I said I was happy. I can't say "proud" any more, because several challenges were flagged by AI.
Not all: local challenges + OSINT challenges were flagged without AI, and we also did a few by pure fun without AI too.
It's interesting to test. I'm really thinking about CTFs with 2 tracks: one "for AI" where people have fun tuning their setups, and one "with no AI" to have fun with the challenges themselves. Different angles.
Very happy to have won THCon CTF 2026 :)
All 5 of us were playing locally. The CTF had a few challenges only accessible locally, while others also accessible remotely.
We finished 1st on the local scoreboard, and also 1st on the "remote" scoreboard at the time of the end of the (local) CTF, but the remote CTF is still running, so that will change.
A talk is short (especially that we had to merge in our ideas, with @virtualabs !) and there are a couple of thoughts and feedback form results of @ph0wn that I never got the chance to present. So, I made a blog post about it, it's interesting to you if "CTF and AI" is a problem to you and you want to think about it.
https://cryptax.github.io/posts/ctf-ai/
cc: @cpu
CTFs and Artificial Intelligence. Post Ph0wn 2026 Thoughts. Myth #1: “CTF players hate AI because it spoils CTFs” Reality: this is not the opinion of the majority of CTF players “AI has destroyed CTFs” - this kind of message is frequent on the net. However, in a feedback form of Ph0wn CTF 2026, 80% hold no grudge against AI and are either happy with it, or just want to adapt:
Today, @virtualabs and I presented at THCon about the vast problem of AI and CTFs. It led to interesting discussions, and we were very happy with everybody's concern and enthusiasm.
https://thcon.party/events/#chain-of-thought
https://tagazok.virtualabs.fr/thcon/
Our session has been live streamed, our slides have been uploaded if you want them + we've been interviewed by a local radio, @cpu
"A University in the US was hit 3 times by ransomware" (approximative quote) because they pay, get their data back, recover... But forget to patch, so they are hit by another instance.
Love this talk at THCon by Steph Shample.
#ransomware #infostealers #2026 #thcon
Slides > silence.
Community > silos.
10 > 9.
Got research, real-world insights, or a hands-on workshop? Bring it to the stage for the 10th edition of BSides Munich.
Submissions for #BSidesMunich2026 are now open.
Submit your idea and dig into the details:
https://2026.bsidesmunich.org/cfp
#BSidesMunich2026 #CFP #BSidesMunich
https://social.bsidesmunich.org/submissions-for-bsidesmunich2026-are-now-open/
BSidesMunich