What's New 2025

Message from the Chair; Strategy and Governance: Launch of the FIRST Strategy Framework; FIRST Welcomes New Members and Thanks Sponsoring Teams!; Special Interest Group Updates; The role of National CERTs/CSIRTs in Implementing the UN Norms of Responsible Behavior in Cyberspace; Growth Stack Media Q1FY25 PR Highlights: Media Coverage Expansion & Successful Campaigns; Green Copenhagen; FIRST on Social Media; and Upcoming Events

We’re expecting 9006 +/- 1259 vulnerabilities this quarter, as we close out the year.

The FIRST Board of Directors is introducing a new structured approach to strategic planning, aimed at enhancing the organization’s ability to fulfill its mission and solidify its position as a global leader in cybersecurity and incident response.

In 2025 we expect another record-breaking year of CVE production. This year we expect 45505 +/- 4,363 CVEs to be published in the calendar year (CY). There’s a 5% chance the actual number exceeds the maximum (49868) and a 5% chance is less than the minimum (41142). Rather than give you a false sense of precision, it’s probably far easier to say we expect between 41-50k of vulnerabilities in calendar year CY 2025.