Tom Moester

Tom Moester is a cyber security expert and part of the leadership team at Hunt & Hackett. He specializes in cybersecurity assessments, threat intelligence, attack scenario analysis, and building roadmaps towards digital resilience. Before moving into cybersecurity, Tom spent over 20 years in roles across management consulting, leadership in an international technology scale-up, entrepreneurship, the Dutch government, and various digital innovation projects.

Talk: Needle, Meet Haystack: Curating high-quality threat intelligence at scale (with Rebecca Lumley) [TLP:CLEAR]

The threat intelligence landscape is awash with data, yet most MDR providers remain starved of actionable intelligence. Generic, context-poor feeds dominate the market, delivering volume without the behavioural specificity needed to drive meaningful detection engineering or targeted threat hunting. For organisations operating outside the US, there is an additional concern: an over-reliance on American intelligence feeds raises genuine questions of data sovereignty and geopolitical relevance. Your view of the threat landscape ends up reflecting someone else's priorities, and when those shift, yours does too.

This session offers a practical case study in addressing both challenges: how we built a sovereign-ready, context-rich threat intelligence curation capability from the ground up, and how AI enabled us to scale without sacrificing the quality and specificity needed to make intelligence truly actionable.