Here are some of my picks in order of when they are usually held during the year.
SANS Cyber Threat Intelligence Summit
- When: January
- Where: US, Variable
- Website: https://www.sans.org/event/cyber-threat-intelligence-summit-2020
The Summit will explores interesting perspectives and case studies that challenge CTI assumptions and result in a shift in understanding, methods for producing, Cyber Threat Intelligence, implementing and making decisions based off of intelligence, case studies on the application of cyber threat intelligence to a security or business problem, how traditional intelligence approaches are applied to CTI analysis and production, innovative ways to utilize or analyze CTI, new tools developed to support or enable CTI.
ShmooCon
- When: January/February
- Where: Washington, DC, USA
- Website: https://www.shmoocon.org/
- ShmooCon is a highly inclusive conference. The organizers focus on presenters who don’t appear at other conferences, giving them a forum to share their ideas and findings, and the topics presented are likewise unique. In fact, one of SchmooCon’s biggest draws is that you can learn about cutting-edge security solutions that you haven’t already heard about, over and over, elsewhere.
FIRST Cyber Threat Intelligence Symposium
- When: March
- Where: Usually Europe, Variable
- Website: https://www.first.org/events/symposium/zurich2020/
- FIRST Cyber Threat Intelligence Symposium will focus on topics such as Metrics for assessing the effectiveness of an organization’s CTI program, Data analysis techniques for measuring the quality of CTI, Finding the needle in the haystack: how do we prioritize effectively, Scaling the human: leveraging rare expertise in a scalable way, Case studies that highlight failures and/or successes of using CTI, Operationalising CTI: effective tooling for protection, detection, and response, etc.
Troopers
- When: March
- Where: Heidelberg, Germany
- Website: https://www.troopers.de/
- This security conference is based in beautiful Heidelberg, Germany, and for us, merely visiting the city would be enough of a reason to check out Troopers. As luck would have it, this valuable conference consists of two-day training and a two-day conference where many IT and security experts from all over the world gather to discuss current topics relating to IoT, IPv6 security, and general IT security.
HITBSecConf
- When: April
- Where: Amsterdam, Netherlands
- Website: https://conference.hitb.org/hitbsecconf2020ams/
- Hack in the Box Security Conference (HITBSecConf) is an annual event held in Amsterdam, The Netherlands. In fact, this year’s iteration marks the 11th anniversary of Hack in the Box (HiTB) in the Netherlands.
IEEE European Symposium on Security and Privacy
- When: May
- Where: Europe, Variable
- Website: https://www.ieee-security.org/TC/EuroSP2020/
- Since 1980, the IEEE Symposium on Security and Privacy has been the premier forum for presenting developments in computer security and electronic privacy, and for bringing together researchers and practitioners in the field. Following this story of success, IEEE initiated the European Symposium on Security and Privacy (EuroS&P), which is organized every year in a European city.
First Annual Conference
- When: June
- Where: Worldwide
- Website: https://www.first.org/events/first
- The annual conference is a 4-5 day global event that focuses on the issues of incident response and security teams and brings together incident response and security professionals from around the world who share their experiences and expertise. The conference is organized and hosted by FIRST with support from a local/regional team. Security professionals in all areas will find the interaction with incident response teams educational.
Defcon
- When: August
- Where: Las Vegas, Nevada, USA
- Website: https://defcon.org/
- DEF CON is a pop culture staple, with numerous workshops and games that take inspiration from pop mainstays like Jeopardy (“Hacker Jeopardy,” which did gather some mixed reviews); there are also legendary CTFs, a Spot the Fed contest and other fun challenges like AI Village, Car Hacking Village and more.
Brucon
- When: October
- Where: Ghent, Belgium
- Website: https://www.brucon.org/2020/
- BruCON is an annual security and hacker(*) conference providing two days of an interesting atmosphere for open discussions of critical infosec issues, privacy, information technology and its cultural/technical implications on society. Organized in Belgium, BruCON offers a high quality line up of speakers, security challenges and interesting workshops. BruCON is a conference by and for the security and hacker(*) community.
Botconf
- When: October
- Where: France
- Website: https://www.botconf.eu/
- Botconf is a security conference centered on Botnets; speakers were security professionals, security researchers and academics.
DefCamp
- When: November
- Where: Bucharest, Romania
- Website: https://def.camp/
- DefCamp is the most important Hacking & Information Security conference in Central Eastern Europe. Each year, it brings together the world’s leading cybersecurity doers to share their latest research and knowledge.
ENISA Events
- When: Variable
- Where: Europe, Variable
- Website: https://www.enisa.europa.eu/events
- The European Union Agency for Cybersecurity, ENISA, is the Union’s agency dedicated to achieving a high common level of cybersecurity across Europe. Through knowledge sharing, capacity building and awareness raising, the Agency works together with its key stakeholders to strengthen trust in the connected economy, to boost resilience of the Union’s infrastructure, and, ultimately, to keep Europe’s society and citizens digitally secure.
SANS Summits
- When: Variable
- Where: Worldwide
- Website: https://www.sans.org/cyber-security-summit/
- In addition to two days of razor-focused Summit content, you'll have the chance to engage with fellow attendees at dedicated networking sessions and social events. Attendees tell us time and again that one of the greatest takeaways from a SANS Summit is the many industry connections they forge or deepen during their time with us.










