CIRCLE WITH A DOT

What happens when global incident response experts gather in the heart of Switzerland?

The recent FIRST #TechnicalColloquia, “Peak Incident Response,” hosted by CH-CERTs as part of Geneva Cyber Week, created a space for collaboration, knowledge sharing, and discussion around the evolving cybersecurity landscape.

Catch the full event recap on the FIRST blog: https://www.first.org/blog/20260518-Peak-Incident-Response-2026

#FIRSTdotOrg #CyberCommunity #CyberDefense #IncidentResponse #GenevaCyberWeek

Call for Speakers is Now Open! ️ Oslo 2026 FIRST TC: Cold Incident Response is officially accepting talk proposals.

Got blue‑team brilliance to share? Whether it’s incidents, monitoring, detection, engineering, tooling, or hard‑won stories from the trenches, we want to hear it. If the community can learn from it, it belongs on our stage.

Submission deadline: July 7 Feedback by: August 15

Ready to bring the heat to cold response? Submit your proposal: https://go.first.org/ASews

#technicalcolloquium #incidentresponse

Bring your cowboy boots and buckle up, but FIRST register for #FIRSTCON26 https://go.first.org/nQctu

️ Final roundup, folks.
This is your last chance to book within the #FIRSTCON26 hotel room block. The discounted rate rides out on May 15. Lock in your room, stay close to the action, and experience Denver the Mile High way. https://go.first.org/HxwZx

️ Denver’s callin’, partner!
Ridin’ into town for #FIRSTCON26? Don’t wait for tumbleweed. Book your hotel by Friday, May 15th, 2026, to score the discounted rate. Hitch your wagon and reserve today! https://go.first.org/55i80

FIRST's Q1FY26 Newsletter is here, and it's packed.

Here's a look at what's inside:

On Vulnerabilities & VulnCon

FIRST Chair Olivier Caleff reflects on VulnCon 2026 and what it means for how CSIRTs approach vulnerability management, from prioritization to escalation to the evolving role of EPSS in daily operations.

Global Policy & the UN Cybersecurity Mechanism

FIRST is engaging with the newly launched UN Global Cybersecurity Mechanism (G-Mech), bringing operational incident response expertise to international policy discussions.

Member Spotlight: Koen Van Impe

20+ years in cybersecurity, a core contributor to the MISP project, and a tireless open-source advocate.

Koen's work is a reminder of what community-first contribution looks like in practice.

SIG Updates

STP SIG published a white paper, authored by AUSCERT, on the future of CERTs/CSIRTs/ISACs
Vulnerability SIG forecast report predicted 2026 will be the first year to exceed 50,000 published CVEs
CTI SIG launched new educational videos and a blog series
NETSEC SIG published guidance on characterizing abusive IP proxies
Metrics SIG released Version 1.0 of Metrics for the FIRST CSIRT Services Framework

Community & Capacity Building

FIRST CORE welcomed support from the Internet Society and Internet Society Foundation through the newly launched Common Good Cyber Fund.

In two years, FIRST's Africa Regional Liaison initiative has worked with 1,210 cybersecurity professionals and delivered 50+ initiatives across 33 countries.

Events & Conferences

A strong start to the year with three Technical Colloquia: Paris, Bangalore, and Uzbekistan, each bringing together regional communities to share lessons on resilience, AI, and cyber response.

FIRST also announced its three flagship 2026 conferences: VulnCon (Scottsdale), the CTI Conference (Munich), and the 38th Annual Conference (Denver).

Looking Ahead

The 2026 FIRST AGM takes place June 15 during the Annual Conference in Denver and will also be streamed for remote observation.

Members, make sure your voting rep is updated before May 12!

Read more https://go.first.org/smsdl

#CyberDefense #cybersecurity
#IncidentResponse #infosec