Seventh Threat Hunting Surge is concluded
CERT.LV recently wrapped up an intensive month-long collaboration with the Canadian Armed Forces (CAF), the Canadian Centre for Cyber Security (CCCS), CERT.EU, and Polish Cyber Command, Latvian National Armed Forces and National Guard Cyber Defense and Electromagnetic Warfare Battalion. The initiative focused on strengthening ongoing Threat Hunting Operations dedicated to safeguarding national and public networks, systems, and digital infrastructure.
The collaboration proved highly effective, enabling participating organizations to share valuable experience and refine threat detection capabilities by creating novel Threat Hunting solutions.
Despite uncovering threats, positive practices were also observed in targeted infrastructures, reflecting the maturity and responsibility of infrastructure holders who worked closely with Threat Hunting team to strengthen their defences and mitigate weaknesses.
The Threat Hunting Operation Surge welcomed several observers, this year from Slovenia and United Kingdom. Observers were allowed to see the ongoing operation in person, learn from it and potentially bring the knowledge back to their organisations and apply the knowledge gained in their operational settings.
Underscoring the strategic importance of the collaborative efforts Threat Hunting Operation Surge welcomed also several high-level official visits. These included Colonel J.K. Smith, Chief of Staff Operations, Canadian Armed Forces Cyber Command; LCol J.R.D. Siebring, Commanding Officer, Canadian Forces Network Operations Centre, Canadian Armed Forces and Rolands Heniņš, Director General of the National Cyber Security Centre in Latvia.
Threat Hunting Operations provide significant collective benefits by proactively identifying cyber threats, exposing vulnerabilities, and strengthening the cybersecurity posture of critical infrastructures. These efforts not only improve national cyber defences but also enhance cooperation and real-time information sharing among allied nations. This joint approach boosts overall resilience, raises the cost and complexity of hostile cyber activities, and enables quicker detection and response. Ultimately, such operations contribute to a safer and more secure digital environment for all participating countries.
