Where the World's Top Threat Intelligence
Community Comes Together

7-10 September 2026
Strasbourg, France

Apply for an Invitation Now

The Internet is Safe Together

Cybercrime doesn't wait. Neither can we. For 18 years, The Underground Economy Conference has brought together
the world's most trusted law enforcement agencies and cybersecurity practitioners to act on threats, not just discuss them.

A closed-door operational hub, at UE26 you find real intelligence. Real partnerships. Real disruption of criminal infrastructure.

The global community that changes outcomes and helps keep the world safer.

Presented by

Co-Hosted by

What is The Underground Economy Conference?

The Underground Economy 2026 is the premier, invite-only, gathering for cybersecurity analysts, threat intelligence practitioners, law enforcement, and policymakers working at the intersection of cybercrime, geopolitics, and national security. 

Powered and funded with generous support from our defender community, UE26 remains free-to-attend for vetted applicants from
around the world. Too important to paywall, UE26 allows defenders to gather and move beyond jurisdictional limits to share intelligence
and make connections. 

Detailed agenda to be disclosed to accepted attendees prior to the event.

What to Expect at UE26

700+ Attendees
Global Visibility

UE26 brings together more than 700 security leaders, threat hunters, law enforcement professionals, and intelligence practitioners from across the globe. With sessions dedicated to improving global security , UE shines a light on worldwide threats and the defenders stopping them.

Closed-Door Discussions


The Underground Economy Conference maintains limited attendance to foster trust and open dialogue: closed-door sessions where law enforcement, analysts, and policymakers work through active threats together.

Four Days of Deep-Dive, TLP:RED Content

With thoroughly vetted attendees and strict information-sharing protocols in place, UE26 ensures a trusted environment for confidential exchange. Engage in candid, analyst-led sessions that go beyond the headlines to address real challenges and active threats safely

Real Intelligence. Real Skills. Real Impact.

Practitioner-Led Collaboration

Every session is led by those actively working investigations. No keynotes, no sales pitches. Just real operators sharing what's working in the field right now.

Hands-On Workshops and Trainings

Go beyond the sessions with live exercises using real-world tools and datasets. Whether it's cryptocurrency tracing, infrastructure hunting, or malware analysis, you'll leave with practical skills you can apply immediately.

Networking Reception

Connect with your peers at an evening reception hosted at the Council of Europe itself. The relationships built at The Underground Economy Conferences are as valuable as the sessions themselves.

Join the Inner Circle

The lessons and connections built at The Underground Economy Conference go far beyond the conference itself.
Once you attend, you become a member of an inner circle, connected with global defenders, operators, and intelligence professionals. 

Your application to attend is the first step toward the most important work of your career,
as you join a community dedicated to saving and improving human lives. Space is limited.

What Security Leaders Say

Hear from cybersecurity professionals who've attended our conferences and information security events.

Fortune 500 Tech Company
SOC & Crime Intelligence Analyst

“The Underground Economy Conference is a critical forum organized by the Council of Europe and Team Cymru. The insights gained are continuously informing the fight against the expanding global cybercrime landscape.”

Cybersecurity Company
CEO

“If there is one event that should be top of your list to attend it is the Annual Underground Economy Conference and the associated Regional RISE events. I have attended all but one of the main UE conferences (such is the value). I cannot recommend it highly enough.”

Intelligence Tech Company
Founder

“RISE is part of a broader ecosystem of initiatives led by Team Cymru, including Underground Economy — communities built on responsibility, trust, and a clear understanding that some of the most important work in our industry must be done thoughtfully and for the global good.”

Call for Speakers: Help Secure the Internet

Share your expertise. Help defenders worldwide. Shape the future of Threat Intelligence

The Underground Economy Conference looks to members of the community to share their unique insights into today’s most substantial threats. If you have a compelling case study, an active investigation, or a unique perspective that moves our community from a reactive to proactive security posture, we want to hear from you.

Submit Your Proposal

TLP:RED & Social Media Policy

All content shared at The Underground Economy Conference, including sessions, presentations, speakers, attendee identities, and the agenda, is classified TLP:RED unless explicitly stated otherwise by the source.

Per the FIRST Traffic Light Protocol standard (v2.0), TLP:RED means for the eyes and ears of individual recipients only. No further disclosure. In the context of a meeting, TLP:RED information is limited to those present.

Social Media at The Underground Economy Conference: We welcome delegates to share that they're here using #UE26, but participation in the event comes with strict obligations on what can and cannot be shared publicly.

Do NOT post, photograph, screenshot, or share:

  • Delegate faces (without explicit, informed consent)
  • Specific threat actor or malware family names
  • Slides, presentation materials, or workshop content
  • Session summaries, quotes, or key takeaways from speakers
  • The agenda or session schedule
  • Venue specifics, room layouts, or off-site locations
  • Conference group photos, signed posters, or badges

What you CAN share:

  • That you're attending The Underground Economy Conference and
    general enthusiasm for the community
  • Photos taken at the designated photo opportunity area
    (ideal for LinkedIn, look for the backdrop at registration)
  • Content explicitly cleared as TLP:GREEN or TLP:CLEAR by the source,
    in the moment


If a session or piece of content is designated at a lower classification, that will be stated explicitly. Absent that designation, assume TLP:RED applies.

Questions? Reach us at conferences@cymru.com or find us at the Registration Desk on-site.