Cyber Risks · Dragos Blog

The 4th Annual Dragos Capture the Flag (CTF) Results Are In!

Summary: Dragos held its fourth annual Capture the Flag event, a 48-hour ICS/OT competition built around a fictional threat group called Biffs-Budds and the MITRE ATT&CK for ICS Kill Chain, drawing 819 teams and 1,249 participants from 74 countries and 822 cities. Of 37 challenges worth 20,000 points, only two teams finished all of them, and the event logged 8,178 correct submissions against 33,252 incorrect ones.

Key Takeaway: Only two teams out of 819 cleared all 37 challenges, and incorrect submissions made up 80.26 percent of attempts - a reminder of how thin the pool of practitioners is who can follow an adversary from initial access through to pivoting into the ICS environment.

Read the original at Dragos Blog ↗

Topics
OT / ICS & Critical Infrastructure
Related
Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026