2026 Cyber Conflict Exercise (CCE 2026): Testing Cybersecurity Skills for the AI Era

Cyber Summit Korea (CSK) 2026. Source: CSK 2026 Cyber Summit Korea website

2026 Cyber Conflict Exercise (CCE 2026): Testing Cybersecurity Skills for the AI Era

As artificial intelligence (AI) advances rapidly, the importance of cybersecurity is growing right along with it. As attack techniques become more sophisticated, the role of security talent who can find, analyze, and respond to real cyber threats is becoming more important too.

Against this backdrop, in September 2026 at COEX Seoul, the 2026 Cyber Conflict Exercise (CCE 2026) was held.

CCE is not simply a competition to quickly solve hacking problems — it's a cybersecurity competition that comprehensively tests the ability to analyze and respond to a wide range of cyber threat scenarios.

This article takes a straightforward look at CCE 2026's background, competition format, participation categories, key problem domains, the atmosphere on-site, and what this competition means in the age of AI.

1. What kind of competition is CCE 2026?

CCE stands for Cyber Conflict Exercise, known in Korean as the 'Cyber Attack-Defense Competition.'

Hosted by the National Intelligence Service and organized by the National Security Research Institute, it aims to assess national cybersecurity capabilities and to discover and nurture cybersecurity talent.

CCE was first held in 2017, and 2026 marked its 10th edition.

According to the official competition website, CCE has continued to develop its themes around the perspectives of cyber crisis response and cyber resilience.

The 2026 CCE was likewise designed not to end at simply finding vulnerabilities, but to evaluate the ability to predict, analyze, respond to, and recover services from cyber threats.

2. Where was CCE 2026 held?

The 2026 CCE's online preliminaries took place on August 22, and the finals were held on September 17 in Conference Room E on the 3rd floor of COEX, Seoul.

This year's CCE finals were held together with the global cybersecurity event Cyber Summit Korea 2026 (CSK 2026).

CSK 2026 was held at COEX Seoul from September 16 to 18, with participation from foreign intelligence and security agencies, government, industry, and academia.

According to Yonhap News and other media reports, CSK 2026 was attended by delegations from 56 foreign intelligence and security agencies across 31 countries, along with domestic and international officials and members of the public — around 3,000 people in total.

So CCE 2026 was notable not just as a standalone hacking competition, but as one pillar of a larger international cybersecurity event.

3. Who took part in CCE 2026?

CCE 2026 was organized into three main categories based on participant type.

Public sector

A category for members working at national and public institutions.

The official competition guide set the finals at 20 teams.

General category

A category open to private-sector employees, undergraduates, and graduate students.

The general category also had 20 teams compete in the finals.

Youth category

A category aimed at discovering future cybersecurity talent.

In 2026, 10 teams advanced to the finals.

So the finals featured 20 public-sector teams, 20 general teams, and 10 youth teams — 50 teams in total.

One defining feature of CCE is that not just public-sector professionals but also private security experts, university students, and teenagers compete in cybersecurity skills at the same event.

4. Only online-preliminary winners advance to the finals

CCE 2026 wasn't a competition held at COEX from the very start.

It was run so that online preliminaries were held first, and the top-scoring teams in each category advanced to the finals.

According to the official website, the preliminaries ran from 9 a.m. to 6 p.m. on August 22, 2026.

The number of teams advancing to the finals was as follows.

In the finals, teams gathered in person at the venue and had to solve a variety of cybersecurity problems within a limited time.

5. What kinds of problems did CCE 2026 feature?

Because of the name CCE, it's easy to assume this is simply 'a competition to pick out the best hackers.'

But the actual range of problem categories is quite diverse.

The main categories announced officially are as follows.

• Pwnable

• Web hacking

• Forensics

• Cryptography

• Reversing

• Blockchain

• AI

In simple terms, each category tests the following kind of skill.

Web hacking

Analyzing security vulnerabilities that can occur in websites or web applications.

Pwnable

A category requiring the ability to analyze a program's vulnerabilities and understand how it behaves.

Reversing

Analyzing a program's behavior to understand its internal structure and how it executes.

Forensics

Tracing the cause of an incident by analyzing traces left on systems or files after a cyber incident occurs.

Cryptography

Analyzing problems related to cryptographic algorithms and solving them using the given information.

Blockchain

Dealing with the structure and security issues related to blockchain technology.

AI

One notable feature of the 2026 competition is that AI was included as a problem category.

This can be seen as a sign that AI is no longer a technology separate from cybersecurity, but something that must now be handled directly in security work.

