Call for Speakers & Workshops
This is the call for submissions for the 2026 FIRST Conference on Cyber Threat Intelligence (CTI), April 21-23, 2026. The event will be held at the Holiday Inn Munich - City Centre, Munich, Germany. There will be one day of workshops followed by two days of plenary sessions. This event will be open to both FIRST members and non-members.
TLP:CLEAR proceedings will be live-streamed and recorded to the FIRST YouTube channel.
Speakers may stipulate that their sessions be treated as confidential through TLP designation and all attendees are expected to respect this. TLP designations will be displayed on the agenda. Breaches of the FIRST Code of Conduct (including failing to respect the confidentiality of certain sessions) have consequences.
Questions about submission topics or sensitivity issues can be sent via email to the chair of the Program Committee: cticon-pc@first.org
- Program Co-Chairs: Patrick Grau and Dr. Thomas Schreck
- Program Committee: Full Listing Coming Soon
Call for Speakers
FIRST is seeking speakers that would like to present on topics related to Cyber Threat Intelligence including:
- How can you tell if your organization's CTI program is working well?
- Finding the needle in the haystack: how do we prioritize effectively?
- Failing forward: share case studies that highlight failures and/or successes of using CTI.
- Operationalizing CTI: effective or innovative tooling/technology for protection, detection, response, and CTI support.
- Overcoming CTI integration challenges in your SOC.
- CTI creation, enrichment, and refinement tips and tricks.
- CTI in context with digital forensics.
- Intelligence tradecraft wasn't invented yesterday: applying classic intelligence approaches to CTI.
- CTI 101 operationalization: intelligence requirements, threat modeling, collection management.
- Structuring CTI teams and career development for CTI analysts.
- Leveraging AI in the field of CTI.
The conference is dedicated to sharing best practices in cyber threat intelligence, including tools, methodologies, and collaborative approaches. To maintain a constructive and solutions-focused environment, we ask that submissions avoid topics centered on specific attacks or attacker groups.
Call for Workshops
FIRST is also seeking workshop submissions related to the above topics. There are multiple full or half-day tracks to be filled.
CFP Timeline
- Call for Papers Closes: November 5, 2025
- Acceptance Notifications: 1st Week of December 2025
Speaker Privileges
- Accepted presentations receive up to two (2) complimentary registration passes.
- Workshops receive up to two (2) complimentary registration passes; with 1 day passes available for workshop assistants.
Complimentary registrations are non-transferable.
Important Considerations
All proposals should be submitted via EasyChair. If you are new to EasyChair, a registration will be required before accessing the submission form.
Please provide key takeaways as bullet points in your submission.
More complete submissions (with paper uploads) will be given preferential treatment over abstract-only submissions, but all submissions will be given full consideration.
Submissions which the Programming Committee determines to be product pitches will be rejected.
Again, all submissions must be received by 23:59 UTC November 5, 2025.
