Hack.lu 2026

Jon Flaherty

Joining Shadowserver in 2016, Jon brings a range of skills and experience from UK Law Enforcement cyber crime investigation to the Foundation.

Engaging in consumer outreach, incident handling and the training of constituents in the use of Shadowserver public benefit services allows Jon the opportunity to deliver current threats and insights to all areas of the cyber community.

Of specific interest to Jon is international liaison and with the support of key public/private sector partners, the upskilling of developing cyber regions and National CERTs to ensure the effective use and understanding of Shadowserver’s bespoke datasets for a more secure internet.


Session

10-21
11:15
30min
Global Telemetry to Local Remediation: Operationalizing Threat Intelligence for the Underserved
Sebastian Wagner, Jon Flaherty

Across the world many organizations that communities depend on every day— such as schools, libraries, shelters, healthcare providers, local media and NGOs etc —operate with limited cybersecurity resources. Yet when they are hit by a cyber incident, the consequences are very real: services become unavailable, sensitive data is exposed, public trust is damaged, and recovery often falls on a handful of people already stretched thin.

For years, the Shadowserver Foundation has helped defenders around the world identify and remediate threats through free daily intelligence feeds, victim notifications, vulnerability reporting, and Internet-scale measurements. Working through National CSIRTs, trusted partners, and directly with organizations, Shadowserver provides visibility into compromised systems, exposed services, vulnerable assets, and emerging threats that would otherwise go unnoticed.

But visibility by itself does not reduce risk.

Many organizations receive notifications or intelligence yet struggle to understand where to start, what matters most, or how to translate external signals into practical security improvements. National CSIRTs and cybersecurity authorities play a critical role, but community organizations often remain at the edge of the ecosystem, with limited capacity to operationalize the information they receive.

topic: hack.lu
Europe