The point of conducting red team/blue team exercises is to improve the security posture of the organization, not to cause actual damage. The defenders in these scenarios are the Blue Team. Their job is to adopt the methods and simulate the kinds of attacks that actual adversaries might use against an organization. The “attacking” team in cybersecurity exercises is known as a Red Team. By learning the latest tactics and sharing vulnerabilities, security practitioners can better defend networks from future attack. The general purpose of the event is to bring the security community together to share information and gain knowledge about tools and exploits that can be used by bad actors.

DEF CON features virtual villages dedicated to specific topics such as lockpicking, IoT (Internet of Things) devices and social engineering. Along with Black Hat, DEF CON is one of the best-known conferences in the United States for hackers and computer security experts. This blog will introduce CTFs and related security concepts, then show how the learning we gain by competing in CTFs helps inform the way Black Lotus Labs tracks cyber threat actors in the real world.ĭEF CON is a hacker’s conference which normally takes place in the summer in Las Vegas. If that sentence reads as gobbledygook to you, read on as we unpack it. Last August, Black Lotus Labs participated in the DEF CON Red Team Village CTF.

Target red flag game