTCON26 Rode into DenverWell, partner... what a week. This June, 700 cybersecurity professionals saddled up in Denver, Colorado for the 38th Annual FIRST Conference (FIRSTCON26), proving once again that when the global incident response community gets together, great things happen.