Seven Signals Cyber Experts Agreed on at FIRST Paris 2026

This report summarizes seven key cybersecurity signals discussed at FIRST, covering identity substitution and proxy workers, stealthy multi-year low-volume password spraying campaigns, the growing market and strategic use of zero-days, attacker-focused DNS abuse and domain-registration factors, the benefits and risks of AI for analysts, the noisy and often unreliable nature of dark-web intelligence, and the importance of human-centered, collaborative operational response. It emphasizes that the primary gaps are operational coordination, intelligence interpretability, and scaling human defensive instincts alongside technical controls.