First-Ever Attack-Defence Simulation Aligns with Real Corporate Needs Setting a New Benchmark for Local Cybersecurity Competitions

HONG KONG SAR - Media OutReach Newswire - 13 February 2026 - As cyberattacks grow increasingly complex, cybersecurity has become a critical domain of global concern and a talent shortage. According to the latest "Hong Kong Cybersecurity Outlook 2026" released by the Hong Kong Computer Emergency Response Team Coordination Centre (HKCERT) under the Hong Kong Productivity Council (HKPC), nearly 30% of the 622 surveyed enterprises still lack dedicated cybersecurity staff. Specifically, only 26% of SMEs have a dedicated cybersecurity role, significantly lower than the 59% of large enterprises, reflecting a gap in resource allocation and technology adoption among SMEs. To cultivate practical talent for the cybersecurity sector, the sixth "HKCERT Capture The Flag Challenge 2025" (HKCERT CTF Challenge) was successfully organised by the Digital Policy Office (DPO), HKPC, and HKCERT. This year's competition was elevated to the first-ever adoption of an attack–defence mode, closely replicating the network setup of real enterprises. Participants experienced first-hand hacking techniques, system vulnerability analysis, threat intelligence gathering, and coordinated response in a simulated real-world environment. Through completing multiple tasks within a limited time, the competition also allowed them to break through the traditional classroom theoretical framework, gain practical experience and build confidence. The event attracted around 1,940 young contestants, an increase of nearly 40% from last year's 1,385 participants, reaching a record high for the competition. Contestants included teams from Hong Kong, Chinese Mainland, Asia, and Europe, fostering cross-regional exchange and collaboration. In the finals, three local teams and one overseas team were awarded gold prizes in the Secondary School, Tertiary Institution, Open Category, and International Category respectively, while Sing Yin Secondary School received the "Best School Award". The full list of awardees is available on the event website.Participants Share Practical Experience Integrating AI into Attack and Defence The competition was well received by contestants for its innovative format and realistic offensive and defensive environment, offering a valuable platform for learning and exchange. The winning team in the International Category, W&M, commented, "Our members are from Shanxi, Guangdong and Beijing. This was our first time competing together in the HKCERT CTF Challenge. The atmosphere and experience of the finals were excellent. The tasks were centred on an attack‑defence simulation, requiring us to find all vulnerabilities while patching our own systems and attacking other teams at the same time. Some vulnerabilities were discovered and exploited by other teams first, which kept the scores very close and made the competition incredibly tense and exciting". They added, "During the competition, we also applied lots of AI techniques for assistance, such as applying AI to analyse vulnerabilities and refine attack methods. In the future, AI may play a deeper role in areas like vulnerability detection and code analysis, but for now it cannot be fully relied upon—human oversight is still essential". HKCERT CTF Challenge has now been held for six consecutive years, with its scale expanding annually and participants showing continuous growth. Many secondary school students gain their first hands‑on exposure to cybersecurity through the competition and connect with university mentors, helping them shape their academic and career paths. Several past participants have gone on to compete in local and international events, committing to a future in the cybersecurity field. Beyond attracting overseas talent to exchange ideas in Hong Kong, HKCERT continues to build connections between cybersecurity professionals in Hong Kong and Chinese Mainland. Top‑performing teams can gain direct entry into equivalent finals in Chinese Mainland. For example, participants from the previous HKCERT CTF Challenge 2024 advanced directly to the finals of the "Greater Bay Area Cup Cybersecurity Challenge", where they secured the top four places in the Hong Kong and Macao category. This also provided local contestants with access to world‑class cybersecurity techniques, effectively promoting cross‑regional elite collaboration and talent development. Finals Format Upgraded: Attack-Defence Mode Mirrors Real Enterprise Operations The finals were comprehensively upgraded this year. In addition to increase the overall technical difficulty, the...