On February 25, 2025, at 6:00 p.m., the fifth season of the CyberBastion League officially began, with CyberKasztelan Piotr Kępski opening the event. The official opening of the season was performed by Mirosław Maj, President of the Secure Cyberspace Foundation, and Krystian Mika from SecureVisio, representative of the main partner of the competition. Marcin Fronczak talked about the new features and surprises awaiting the participants, and CyberBurgrabia – Artur Markiewicz, whom you should already know well from the new series of our podcast Cyber, Cyber… – CB Radio, also took the floor.
Record attendance and a challenging scenario
We are extremely pleased that the 5th season of the CyberBastion League is enjoying record interest. As many as 87 teams signed up to participate, 81 of which took part in the competition during the first tournament (for comparison, we had 87 teams on the list for the entire season IV – many of them joined during the competition).
Participants faced a realistic scenario inspired by the APT Volt Typhoon campaign. The scenario involved exploiting the CVE-2024-39717 vulnerability in Versa Director servers used to manage SD-WAN applications. The target of the attack was RailNet, a key provider of digital services for rail transport. The attackers used a custom VersaMem webshell to intercept user credentials and upload malicious code disguised as PNG files. The main goal of the campaign was to obtain sensitive data.
Fierce competition and twists and turns
The first tournament of the fifth season of the CyberBastion League started with a slight delay due to cloud infrastructure performance issues, but this did not affect the intensity of the competition. The teams fought to the very end, and the point differences were minimal.
About halfway through the 43-minute scenario, Ctrl-Alt-Defeat, the winners of the previous season, took the lead. They maintained their first position almost until the very end, but in the final minutes of the game, they were overtaken by Cookie of disaster, who ultimately claimed victory. Ctrl-Alt-Defeat took second place, and Phish n’Chips took third.
Summary
In season 5, we changed the way teams are scored – as a result, everyone who played earned ranking points (previously, only the top 30 places were rewarded). Detailed results can be found in the CyberBastion League season 5 tab (https://cyberbastion.org/5-sezon-ligi-cyberbastion/).
More details about the tournament will be available in the next episode of the Cyber, Cyber… CB Radio podcast.
We encourage you to register your teams – the next tournament is coming soon! Don’t miss the opportunity to join the competition and test your skills in the CyberBastion League!
