78th TF-CSIRT Meeting, September 2026: Stockholm: Agenda


The 78th TF-CSIRT meeting will take place in Stockholm, Sweden, from 29 September to 1 October 2026. We would like to thank our local hosts: Swedbank and Stockholm University, for enabling us to visit Sweden.

This page outlines the agenda for the upcoming session. It provides a clear overview of the planned topics, timing, and structure to help participants prepare and follow the flow of the event efficiently.

Programme on Tuesday 29.09.2026

Time Presentation Presenter TLP Audience
9:00-9:10 Opening and welcome TF-CSIRT Steering Committee / local host All participants
9:10-9:40 Free Nation-Scale Threat Models as a Public Service: A New Czech Cybersecurity Initiative Jan Kopriva TLP:CLEAR All participants
9:40-10:10 GRYPHON EWS: Turning Signals into Actionable Intelligence Roman Cupka and Henrich Slezak TLP:GREEN All participants
10:10-10:40 Coffee break All participants
10:40-11:10 The beauty of GnuPG Web Key Directory (WKD) and Web Key Service (WKS) Fredrik Söderblom TLP:GREEN All participants
11:10-11:40 Find meaning in /dev/null Michael Hamm TLP:CLEAR All participants
11:40-12:10 Free security tools for everyone in Poland: an update Krzysztof Zając TLP:GREEN All participants
12:10-13:10 Lunch All participants
13:10-13:55 From IT to OT: Real-World Incident Response Lessons on How Attackers Reach Operational Technology Environments Nicklas Keijser TLP:CLEAR All participants
13:55-14:40 Alert Fatigue Therapy: Fixing Broken Detection Rules Marvin Ngoma TLP:CLEAR All participants
14:40-15:25 Your credentials were leaked, so what? Xavier Mertens and Pascal Kahn TLP:CLEAR All participants
15:25-15:55 Coffee break All participants
15:55-16:25 The Hefaistos Paradigm: Socratic AI, Visual Logic, and the Future of Detection-as-Code Jan Pohl TLP:CLEAR All participants
16:25-16:55 When the World Fights Back: Reactive Crisis Exercises for Crisis Teams Jens-Christian Fischer TLP:GREEN All participants
16:55-17:25 Lightning talks Community participants TLP:CLEAR / GREEN All participants

Programme on Wednesday 30.09.2026

Time Presentation Presenter TLP
CLOSED SESSION