20 Nations Test Infrastructure: 319 Flaws in 96 Hours

Over the course of four days, the 14th International Standoff Cybersecurity competition was held online from November 26 to 29, featuring 62 security researchers from 20 Asian, African, and European countries. The objective of the competition was to test the security systems of various industries including energy, oil and gas, finance, and information technology.

During the competition, the attacking (red) teams executed 189 critical events, including 35 unique ones, and identified 319 vulnerabilities, while the defending (blue) teams investigated 172 attacks and uncovered 824 incidents.

Representing countries such as Bangladesh, Vietnam, Egypt, India, and more, the participants showcased their skills in cybersecurity testing and defense strategies.

A total prize pool of $50,000 was divided among the top eight teams. The first-place winners were the DD0St4R team from Kazakhstan, scoring 79,989 points and earning $20,000. The second-place team was Baguette2pain from France with 73,345 points and a prize of $10,000. The Mimicats team from Kazakhstan secured third place with 69,391 points and a $5,000 prize.

Teams from Russia, including Command and Defend, Your Shell Not Pass, and Karl?!, successfully defended industries such as energy, oil and gas, and banking. Command and Defend investigated 27 attacks and identified 139 incidents, Your Shell Not Pass dealt with 23 attacks and found 157 incidents, while Karl?! mitigated 23 out of 52 attacks with 86 incidents.

Positive Technologies has been organizing the Standoff cybersecurity competition since 2016. Over the past eight years, more than 5,000 information security specialists from 200 teams across 30 different countries have participated in this prestigious event.

/Reports, release notes, official announcements.