Contests/Workshops

Aerospace Village presents Bricks in the Air, a hands-on demo covering the low-level protocols used in aviation, alongside a small Wi-Fi CubeSat simulator and an original badge that tracks aircraft and satellites. Jacob Oakley, an author and expert in space cybersecurity, will be on site throughout the conference, so you can ask him directly what hacking a satellite actually involves.

Biohacking Village offers hands-on medical device security training together with a healthcare-focused CTF. The training covers device architecture, threat modeling, vulnerability discovery, coordinated disclosure and the ethics of research that touches clinical care. The CTF puts those concepts to work in realistic scenarios spanning device communications, clinical workflows, data protection and vulnerability analysis — all framed around protecting patient safety.

The Car Hacking Village is a place where everyone is welcome to learn about car hacking and automotive cybersecurity. At CODE BLUE 2026 the village will feature hands-on activities designed for beginners and live demonstrations of vehicle exploits, offering a practical look at the technologies behind modern cars and where their weaknesses lie. No prior experience needed — stop by and give it a try.

The ICS Village is a nonprofit organization that builds interactive ranges and hands-on experiences to help people understand, explore, and secure industrial control systems (ICS) and operational technology (OT). Through exhibits, capture-the-flag challenges, and training events, it raises awareness of critical infrastructure cybersecurity risks while fostering education and collaboration across technical, policy, and business communities.

Responding to a security incident means making fast decisions on incomplete information. Through an immersive scenario, participants debate what to prioritize across situational awareness, business continuity, stakeholder communication and root-cause investigation, then draft a report for external authorities. Organizers review each submission with feedback, and a discussion session afterwards lets participants and observers compare their judgments. No specialist knowledge required.

Hacker X Hacker is a story-driven CTF. Players take on the role of newly licensed hackers entering the Cache, a hidden simulation built atop forgotten digital infrastructure, recovering fragments of lost records while racing rival hackers and uncovering the mystery behind its creator. Web, reverse engineering, pwn, forensics, crypto and infrastructure tasks are woven into a single narrative that unfolds as teams progress.

In this workshop, participants analyze real attack data collected by ASTIRA, the IoT honeypot operated by Panasonic, and work out how attackers and IoT malware actually behave. The dataset comes with prepared answers, so those new to data analysis can work through it step by step. The data is real, however, which means findings the organizers never anticipated may still surface.

Presented by a study group focused on space cybersecurity, this village showcases research by the organizers and members on display panels, alongside a live demonstration of satellite motion simulated on a PC. An aerospace-themed CTF runs throughout the conference, and aerospace cybersecurity workshops are held twice a day — three ways to take part, whether you prefer to look, compete or learn.

The Wired Village is a hands-on security zone built around intentionally vulnerable IoT and OT devices of our own making. Each device is a full target, with challenges spanning UART, SPI and I2C probing, JTAG/SWD debug access, firmware extraction, device interface flaws and industrial protocol attacks on a portable OT cyber range. Work the flags at your own pace in the CTF, or join a mentor-guided workshop.

As macOS adoption accelerates across enterprise and personal environments, DFIR analysts and researchers need to be equipped for the particulars of the macOS ecosystem. This practical workshop explores lesser-known but critical territory — core components, forensic artifacts and the real scenarios encountered in DFIR and malware investigations — with an emphasis on free and open-source tooling for extraction and analysis.

LCL-Tokyo is a community for women working in the security industry. At CODE BLUE we bring the lightning talk event we hold regularly to the conference floor. The session introduces the activities of each working group and opens the stage to anyone who wants to present, with talks welcome in either English or Japanese. Come by and join us.

CyberTAMAGO is a community where people present cybersecurity tools, code and ideas and exchange feedback with one another. It serves as a place to rehearse presentations and demos, refine projects and build confidence before aiming for stages such as Black Hat Arsenal, DEF CON Demo Labs or CODE BLUE BlueBox. Whether you are releasing your first tool or targeting an international conference, you are welcome.