Cyber Risks · Dragos Blog

Another Record-Breaking Year: 5th Annual Dragos Capture the Flag (CTF) Results

Summary: Dragos held its fifth annual Capture the Flag event, drawing nearly 2,000 registered players on more than 1,200 teams from 90 countries and 1,115 cities, with participants working across 5,000-plus public IP addresses. Over the 48-hour competition, only three teams completed all 33 challenges, which were built around the SANS ICS 5 Critical Controls, the MITRE ATT&CK for ICS framework, and a fictitious adversary called Ember Jackals that ran from phishing-based initial access through lateral movement into the ICS environment.

What you should know: Out of more than 1,200 teams, three finished all 33 ICS-focused challenges - a signal of how thin the pool of practitioners is who can follow an intrusion from phishing to an OT pivot end to end.

Read the original at Dragos Blog ↗

Topics
OT / ICS & Critical Infrastructure
Related
Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026