The structures of the Central Bank and Sberbank were expelled from the community to combat cyber threats

The FIRST (Forum of Incident Response and Security Teams) international community, which compiles the accumulated knowledge about cyber attacks from different countries and allows its members to exchange experience, has suspended cooperation with eight Russian computer response centers. incidents. This follows from the information on the FIRST website. Among them are the Center for Monitoring and Response to Computer Attacks of the Bank of Russia (FinCERT), the Russian Computer Incident Response Center (RU-CERT), centers at Kaspersky Lab, BI.ZONE (a subsidiary of Sberbank), Jet Infosystems, Rostelecom-Solar, Information Security Laboratories, Infosecurity (part of Softline).

As reported in the Infosecurity Telegram channel, FIRST also suspended cooperation with two Belarusian centers. The decision was based on new US export control rules. The measure did not affect those Russian companies that moved their head office abroad, in particular Group-IB.

Benefits of cooperation with FIRST

FIRST was created in 1990 in response to the spread of computer threats: when one of the first Internet worms began to spread in the world in November 1988, the reaction to it at the beginning was not coordinated, the creation of the organization was supposed to help overcome language barriers, differences in standards etc.