Dragos CTF 2026 Results: Inside the 6th Annual OT Capture the Flag
Summary: The 6th annual Dragos OT/ICS capture-the-flag drew 1,926 players on 1,269 teams to 57 challenges, and 312 teams solved all of them, with Knightsec finishing in 48 minutes and 21 seconds. Dragos reports that its 1,000-point challenges took a median of about four minutes from unlock to solve, faster than its 400-point challenges, and that incorrect submissions fell below 45% (24,589 wrong against 31,770 correct), which the company attributes most likely to AI.
Key Takeaway: Dragos notes a flag proves a solution, not understanding: AI suggested real-world CVEs for a scenario where none applied, and only a player who knew the environment could tell they were wrong - the same judgment call a plant network demands, where no flag confirms the answer and a wrong call can affect safety and operations.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026