Where the World’s Top Threat Intelligence Community Comes Together

6–9 September 2027

Council of Europe · Strasbourg, France

Registration Opens Early 2027

Invite-only · Free for vetted applicants

2007Inaugural event
20thAnniversary
6–9 Sept 2027Dates
Strasbourg, FRLocation
4Days of TLP:RED

The Internet is Safe Together

Cybercrime doesn't wait. Neither can we. For two decades, The Underground Economy Conference has brought together the world's most trusted law enforcement agencies and cybersecurity practitioners to act on threats, not just discuss them.

In 2027, we mark the twentieth anniversary of the global community that changes outcomes and helps keep the world safer.

Presented by

Co-Hosted by

Team Cymru logo

What is The Underground Economy Conference?

The premier, invite-only gathering for cybersecurity analysts, threat intelligence practitioners, law enforcement, and policymakers working at the intersection of cybercrime, geopolitics, and national security. Powered and funded with generous support from our defender community, UE remains free to attend for vetted applicants from around the world.

A Trusted Community

UE26 brought together more than 700 security leaders, threat hunters, law enforcement professionals, and intelligence practitioners. Many return year after year.

Closed-Door Discussions

Limited attendance fosters trust and open dialogue: closed-door sessions where law enforcement, analysts, and policymakers work through active threats together.

Four Days of TLP:RED

With thoroughly vetted attendees and strict information-sharing protocols, UE is a trusted environment for candid, analyst-led sessions on real challenges.

Detailed agenda to be disclosed to accepted attendees prior to the event.

Underground Economy 2026

By the numbers

World map highlighting the 72 countries represented at UE26
72Countries represented

Top countries represented

  1. United States01
  2. United Kingdom02
  3. Netherlands03
  4. France04
  5. Germany05
  6. Switzerland06
  7. Brazil07
  8. Italy08
166Speakers
117Sessions
28%Law enforcement
677Attendees
42%First-time attendees

Nineteen years behind us. The twentieth anniversary is Strasbourg, September 2027.

What Security Leaders Say

Hear from cybersecurity professionals who've attended our conferences and information security events.

Fortune 500 Tech Company
SOC & Crime Intelligence Analyst

“The Underground Economy Conference is a critical forum organized by the Council of Europe and Team Cymru. The insights gained are continuously informing the fight against the expanding global cybercrime landscape.”

Cybersecurity Company
CEO

“If there is one event that should be top of your list to attend it is the Annual Underground Economy Conference and the associated Regional RISE events. I have attended all but one of the main UE conferences (such is the value). I cannot recommend it highly enough.”

Intelligence Tech Company
Founder

“RISE is part of a broader ecosystem of initiatives led by Team Cymru, including Underground Economy — communities built on responsibility, trust, and a clear understanding that some of the most important work in our industry must be done thoughtfully and for the global good.”

Sign Up for UE27 Updates

Registration opens early 2027. Sign up and we'll let you know the moment it does.

TLP:RED & Social Media Policy

All content shared at The Underground Economy Conference, including sessions, presentations, speakers, attendee identities, and the agenda, is classified TLP:RED unless explicitly stated otherwise by the source.

Per the FIRST Traffic Light Protocol standard (v2.0), TLP:RED means for the eyes and ears of individual recipients only. No further disclosure. In the context of a meeting, TLP:RED information is limited to those present.

Social Media at The Underground Economy Conference: We welcome delegates to share that they're here using #UE26, but participation in the event comes with strict obligations on what can and cannot be shared publicly.

Do NOT post, photograph, screenshot, or share:

  • Delegate faces (without explicit, informed consent)
  • Specific threat actor or malware family names
  • Slides, presentation materials, or workshop content
  • Session summaries, quotes, or key takeaways from speakers
  • The agenda or session schedule
  • Venue specifics, room layouts, or off-site locations
  • Conference group photos, signed posters, or badges

What you CAN share:

  • That you're attending The Underground Economy Conference and
    general enthusiasm for the community
  • Photos taken at the designated photo opportunity area
    (ideal for LinkedIn, look for the backdrop at registration)
  • Content explicitly cleared as TLP:GREEN or TLP:CLEAR by the source,
    in the moment


If a session or piece of content is designated at a lower classification, that will be stated explicitly. Absent that designation, assume TLP:RED applies.

Questions? Reach us at conferences@cymru.com or find us at the Registration Desk on-site.