Cyber Risks · Dragos Blog

Building the SANS ICS Summit Capture the Flag (CTF) Competition

Summary: SANS Institute and Dragos partnered for the SANS ICS Summit in June 2022 to build an industrial-focused Capture the Flag competition with challenges from beginner to advanced difficulty. The CTF used an oil and gas backstory in which adversaries hit ACME Fuel through phishing disguised as internal technical support and wormable-trojan USB devices, and it drew over 1000 registered community members with more than 700 actively participating.

Key Takeaway: The scenario's dual physical-and-logical attack path let adversaries ransom assets across every level of the Purdue Model, a reminder that an intrusion reaching both IT and OT simultaneously is the case your incident response plan has to survive.

Read the original at Dragos Blog ↗

Topics
OT / ICS & Critical Infrastructure
Related
Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026