Tessera
Folgen

FIRST.org

@first.org

Improving Security Together

477 Posts286 Follower0 Folgt
FIRST.org@first.org · yesterday

🌐 The new issue of NIC.br's Internet Sectoral Overview features @first.org Chair Olivier Caleff on 5 shifts reshaping #cybersecurity #IncidentResponse, plus how CSIRT-CERT trust and the SIM3 model hold it together. 📖 Read more (pages 19-29): go.first.org/KJkmf #CSIRT

Year XVIII - No. 2 - Internet in Brazil: robustness, trust, and security

Centro Regional de Estudos para o Desenvolvimento da Sociedade da Informação. Departamento do NIC.br que produz indicadores e estatísticas sobre a adoção de TIC.

cetic.br

FIRST.org@first.org · 2w ago

New on the @first.org blog: Jon Baker, VP, Threat-Informed Defense, AttackIQ, and Co-founder of MITRE's Center for Threat-Informed Defense, on why "how fast can we patch" is no longer the right question. Read more: go.first.org/xaqpW #cybersecurity

Threat-INFORM to Optimize Security Operations

At #FIRSTCON26 in Denver, Jon's session introduced MITRE INFORM, the open-source threat-informed defense maturity model, walking attendees through a self-assessment and practical steps to move from reactive to measurable defense.

first.org

FIRST.org@first.org · 3w ago

The 2026 FIRST TC: Cold Incident Response (13–15 Oct, Oslo) is seeking sponsors to support lunches, refreshments, and the community dinner for ~400 cybersecurity practitioners. No sponsor booths. No paid talks. Just community. 📩 oslo-tc@first.org www.coldincidentresponse.no

FIRST TC Oslo: Cold Incident Response

FIRST TC Oslo: Cold Incident Response is an annual conference organized by the Norwegian FIRST community, focusing on security monitoring and incident response. This website provides information on the current conference.

coldincidentresponse.no

FIRST.org@first.org · 3w ago

The strongest partnerships in cybersecurity aren't built over email, they're built face to face. 🤝 Read how the connections made at #FIRSTCON26 become the relationships we rely on when it matters most: www.first.org/blog/2026070...

When FIRSTCON26 Rode into Denver

Well, partner... what a week. This June, 700 cybersecurity professionals saddled up in Denver, Colorado for the 38th Annual FIRST Conference (FIRSTCON26), proving once again that when the global incident response community gets together, great things happen.

first.org

FIRST.org@first.org · 4w ago

New on the @first.org blog: Vishal Thakur (Atlassian CSIRT) and #FIRSTCON26 speaker, with co-author David Wearing, on PR3TACK, cataloguing adversary tactics before they hit an incident report, not after. go.first.org/TUmTi #cybersecurity #infosec

PR3TACK: The Preemptive Tactics & Countermeasures Knowledgebase

The Preemptive Tactics & Countermeasures Knowledgebase (PR3TACK) is an openly accessible framework designed to catalogue *plausible but unobserved* adversary tactics, techniques, and procedures (TTPs). Whereas existing knowledge bases such as MITRE ATT&CK and MITRE D3FEND are constructed retrospectively from observed adversarial activity, PR3TACK seeks to bridge the anticipatory gap. It provides a structured means of conceptualising techniques that adversaries could plausibly develop and deploy, based on the convergence of known system vulnerabilities, adversarial innovation patterns, and technological affordances. In so doing, PR3TACK offers defenders a strategic advantage: the ability to harden environments preemptively, before exploitation occurs. This paper outlines the rationale, structure, and prospective impact of PR3TACK, situating it within ongoing debates about proactive defence, resilience engineering, and the epistemology of cyber threat intelligence.

first.org

FIRST.org@first.org · 4w ago

The 2026 FIRST TC: Cold Incident Response (13–15 Oct, Oslo) is seeking sponsors to support lunches, refreshments, and the community dinner for ~400 cybersecurity practitioners. No sponsor booths. No paid talks. Just community. 📩 oslo-tc@first.org www.coldincidentresponse.no

FIRST TC Oslo: Cold Incident Response

FIRST TC Oslo: Cold Incident Response is an annual conference organized by the Norwegian FIRST community, focusing on security monitoring and incident response. This website provides information on the current conference.

coldincidentresponse.no

FIRST.org@first.org · last mo.

The 2026 FIRST TC: Cold Incident Response (13–15 Oct, Oslo) is seeking sponsors to support lunches, refreshments, and the community dinner for ~400 cybersecurity practitioners. No sponsor booths. No paid talks. Just community. 📩 oslo-tc@first.org www.coldincidentresponse.no

FIRST TC Oslo: Cold Incident Response

FIRST TC Oslo: Cold Incident Response is an annual conference organized by the Norwegian FIRST community, focusing on security monitoring and incident response. This website provides information on the current conference.

coldincidentresponse.no

FIRST.org@first.org · last mo.

The 2026 FIRST TC: Cold Incident Response (13–15 Oct, Oslo) is seeking sponsors to support lunches, refreshments, and the community dinner for ~400 cybersecurity practitioners. No sponsor booths. No paid talks. Just community. 📩 oslo-tc@first.org www.coldincidentresponse.no

FIRST TC Oslo: Cold Incident Response

FIRST TC Oslo: Cold Incident Response is an annual conference organized by the Norwegian FIRST community, focusing on security monitoring and incident response. This website provides information on the current conference.

coldincidentresponse.no

FIRST.org@first.org · 2mo ago

📈 @first.org's 2026 Mid-Year Vulnerability Forecast is live! CVE disclosures are running 46.3% above projections — putting the industry on pace for ~66,000 CVEs this year. 🔗 Read more: go.first.org/Fi2t8 #cybersecurity #FIRSTCON26 #infosec

FIRST Mid-Year Vulnerability Forecast Confirms Historic Surge, Projects ~66,000 CVEs in 2026

AI and a rapidly expanding CVE ecosystem blow past February's already-record projections by 46%, but exploitable risk remains flat

first.org

FIRST.org@first.org · 2mo ago

📰 CSO covered CISA's new BOD 26-04, telling federal agencies to patch smarter, not harder. It moves past #CVSS toward a four-factor risk model weighing internet exposure, KEV listing, exploit automation, and attacker impact. 🔗 Read more: go.first.org/YA2aS

CISA tells agencies to patch smarter, not harder — foreshadowing broader industry practice

A new CISA directive moves federal agencies beyond severity scores and toward a risk-based patching model that prioritizes real-world exploitation, asset exposure, and attacker impact — a framework many security leaders see as the future of vulnerability management.

csoonline.com