6. The core of CCE 2026: 'cyber recovery capability'

The official CCE 2026 website describes the finals' evaluation direction as assessing cyber recovery capability.

The key concept here is 'recovery.'

In cybersecurity, quickly grasping a situation and restoring normal operations after an attack occurs matters just as much as fully blocking the attack in the first place.

For example, suppose a company's server shows signs of an anomaly.

The issue isn't resolved simply by finding the vulnerability.

The following process is required.

Detecting the anomaly → analyzing the cause → identifying the scope of the attack → responding → recovering the system → preventing recurrence

Because this process matters in real cyber incidents too, CCE goes beyond simple problem-solving skill to address more comprehensive cyber response capability.

7. Not just getting the right answer — record and defense matter too

According to coverage of the CCE 2026 finals by ZDNet Korea, this year's competition comprehensively factored in not just whether an answer was correct, but also record, speed, and defense.

This means the evaluation included not only whether a problem was solved, but how efficiently it was solved, and whether the given system could be defended stably.

This approach connects to real-world cybersecurity work as well.

In the actual security field, simply saying 'I found a vulnerability' isn't enough.

You also have to judge how quickly it was found, how far the attack's scope extends, and how to respond while minimizing the impact on the service.

8. What was the scene like at the 2026 competition?

The COEX venue where the competition was held looked quite different from a typical sporting event.

According to ZDNet Korea's on-site coverage, participants solved problems on their own laptops, and a quiet atmosphere was maintained at the venue so as not to disturb their concentration.

The venue had dedicated spaces for teams by category and a real-time scoreboard, and participants stayed focused on solving problems within the limited time.

In particular, while a cybersecurity competition may look quiet from the outside, for participants it's a highly demanding event that requires intense concentration to analyze and solve problems within a limited time.

9. How many teams took part in CCE 2026?

The official website lists the finals as 20 public-sector teams, 20 general teams, and 10 youth teams.

ZDNet Korea's on-site coverage of the finals reported that 408 teams entered the preliminaries, with 50 teams advancing to the finals.

In other words, the structure was one where teams that passed the online preliminaries went on to compete in person at COEX.

This structure lets a wide range of participants interested in cybersecurity first test their skills in an online environment, with the top teams then advancing to the in-person finals.

10. Total prize money: 100 million won

The total prize pool for CCE 2026 is 100 million won.

The prize structure published on the official website is as follows.

The overall winner receives the Director of the National Intelligence Service Award along with a 40 million won prize.

Winners in the public sector category are also informed of bonus-point provisions tied to the National Intelligence Service's cybersecurity job evaluation, under the competition's operating rules.

11. Why the youth category matters

One aspect worth watching closely at CCE is the youth category.

Cybersecurity is not a field where experts are made overnight.

Building real skill requires studying networking, operating systems, programming, cryptography, and system architecture over a long period, along with hands-on experience solving a variety of problems.

That's why having the opportunity to encounter security problems and test one's abilities at the teenage stage matters for the process of nurturing cybersecurity talent.

According to CCE's official history on its website, the youth category was first introduced in 2022.

Since then, CCE has broadened its scope to discover not only adult professionals but also future cybersecurity talent.

12. CCE and cybersecurity in the AI era

One thing especially worth noting about CCE 2026 is that AI has emerged as an important area of cybersecurity.

AI is a double-edged technology in the security field.

From an attacker's standpoint, it can be used to automate attack processes and analyze information; from a defender's standpoint, it can support tasks like anomaly detection, log analysis, and threat intelligence analysis.

For this reason, cybersecurity experts of the future will need to understand not just how to use existing security tools, but also the characteristics and limitations of AI.

At CSK 2026 as well, topics like cyber threats posed by high-performance AI and cybersecurity strategy for the age of AI transformation were major agenda items.

Ultimately, AI's appearance as one of the problem categories at CCE 2026 can be seen as connected to the broader shift underway in the cybersecurity landscape itself.

13. Why CCE and APEX 2026 were held together

During the CSK 2026 period when CCE 2026 was held, another major cybersecurity event also took place.

It was APEX 2026, the international cyber defense exercise.

According to Yonhap News, APEX 2026 was attended by around 300 people from 23 countries.

Notably, this year's APEX unveiled an AI defense team that responds to real-time cyberattacks without human intervention.

The AI defense team was designed to take part in the cyberattack response process from threat detection through attack analysis to recovery and response-strategy development.

This is significant in that while CCE is a competition testing human security experts' problem-solving skills, APEX offered a look at international cyber response training and the emerging trend of AI-based defense technology.

