Modat at FIRSTCON26: Connection, a Launch, and Research in the Field

Denver, June 22, 2026

Modat attended the 38th Annual FIRST Conference in Denver, where we announced native Passive DNS in Modat Magnify and spent five days with the global cybersecurity community.

The 38th Annual FIRST Conference (Peak Defense: Building Adaptive Systems for Modern Threats) took place in Denver, Colorado. FIRSTCON26 continues to be one of the few events where the conversations are genuinely worth having: professionals from dozens of countries, all working on the same hard problems, all choosing to show up in person to share what they know.

We were there at Booth 13, on the main stage, and at Tom's Watch Bar for the opening match of the Netherlands at the 2026 FIFA World Cup. We left Denver with a lot to follow up on.

The week opened on Sunday with a World Cup watch party. A room full of security professionals, orange T-shirts, and the Netherlands opening match made for the right kind of start. The conversations that began that evening continued throughout the week.

Passive DNS is now native to Modat Magnify. We announced this at FIRSTCON26. IP intelligence, device fingerprinting, certificates, and Passive DNS are now unified in a single investigation graph. Every signal is a first-class pivot point. Start from a domain and surface every IP address that has hosted it, its certificates, and its full DNS history, in one query, without reconciling results across tools. The response from the FIRST community confirmed that this addressed a real and long-standing gap.

On Thursday, Soufian presented Your Cloud, Their Code: The Supply Chain Attack You Didn't See Coming. The session covered how attackers exploit cloud infrastructure through supply chain vectors that most defender teams are not yet monitoring for. Questions continued well after the session ended. Please feel free to reach out if you want to know more.

Research from the platform was released at the conference. Both reports below were produced using Modat Magnify and illustrate what internet infrastructure intelligence makes possible.

Stadium of Shadows. For the FIFA World Cup, our research team mapped the infrastructure behind illegal IPTV. Using Magnify, we identified around 4,000 freshly registered IPTV domains in the first twelve days of June and mapped more than 50,000 live IPTV services, several of which exposed customer credentials in plaintext.

Read the full report.

8,074 Live Video Feeds. No Password. In March 2026, Magnify identified 973,819 active RTSP services across 210 countries. Of those, 8,074 returned a live frame with no credentials, including thermal arrays on high-voltage equipment, the interior of a server facility, and a SCADA water-treatment dashboard. The fix is usually minutes of work.

Read the full report

Thank you to the FIRST Events Team for a well-run and memorable week, and to everyone who stopped by, attended the talk, or joined us for the watch party.

Next year's 39th Annual FIRST Conference (Guardians of the Global Network: Uniting for Resilience) will be held in Bangkok, Thailand, from June 13 to 18, 2027. We will be there and hope to see you too!