37th annual FIRST conference

The 37th Annual FIRST Conference is a global gathering of cybersecurity and incident response professionals. Organised by FIRST (the Forum of Incident Response and Security Teams)—an international nonprofit with over 700 member teams from more than 100 countries—the event aims to promote worldwide coordination and cooperation among computer security and incident response teams (CSIRTs).

This year’s theme, ‘Fortresses of the Future: Building Bridges, Not Walls,‘ emphasises the importance of openness, cooperation, and collective security in addressing today’s digital threats.

The event will open on Sunday, 22 June, with a series of full-day trainings. These hands-on workshops will allow participants to explore areas such as adversarial AI, vulnerability management, ransomware recovery, and purple teaming in operational technology environments. From 23 to 27 June, the main conference will feature keynote speeches, technical presentations, and panel discussions covering a wide range of topics—from threat intelligence and malware analysis to resilience-building, coordinated vulnerability disclosure, and metrics for incident response effectiveness.

Beyond the main sessions, the conference will host an extensive schedule of Birds of a Feather (BoF) meetings and Special Interest Group (SIG) gatherings. These smaller, informal sessions allow participants to engage deeply with niche topics, ranging from AI and industrial control systems to trusted communication protocols like the Traffic Light Protocol (TLP). Many of these meetings are open to all attendees and serve as entry points for those newly engaging with the FIRST community.

Networking is a key aspect of the conference, with social events and informal spaces designed to foster collaboration and the exchange of ideas. A welcome reception and evening gatherings offer further opportunities to meet peers and develop lasting professional connections.

The conference is open to both members of FIRST and the wider cybersecurity community, including Computer Security Incident Response Teams (CSIRTs), Product Security Incident Response Teams (PSIRTs), researchers, and other stakeholders working in digital security. All sessions will be conducted in English. A mobile app will be available to help participants navigate the agenda, and accommodation has been arranged at the adjacent AC Hotel Bella Sky Copenhagen.