Automotive CTF 2024
VicOne, the industry leader at the forefront of automotive cybersecurity, and Block Harbor, the trusted automotive cybersecurity engineering company, proudly spearhead Automotive CTF 2024!
This high-stakes global automotive-focused CTF (capture the flag) competition gathers cybersecurity professionals of all levels — not only to solve challenges but also to upskill their expertise and break through in the exciting field of automotive cybersecurity.
With over US$100,000 in prizes and the opportunity to participate in the final round and awarding ceremony in the US, the challenge is on.
Championing the Future of Automotive Cybersecurity

Facilitating the Emergence of Automotive Cybersecurity Experts
Participants in Automotive CTF gain practical hands-on experience by solving challenges derived from real-world scenarios. This hones their skills toward becoming full-fledged experts in automotive cybersecurity.

Fostering Strategic Collaborations Between the Cybersecurity Community and the Automotive Industry
Automotive CTF provides an arena for cybersecurity professionals and industry leaders to exchange ideas and problem-solving strategies, prompting vital synergies that benefit the connected vehicle industry.

Fortifying Automotive Cybersecurity Through Potential Zero-Day Vulnerability Discoveries
While Automotive CTF's hacking exercises are designed to exploit weaknesses in simulated car systems, the attempts could uncover zero-day vulnerabilities, thus leading to more secure vehicles for the road ahead.
Automotive CTF Mechanics
US/Global Schedule of Activities
Training Period
NOW OPEN
Pre-register in VSEC Learn courses (Block Harbor Hackathon 101) and CTF Proving Grounds to access training and walk-throughs of previous challenges:
Competition Registration
Qualifying Round (Remote)
Aug. 24 to Sept. 8, 2024
Finals (Remote/On-site*)
Oct. 21, 2024
*Detroit, Michigan, USA (The team or a team representative needs to be on-site to compete.)
Contact: Bryan Blancke
bryan@blockharbor.io
For the Japan schedule, go to: /jp/automotive-ctf
Get Updates on Automotive CTF
Get Insights Into Automotive Cybersecurity From VicOne
GAIN INSIGHTS INTO AUTOMOTIVE CYBERSECURITY
20 Phoenix Contact CHARX Vulnerabilities Patched: How They Could Have Enabled Deeper EV Charger Control
Phoenix Contact patched 20 CHARX SEC-3xxx EV charger vulnerabilities in firmware 1.9.1. VicOne examines their wider implications and practical steps for operators.
READ MORE →CVE-2026-86793: SGLang Bypass Could Let Attackers Run Code on AI Servers
VicOne details CVE-2026-86793, a SafeUnpickler bypass in SGLang that could enable unauthenticated remote code execution, and recommended mitigations.
READ MORE →How Physical AI Challenges Traditional Security Assumptions for Autonomous Systems
Physical AI changes OT security assumptions, making behavioral verification essential when an air gap is not practical and response time is limited.
READ MORE →How BADBOX-Linked Malware Turned Automotive Head Units into Proxy Nodes
VicOne shows how BADBOX-linked malware used DoFun Android head units, weak MQTT security, and trusted OTA updates to push silent, persistent installs.
READ MORE →