Sebastian Wagner
Sebastian Wagner is a Free Software enthusiast, full-stack software developer, and project manager.
He is located in Austria and currently works at Intevation, a small software firm in Germany.
With over ten years in IT security, including six years at CERT.at, he also co-maintains IntelMQ, a widely used CSIRT automation tool, for 12 years, and is a member of the Shadowserver Foundation and active and board member in two NGOs: The Institute for Common Good Technology and Engineers without Borderers Austria.
Session
Across the world many organizations that communities depend on every day— such as schools, libraries, shelters, healthcare providers, local media and NGOs etc —operate with limited cybersecurity resources. Yet when they are hit by a cyber incident, the consequences are very real: services become unavailable, sensitive data is exposed, public trust is damaged, and recovery often falls on a handful of people already stretched thin.
For years, the Shadowserver Foundation has helped defenders around the world identify and remediate threats through free daily intelligence feeds, victim notifications, vulnerability reporting, and Internet-scale measurements. Working through National CSIRTs, trusted partners, and directly with organizations, Shadowserver provides visibility into compromised systems, exposed services, vulnerable assets, and emerging threats that would otherwise go unnoticed.
But visibility by itself does not reduce risk.
Many organizations receive notifications or intelligence yet struggle to understand where to start, what matters most, or how to translate external signals into practical security improvements. National CSIRTs and cybersecurity authorities play a critical role, but community organizations often remain at the edge of the ecosystem, with limited capacity to operationalize the information they receive.