Eighth Threat Hunting Surge shows increased operational maturity
Earlier this month, CERT.LV concluded an intensive three-week Threat Hunting Surge. Building on the ongoing Threat Hunting operations led by CERT.LV in close collaboration with The Canadian Armed Forces Cyber Command (CAFCYBERCOM), this edition included increased and expanded Allied participation.
A total of 30 technical experts representing The Canadian Armed Forces Cyber Command, The Canadian Centre for Cyber Security, The National Cyber Security Centre Ireland, The Norwegian National Security Authority, The Cyberspace Defense Forces of Poland, and The Cyber & Specialist Operations Command from the United Kingdom worked side by side as one team, marking a new level of operational maturity.
Participation from both military and civilian organizations underscored the growing importance of cross-sector collaboration in cybersecurity. The daily cooperation brought many high value findings which supported efforts to secure critical infrastructure and improve Latvian cyber resilience.
“Operations like this confirm that cybersecurity today is a shared responsibility, where close international cooperation and mutual trust play a crucial role. This operation gave partner nations the opportunity to learn from our methodologies and apply them when needed. The surge also deepened multinational partnerships, enabling mutual support, expertise-sharing, and coordinated action against cyber threats,” said Varis Teivāns, Deputy Director of CERT.LV.
Highlighting the strategic importance of enhanced collaboration among allied partners, together with the Ministry of Defence, the surge also welcomed a one-day visit from high-level officials from Estonia, Lithuania, Norway, Poland, Sweden, and the United Kingdom. The visit provided an opportunity to demonstrate live threat hunting operations and enabled discussions on potential future collaborative efforts.
Partner nations increasingly view Latvia’s threat hunting model as practical, transferable, and potentially worth adopting within their own cyber defence operations.
