Universiteit Leiden

nl en


The Hague Threat Intelligence Exchange (Hague TIX) 2023

Monday 12 June 2023
Oude Kerk in Scheveningen
Keizerstraat 8
Den Haag

The Hague Threat Intelligence Exchange (Hague TIX) is happening on 12 June 2023! Ticket are not availalbe anymore, we are sold out.


  • Keynote by Senior UK NCSC Representative
  • Dan Black, Principal Analyst Cyber Espionage Team at Mandiant (Google)
  • Jamie Collier, Senior Threat Intelligence Advisor at Mandiant
  • Mei Danowski, Researcher Strategic Threat Intelligence and East Asia Political, Strategic and Economic Affairs
  • John Gallacher, Founder & Director of Alethio
  • Alexandra Gofman, Threat Intelligence Lead at Check Point Research
  • Tom Hegel, Senior Threat Researcher at SentinelLabs
  • Martin Lee, Technical Lead of Security Research & EMEA Lead for Talos (Cisco)
  • Robert Lipovsky, Principal Threat Intelligence Researcher at ESET
  • MIVD, Analyst of the Defence Intelligence and Security Service of the Netherlands
  • Jiro Minier, Lead, Threat Intelligence Research & Analysis at Deutsche Cyber-Sicherheitsorganisation (DCSO)
  • Munira Mustaffa, Founder/Principal Consultant at Chasseur Group
  • James Pearson, European Cybersecurity Correspondent at Reuters
  • Michael August Raggi, Staff Threat Research Engineer at Proofpoint
  • Gabby Roncone, Analyst Cyber Espionage Team at Mandiant (Google)
  • Joe Slowik, Threat Intelligence Manager at Huntress Labs
  • Josef Williamson, Senior Threat Intelligence Analyst at CrowdStrike


08:30 - 09:20 Registration and coffee

09:20 - 09:30 Welcome by Monica Kaminska

09:30 - 09:50 Cold River: The Russian intelligence-gathering group targeting the West, by James Pearson

09:50 - 10:10 Behind closed doors: the reality of Azerbaijani surveillance, by Alexandra Gofman

10:10 - 10:30 Cyber Regionalism, by Jamie Collier

10:30 - 10:50 A Shock to the System: Measuring the Impact of Disabling Microsoft Office Macros on the APT Phishing Landscape in Europe and Asia, by Michael August Raggi

10:50 - 11:10 Q&A sessions with James PearsonAlexandra GofmanJamie Collier and Michael August Raggi

10:50 - 11:30 Coffee break

11:30 - 11:50 Repeat Offenders: The GRU's Wiping Playbook, by Dan Black and Gabby Roncone

11:50 - 12:10 What have we learned about Russian Information Operations from the war in Ukraine?, by John Gallacher

12:10 - 12:30 "Cytros" and Digital Manipulation: Authoritarian Subversion of Democracy Beyond the West, by Munira Mustaffa

12:30 - 12:50 A Future for Cyber Threat Intelligence, by Martin Lee

12:50 - 13:10 Q&A sessions with Dan Black and Gabby RonconeJohn GallacherMunira Mustaffa and Martin Lee

13:10 - 14:20 Lunch break

14:20 - 15:00 Keynote by Senior UK NCSC Representative

15:00 - 15:20 Disruption with Chinese Characteristics: The Past, Present, and Possible Futures of China-Nexus (Quasi-)Ransomware Activity, by Jiro Minier

15:20 - 15:40 A year of wiper attacks in Ukraine, by Robert Lipovsky

15:40 - 16:00 What to Expect When You're Expecting War Over Taiwan: China's Offensive Cyber Capability, by Mei Danowski

16:00 - 16:20 Q&A sessions with Jiro MinierRobert Lipovsky and Mei Danowski

16:00 - 16:40 Coffee break

16:40 - 17:00 Commercial Dimensions in Cyber Conflict, by Joe Slowik

17:00 - 17:20 What WIZARD SPIDER Did Next, by Josef Williamson

17:20 - 17:40 Presentation by an analyst at the Defence Intelligence and Security Service of the Netherlands (MIVD) – No photo or video, TLP:AMBER

17:40 - 18:00 Analysis of a Pro-Russian Hacktivist Group Targeting NATO, by Tom Hegel

18:00 - 18:10 Closing by Monica Kaminska

18:10 - 18:30 Q&A sessions with Joe SlowikJosef Williamson and Tom Hegel

18:10 - 19:30 Closing drinks

Practical information and registration

This is a physical conference in The Hague, the Netherlands – there will be no livestream or other online formats available.


Ticket sales are now open for Hague TIX 2023! There are limited tickets available to purchase via our online ticketing site (early-bird tickets available until they run out).

Conference attendance policy

Hague TIX is an in-person only conference and held strictly off-the-record. We aim for Hague TIX to be a safe environment to share up-to-date research and ask all attendees and speakers to respect the privacy and requests of other speakers, including our photography and publicity policy and the TLP-notices attached to certain talks.

Photography and (online) publicity

At the registration desk, you will be able to choose either a red or a black lanyard. Selecting a black lanyard means you grant permission for photos of you to be taken during the conference and for their subsequent online publication. If you choose a red lanyard, our photographers will avoid taking pictures of you and your photo will not be published anywhere. We ask that attendees do not post pictures of individuals with red lanyards on social media or any other public channels.

Registration and cancellations

Tickets are sold on a first-come, first-served basis via our online ticket page. The number of tickets is limited. When you purchase a ticket, you agree to the policies stated on this page.

Cancellations must be done in writing and must be received by 4 June 2023 by email to haguetix@thehagueprogram.nl. Cancellations made before this deadline will be refunded minus an administration fee of €25. Cancellations received after this deadline or failure to attend the event without prior notice will not be refunded.


The Hague Threat Intelligence Exchange (Hague TIX) 2023 will take place at the Oude Kerk in Scheveningen (Keizerstraat 8, Den Haag).

Hague TIX Team

Monica Kaminska (The Hague Program on International Cyber Security/Leiden University)

Corianne Oosterbaan (The Hague Program on International Cyber Security/Leiden University)

Xander Bouwman (TU Delft)

2022 Edition

The 2022 The Hague Threat Intelligence Exchange (Hague TIX) took place on 20 June 2022 at the Tram Museum in The Hague, with keynotes by Hester Somsen and Inge Bryan, and a series of short talks by Daniel Moore, Saher Naumaan, Florian Egloff, Rhianna King, Jamie Collier, Hakan Tanriverdi, Winnona DeSombre, Alexander Martin, Eduardo Izycki, Ben Read, Sanaz Yashar, Juan Andrés Guerrero-Saade and an analyst from the Defence Intelligence and Security Service of the Netherlands (MIVD). Visit this link to check out the full program, list of speakers and a photo impression.

Contact us

Contact us at haguetix@thehagueprogram.nl with any questions.

More information and tickets

This website uses cookies.  More information.