AI攻破CTF赛制致竞赛消亡
推荐指数 52.0 NO. 013 · 2026.05.17
发布2026/05/16Score277Comments247
为什么值得看
顶级CTF选手宣布CTF竞技场景已死,因前沿AI模型已能破解原本依赖人类创造性漏洞挖掘的竞赛题目。安全人才培养和竞赛设计模式面临根本性重构压力。
编辑判断
CTF曾是安全人才选拔的核心漏斗,Google、NSA等机构长期通过CTF成绩筛选候选人。这个漏斗失效后,行业需要新的信号机制来识别顶尖安全人才,这可能会推高传统渗透测试认证的价值,或者迫使企业回归更耗时的实战项目评估。
对AI安全研究者来说,这是一个反向验证机会:如果AI能解CTF但还无法稳定发现真实世界0day,说明现有CTF题目与真实漏洞挖掘之间存在关键的认知差距,这正是人机协作安全研究可以切入的空白地带。
社区反馈
意见分歧 193 条评论
核心争论:CTF消亡是AI导致还是早已因商业化、团队规模化变质
>I started playing CTFs in 2021 >and the old game is not coming back For many people the CTF scene was already dead in 2021 because it had turned into something unrecognisable. In reality it’s just different.
Well, I had to google what CTF means (capture the flag, a hacking competition), so surely cannot judge here, but the text indicates that with AI some things are very different today: "That makes open CTFs pay-to-win. The more tokens you can throw at a competition, the faster you can burn down the bo
Isn’t that the bitter lesson in a nutshell? “Specialised cybersecurity models … are becoming less relevant compared to general frontier LLMs.”