AI Is Solving CTF Challenges in Minutes

At BSidesSF 2026, an autonomous AI agent fully automated and won a Capture The Flag competition by solving all 52 challenges in minutes, marking a dramatic shift from the previous year when AI was used only as a helper tool. This development challenges the assumption that CTF competitions reliably measure cybersecurity skills, since AI now outperforms humans on these standardized, well-defined problems. While AI excels at bounded technical challenges, cybersecurity professionals still require human judgment for real-world work like penetration testing and incident response, suggesting that training methods need to evolve beyond traditional CTF formats.