Message from the Chair

By Olivier Caleff

We all know that FIRST stands for Forum of Incident Response and Security Teams. Even though most FIRST members are focusing on Incident Response the cohort of Security Teams is increasing too. During the last quarter of 2025, we reached the 1,024 milestone of active members. It took 35 years, but let's guess that reaching 2,048 active members will come faster.

Most member teams bear 'CSIRT', 'CERT' or 'PSIRT' in their names, and have been built, got inspiration from or evolved using the well known CSIRT Framework or the PSIRT Framework. Many use SIM3 maturity model as a way to assess then improve their organisation, procedures, and better handle human and tooling aspects.

Click here to read more

Member Spotlight

By Olivier Caleff

Let's cast some light on our first FIRST member spotlight: Dr Kaleem Ahmed Usmani from CERT-MU in Mauritius. The aim of this award is to recognize outstanding contributions and exceptional leadership in advancing cybersecurity collaboration and community engagement within the FIRST network.

Dr Kaleem Ahmed Usmani played a key role in organizing the 2025 FIRST & AfricaCERT Symposium: Africa and Arab Regions in December 2025. His dedication and hard work made the event a success. Not a surprise from a FIRST member who has paid enormous efforts for the success of the community since an initial AfricaCERT event hosted in Mauritius in 2014.

“Hosting the FIRST and AfricaCERT Technical Symposium in Mauritius in December 2025 demonstrated the power of collaboration in building cyber resilience, uniting experts across regions to address today's challenges and prepare for tomorrow's digital threats” said Dr Kaleem Ahmed Usmani.

Standards Update

By Trey Darley

Big milestone at the ITU-T SG17 closing plenary (Thursday 2025-12-11) in Geneva! The membership officially approved C396 XS.TP.epoch "Technical Report on Global Coordination Requirements for 2038-class rollover events (including but not limited to 2036, 2038, and 2106)".

Click here to read more

Special Interest Group Updates

By Désirée Sacher-Boldewin

The new Time Security SIG was approved and started operating. It exists to help the global FIRST community prepare for the 2036–2038 epoch rollovers. By coordinating research, testing, and outreach on time integrity, the SIG connects CSIRTs, vendors, and standards bodies to strengthen resilience across critical infrastructure. It´s goal is to ensure the world’s clocks keep running — securely — long past 2038. If you are interested in more information or want to join, head over to https://www.first.org/global/sigs/time/.

Click here to read more

Training and CCB

By Klée Aiken & Yukako Uchida

FIRST continues to provide training on different cybersecurity topics and in different parts of the world through our Community Trainers and CCB program. From October to December, FIRST has delivered nine trainings across seven economies with support from our training community, thanks to everyone for sharing their expertise and experience!

Click here to read more

Record Growth Announcement, Cybersecurity Awareness Month and African Cyber Capacity Building

By Jordan Mitchell & Summer Mitchell

Growth Stack Media secured and tracked 29 pieces of earned media coverage for FIRST in Q4FY25 across notable publications including Dark Reading, SecurityBrief, and IT Brief. You can view the full CoverageBook of articles here.

Click here to read more

Why We Can’t Stop Talking About Information Sharing

By Serge Droz

I know — it’s a tired topic. So much has been written about information sharing that it can feel like white noise. Yet, it remains a critical issue that we haven't quite solved.

During a recent trip to China, I heard a recurring concern: “People no longer share vulnerabilities with us.” When I mention this back home, the common retort is, “Well, of course — their state actors will just use that data to attack us.”

Click here to read more

FIRST Welcomes New Members and Thanks Sponsoring Teams!

By Olivier Caleff

FIRST has welcomed 64 new members over the second semester of 2025: 39 Teams, 23 Liaisons, and 2 Associates.

Most growth comes from new Teams and Liaisons from the US (+9), Dominican Republic (+7), Taiwan, Province of China (+5), Switzerland (+3), Germany (+3), Great Britain (+3), Republic of Korea (+3), and Mexico (+3).

Overall at the end of 2025, FIRST community covers 116 countries, and is composed of 824 Teams (+87), 4 Associates (+4), and 202 Liaisons (+44).

Click here to read more

Upcoming Events

Paris 2026 FIRST Technical Colloquium

February 9-10, 2026
Paris (FR)

Click here to read more

Bangalore 2026 FIRST Technical Colloquium

February 10-11, 2026
Bangalore (IN)
#BANGALORETC26

Click here to read more

2026 FIRST Regional Symposium for Central Asia

February 26-27, 2026
Tashkent (UZ)
Co-hosted by UZCERT

Click here to read more

Balkan Cybersecurity Days 2026

March 18-20, 2026
Shkodër, Albania (AL)
#BCD2026

Click here to read more

CVE | FIRST VulnCon 2026 & Annual CNA Summit

Early Registration Available!
April 13-16, 2026
Scottsdale (USA)
#VULNCON26

Click here to read more

2026 Cyber Threat Intelligence Conference

SAVE THE DATE
April 21-23, 2026
Munich (DE)
#FIRSTCTI26

Click here to read more

Zimbabwe FIRST Technical Colloquium

May 06-08, 2026
Victoria Falls (ZW)

Click here to read more

38th Annual FIRST Conference

Early Registration Available!
June 14-19, 2026
Denver (US)
#FIRSTCON26

Click here to read more