14. CCE is not just a 'hacking competition'

Someone encountering CCE for the first time might easily assume it's 'a competition where hackers attack each other.'

But in reality, it carries a much broader meaning.

Looking at the areas CCE covers, it includes multiple fields of cybersecurity: web security, program analysis, digital forensics, cryptography, blockchain, and AI.

The finals were also designed to evaluate cyber recovery capability.

So it's better to understand CCE not as a simple contest of attack skills, but as an event that comprehensively tests the following abilities.

Understanding vulnerabilities

→ Analyzing attack feasibility

→ Detecting anomalies

→ Analyzing the cause of an incident

→ Responding quickly

→ Recovering the service

→ Preventing recurrence

These capabilities are also important elements of security work at real companies and public institutions.

15. How has it changed compared to past CCEs?

According to the history published on CCE's official website, the competition has continued to evolve since 2017.

In its early days, it centered on attack-and-defense exercises using mock infrastructure systems; later, cyber resilience, digital platforms, public safety, and other era-specific cybersecurity issues emerged as the competition's main themes.

In particular, the youth category was first created in 2022, and in 2023 the competition expanded into an international cyber attack-defense event with teams from multiple countries abroad.

Since 2024, it has been held in conjunction with Cyber Summit Korea.

In 2025 the total prize pool expanded to 100 million won, and the same scale was maintained in 2026.

In other words, CCE's evolution can be traced alongside the shifting cyber threat landscape, with both its evaluation scope and its pool of participants expanding over time.

16. What the 2026 CCE reveals about the state of cybersecurity

The important shifts revealed through this year's competition can be summarized into three main points.

First, 'recovery' is becoming more important than attack.

In modern cybersecurity, it's difficult to aim for blocking 100% of attacks.

So the ability to quickly detect an attack, minimize the damage, and then restore the system to a normal state matters greatly.

Second, AI is becoming a new domain of security.

As AI begins to be used on both the attack and defense sides, security capability around AI itself is becoming important too.

Third, the base of cybersecurity talent is expanding.

Through a structure that lets not only public-sector professionals but also private-sector employees, university students, and teenagers take part, security talent across generations can compete and gain experience.

17. What should you study if you're interested in cybersecurity?

If you're interested in cybersecurity competitions like CCE, you don't need to start by studying only difficult hacking techniques.

Beginners are better off building a foundation in the following order.

① Basic computer architecture

Understand how the CPU, memory, storage, and operating system work.

② Networking basics

Study fundamental concepts like IP addresses, ports, TCP/IP, DNS, and HTTP.

③ Linux

Get comfortable with the Linux environment, widely used in the security field.

④ Programming

Learn the basic principles of programming by building simple programs in a language like Python.

⑤ Web technology

Study how web services are built, including HTML, JavaScript, servers, and databases.

⑥ Security fundamentals

Learn concepts such as authentication, encryption, access control, vulnerabilities, and log analysis.

⑦ CTF and security practice

Once you have a solid foundation, it's a good idea to practice solving problems in legally provided, educational security practice environments.

What matters is practicing only in authorized educational/training environments, not against real services or other people's systems.

18. The future security talent this points toward

In the past, a 'cybersecurity expert' often brought to mind someone with the skill to break into systems.

But security work today has become far broader.

A security expert must analyze the feasibility of an attack, detect anomalies in a system, find the cause when an incident occurs, minimize the damage, and recover the service.

With AI now entering the picture as well, the scope of knowledge security experts need keeps expanding.

The fact that CCE 2026 covered web hacking, pwnable, forensics, cryptography, reversing, blockchain, and AI together is a good example of this shift.

19. Conclusion

The 2026 Cyber Conflict Exercise (CCE 2026) was more than an event to see who could solve problems fastest — it was a place to verify practical security capabilities for responding to an evolving cyber threat landscape.

In particular, as AI became an important domain of cybersecurity in 2026, the range of skills demanded of future security experts is growing even more diverse.

CCE 2026 is also meaningful in that public-sector professionals, private-sector security personnel, university students, and teenagers all took part together.

Cybersecurity is not a domain for specialists alone — it's a field that needs diverse talent to keep our digital society safe.

As AI technology continues to advance, the ability to understand attacks, detect threats, minimize damage, and safely restore systems will only become more important.

Cybersecurity competitions like CCE can be seen as an important educational and competitive platform for experiencing these capabilities firsthand and discovering the security talent of the future.

Please refer to the Cyber ​​Summit Korea (CSK) 2026 website (https://cybersummit.kr)