
7-10 September 2026
Strasbourg, France
Cybercrime doesn't wait. Neither can we. For 18 years, The Underground Economy Conference has brought together
the world's most trusted law enforcement agencies and cybersecurity practitioners to act on threats, not just discuss them.
A closed-door operational hub, at UE26 you find real intelligence. Real partnerships. Real disruption of criminal infrastructure.
The global community that changes outcomes and helps keep the world safer.


The Underground Economy 2026 is the premier, invite-only, gathering for cybersecurity analysts, threat intelligence practitioners, law enforcement, and policymakers working at the intersection of cybercrime, geopolitics, and national security.
Powered and funded with generous support from our defender community, UE26 remains free-to-attend for vetted applicants from
around the world. Too important to paywall, UE26 allows defenders to gather and move beyond jurisdictional limits to share intelligence
and make connections.
Detailed agenda to be disclosed to accepted attendees prior to the event.
Every session is led by those actively working investigations. No keynotes, no sales pitches. Just real operators sharing what's working in the field right now.
Go beyond the sessions with live exercises using real-world tools and datasets. Whether it's cryptocurrency tracing, infrastructure hunting, or malware analysis, you'll leave with practical skills you can apply immediately.
Connect with your peers at an evening reception hosted at the Council of Europe itself. The relationships built at The Underground Economy Conferences are as valuable as the sessions themselves.
The lessons and connections built at The Underground Economy Conference go far beyond the conference itself.
Once you attend, you become a member of an inner circle, connected with global defenders, operators, and intelligence professionals.
Your application to attend is the first step toward the most important work of your career,
as you join a community dedicated to saving and improving human lives. Space is limited.
Hear from cybersecurity professionals who've attended our conferences and information security events.
“The Underground Economy Conference is a critical forum organized by the Council of Europe and Team Cymru. The insights gained are continuously informing the fight against the expanding global cybercrime landscape.”
“If there is one event that should be top of your list to attend it is the Annual Underground Economy Conference and the associated Regional RISE events. I have attended all but one of the main UE conferences (such is the value). I cannot recommend it highly enough.”
“RISE is part of a broader ecosystem of initiatives led by Team Cymru, including Underground Economy — communities built on responsibility, trust, and a clear understanding that some of the most important work in our industry must be done thoughtfully and for the global good.”
Share your expertise. Help defenders worldwide. Shape the future of Threat Intelligence
The Underground Economy Conference looks to members of the community to share their unique insights into today’s most substantial threats. If you have a compelling case study, an active investigation, or a unique perspective that moves our community from a reactive to proactive security posture, we want to hear from you.
All content shared at The Underground Economy Conference, including sessions, presentations, speakers, attendee identities, and the agenda, is classified TLP:RED unless explicitly stated otherwise by the source.
Per the FIRST Traffic Light Protocol standard (v2.0), TLP:RED means for the eyes and ears of individual recipients only. No further disclosure. In the context of a meeting, TLP:RED information is limited to those present.
Social Media at The Underground Economy Conference: We welcome delegates to share that they're here using #UE26, but participation in the event comes with strict obligations on what can and cannot be shared publicly.
Do NOT post, photograph, screenshot, or share:
What you CAN share:
If a session or piece of content is designated at a lower classification, that will be stated explicitly. Absent that designation, assume TLP:RED applies.
Questions? Reach us at conferences@cymru.com or find us at the Registration Desk on-site.