Team Europe has once again demonstrated its dominance in the global cybersecurity skills landscape by winning the 4th International Cybersecurity Challenge (ICC). The event, held in Tokyo, Japan, concluded on November 14, 2025, with the European team securing the top spot for the fourth consecutive year. The competition, which involves a series of complex Capture the Flag (CTF) challenges, brought together the best young talents from eight international regions. The European Union Agency for Cybersecurity (ENISA), which organizes and trains Team Europe, celebrated the win as a testament to its investment in future cyber resilience.
The International Cybersecurity Challenge is an annual event that aims to:
This year's competition in Tokyo featured teams from eight regions, representing over 80 countries:
Teams competed in a variety of challenges designed to test their skills in areas like cryptography, reverse engineering, web security, forensics, and penetration testing.
Juhan Lepassaar, the Executive Director of ENISA, praised the event's role in building future cyber resilience and highlighted the immense talent of the young generation. The success of Team Europe is attributed to a rigorous selection and training process managed by ENISA, which includes bootcamps and online sessions to build both technical and teamwork skills.
Following the success of the ICC, ENISA is also promoting the 2025 Kunoichi Cyber Games, an all-female cybersecurity competition. This initiative aims to encourage more women to enter the cybersecurity field and address the industry's gender diversity gap. These events are part of a broader strategy to build a larger and more diverse talent pool to meet the growing global demand for cybersecurity experts.

Cybersecurity professional with over 10 years of specialized experience in security operations, threat intelligence, incident response, and security automation. Expertise spans SOAR/XSOAR orchestration, threat intelligence platforms, SIEM/UEBA analytics, and building cyber fusion centers. Background includes technical enablement, solution architecture for enterprise and government clients, and implementing security automation workflows across IR, TIP, and SOC use cases.
Help others stay informed about cybersecurity threats
Every tactic, technique, and sub-technique used in this threat has been identified and mapped to the MITRE ATT&CK framework for consistent, actionable threat language.
Observables and indicators of compromise (IOCs) have been extracted and cataloged. Risk has been assessed and correlated with known threat actors and historical campaigns.
Detection rules, incident response steps, and D3FEND-aligned mitigation strategies are included so your team can act on this intelligence immediately.
Structured threat data is packaged as a STIX 2.1 bundle and can be visualized as an interactive graph — relationships between actors, malware, techniques, and indicators.
Sigma detection rules are derived from the threat techniques in this article and can be converted for deployment across any major SIEM or EDR platform.