Coffee in hand, ideas flowing, community buzzing — that’s the #VulnCon26 morning vibe. 🌵✨ #CVEProgram #CVSS 🔗https://go.first.org/WWSDp
FIRST.org
Improving Security Together
Posts
Breakouts are buzzing at #VulnCon26 — real talk, real challenges, real solutions. Exactly what this ecosystem needs. 🌵💬#vulnerabilitymanagement #IncidentResponse 🔗https://go.first.org/WWSDp
Help Net Security interviewed Art Manion, Tharros, FIRST Liaison Member, FIRST VRDX-SIG Chair, CVE Board Member, CVE SPWG Chair, on why vulnerability databases keep failing us, and what the community needs to do about it.
Highlights:
- Stop treating this as a data problem, it's first an architecture problem
- There is no minimum set of assertions that can confirm two systems describe the same vulnerability
- CVSS scores are pulling attention away from the harder work of real risk assessment
- 50%+ of vendor names in NVD's CPE data have naming inconsistencies, if you can't identify the product, nothing else matters
- Before writing new specs or building new tools, the community needs shared terms and principles
This research is part of ongoing collaborative work with Jay Jacobs, Co-Founder & Data Scientist, Empirical Security, FIRST EPSS-SIG Co-Chair, CVE Consumer WG Chair.
Catch Art and Jay live at #VulnCon26: 'A Paradigm Shift in Vulnerability Identity: Why Vulnerability Databases Struggle' — April 14, 1:30–2:30 PM MST.
📖 Read the full interview: https://go.first.org/jnofT
There’s something special about seeing the VM ecosystem come together in one place. #VulnCon26 is where collaboration happens. 🤠🌅 #vulnerabilitymanagement 🔗https://go.first.org/WWSDp
Nothing like Scottsdale views + cybersecurity brainpower. #VulnCon26 is off to a strong start. 🌅✨#vulnerabilitymanagement 🔗https://go.first.org/WWSDp
Kicking off #VulnCon26 in Scottsdale — the VM community is officially in the house! Let’s spark ideas and build something stronger together. 🌵✨ #CVEProgram #CVSS 🔗https://go.first.org/WWSDp
Are you wanting to get involved at #FIRSTCON26? Support our mission and sponsor this unique #cybersecurity community gathering with attendees from all around the world! 💻🌐🔗https://go.first.org/MDaOF #annualconference #incidentresponse #secconf
❄️ Save the Date! ❄️
Cold Incident Response 2026 • Tue Oct 13 – Thu Oct 15 • Oslo, Norway
Hosted by our Norwegian FIRST Teams 🌍
Bundle up, block your calendars, and get ready for three days of cool minds, cold cases studies with warm Nordic hospitality.
What if the key to better vulnerability management isn't just patching faster, but understanding why vulnerabilities keep coming back? 🔍
Help Net Security connected with #VulnCon26 speaker Alec Summers, MITRE CVE/CWE Project Lead, Principal Cybersecurity Engineer, and FIRST Member, to explore how CWE mapping is becoming a strategic layer of the vulnerability management stack.
🎤 Catch Alec's upcoming presentations at VulnCon26 next week and read the full Q&A here: https://go.first.org/BZzAf
Bring your cowboy boots and buckle up, but FIRST register for #FIRSTCON26 🌄🤠🔗https://go.first.org/nQctu
As you may know, Africa is big. The continent comprises 54 countries with extensive linguistic, cultural, and political variation. This can make it difficult to create communities of practise and enable the type of information sharing that are seen in other parts of the world.
In the past two years, the FIRST Africa Regional Liaison (ARL) initiative has directly supported 1,210 cybersecurity professionals, delivered more than 50 targeted initiatives across 33 countries, and maintained sustained engagement with at least 70 Computer Security Incident Response Teams (CSIRTs).
Lawrence Mulchiwa and Eric Akumiah are FIRST's Africa Liaisons and they have told their story in a blog. And it's a big story for a big place.
Today (March 25th) is the very last day to book within the #VulnCon26 hotel room block. Future you will be glad you clicked “reserve.” 🌵🏨
You asked, and we delivered (again)! 🎉 The hotel room block for #VulnCon26 has been extended once more—you now have until March 25th to lock in your stay. 🌵🏨 Don’t miss your chance to stay close to all the action! 🔗https://go.first.org/WWSDp
If the POTRAZ/FIRST 2026 Technical Colloquium is on your radar, it’s time to make it official. Secure your spot, pack your curiosity, and get ready for an unforgettable experience. 🌍
Your seat is waiting—go ahead and claim it. 🔗https://go.first.org/aLVgD #ZimbabweTC #FIRSTZimbabweTC
Heading to Munich for #FIRSTCTI26 ❓
Don’t miss the discounted room block—available through March 24th. Click the link to book your stay now ➡️🔗 https://go.first.org/1OpsO
Bring your cowboy boots and buckle up, but FIRST register for #FIRSTCON26 🌄🤠🔗https://go.first.org/nQctu
If you’ve got insights worth sharing (and a passport ready for adventure), consider this your tap on the shoulder. We’re officially opening our call for speakers for the POTRAZ/FIRST 2026 Technical Colloquium. 🌍 #CFS #ZimbabweTC #FIRSTZimbabweTC
Bring your ideas, your expertise, and maybe a little safari spirit. 🔗https://go.first.org/aLVgD
📆Call for Speakers deadline: April 10th
Good news, desert travelers — the room block just got extended! You now have until March 20th to reserve your stay. 🌵🌞🏨🔗https://go.first.org/WWSDp
#VulnCon26 #Scottsdale #RoomBlockExtended
Heading to Munich for #FIRSTCTI26 ❓
Don’t miss the discounted room block—available through March 24th. Click the link to book your stay now ➡️🔗 https://go.first.org/1OpsO
Let's be vulnerable together 🤓 Join us at #VulnCon26 🔗https://go.first.org/syt8W #vulnerabilitymanagement #CVEProgram #CVSS
🌵🤠 Wrangle up! #VulnCon26's early‑bird rate and hotel room block both ride off into the sunset on March 14th. Saddle up and get everything locked in before it’s gone. 🔗https://go.first.org/WWSDp