2027 Cyber Threat Intelligence Conference

About the Conference

The first FIRST Cyber Threat Intelligence gathering was launched in 2016 as a Technical Colloquium through a partnership between FIRST and Siemens. Hosted in Munich, Germany, the event brought together a small but diverse group of stakeholders from industry, government, academia, and the security community. Designed as a trusted forum for collaboration, it created opportunities for meaningful dialogue among participants who would not typically meet at traditional cybersecurity events.

Building on the success of Munich, FIRST partnered with OASIS to launch the first official Cyber Threat Intelligence Symposium in Prague, Czech Republic, in December 2017.

What began as a focused community event has since evolved into a globally recognized gathering for threat intelligence professionals. Today, FIRST is proud to present it as the Cyber Threat Intelligence Conference, reflecting its continued growth in scale, reach, and industry influence.

The conference provides a unique platform for practitioners, leaders, researchers, and policymakers to exchange knowledge, discuss emerging threats, and explore innovative approaches to cyber threat intelligence. The program combines strategic leadership discussions, technical presentations, and interactive workshops, creating opportunities for attendees at every level of expertise. Plenary sessions examine real-world challenges facing the cybersecurity community, while hands-on workshops enable deeper engagement with leading experts in collaborative, small-group settings.

While the event has expanded significantly over the years, its mission remains unchanged: to bring together diverse cybersecurity stakeholders and advance the practice of threat intelligence through open collaboration, shared expertise, and trusted relationships.

While the conference has expanded in scope, reach, and influence, its mission remains unchanged: to unite a diverse community of cybersecurity stakeholders and advance the field through open collaboration and shared expertise.

About FIRST

FIRST (Forum of Incident Response and Security Teams) is an international, nonprofit association of trusted Computer Security Incident Response Teams (CSIRTs), Product Security Incident Response Teams (PSIRTs), and independent security researchers from the public, private, and academic sectors. Founded in 1990, FIRST promotes global collaboration in cybersecurity through incident prevention, coordinated response, and trusted information sharing.

Today, FIRST brings together more than 900 member teams across over 100 countries, forming one of the world's largest and most trusted incident response communities. Through best practices, tools, training, and trusted communication channels, FIRST helps strengthen the global cybersecurity ecosystem and enhances the ability of organizations to prevent, detect, and respond to security incidents.