e2 Cyber × The Safer Internet Project present

Another brick in the SILO

An online capture the flag (CTF) competition

A government agency. 40,000 dead devices. An official story that does not add up. Solve the cybersecurity challenges, find the flags and climb the leaderboard. Beginners welcome.

Opens
Fri 20 Nov 2026 · 8:00 pm AEDT
Duration
One week
Countdown
Prizes
Australian residents
SILO Case Viewer 4.2FileEditViewEvidenceReportsCase 0417 · Firmware 2.8.1 incident · Status: CLOSED
CASE 0417
Summary
Ministerial brief
EVIDENCE
Physical access
Fleet status
Firmware 2.8.1
Commit history
CCTV
PERSONNEL
B-2291
HR records

Physical access · Badge B-2291

Records 1–11 of 11 · Last sync 03:07:12
Custody record · HR
Sealed in envelope
Evidence drawer 4, locked
Logged Wed 17:42 · J. Arden, HR
≠
Access event · Door controller
Build server opened
BUILD-SRV-02 · Thu 03:07:12
Result: GRANTED
AnomalyThe same badge was in two places at once. Nobody at SILO has explained it.
TimeDoorBadgeResult
Wed 17:42HR-OFFICE-1B-2291Returned
Wed 18:05LOBBY-NB-1180Granted
Wed 22:31LOBBY-NB-0974Granted
Thu 01:15PERIM-GATEB-0974Exit
Thu 03:07BUILD-SRV-02B-2291Granted
Thu 08:58LOBBY-NB-1180Granted
Thu 09:14BUILD-SRV-02SYSTEMPush 2.8.1
Thu 09:16NOC-2B-0331Granted
Thu 11:40EXEC-7B-0002Granted
Fri 06:00SYSTEMn/a0 / 40,000 online
Mon 10:12EXEC-7B-0002Brief signed
Badge B-2291 · Scan
OFFICIAL
PHOTO WITHHELD
Firmware engineering
Access: build servers
B-2291
DEACTIVATED
This card remains the property of SILO. If found, return to Human Resources. Misuse is an offence.
CAM-04 · BUILD-SRV-02
THU 03:07:12
Badge B-2291 used at the build server door · 0 badged staff on site

Fleet status · Firmware 2.8.1 rollout

Thu 09:14 AEDT · Push started
RespondingNot responding
40,000Devices updated
17Countries
40,000Still responding
20 h 46 mFrom push to the last device going dark

Firmware 2.8.1 · Integrity check

SHA-256 · Build #4131
Build outputCI log, build #4131
9f2c4a1e07b3d58c 6e19a0f42d7b88c1 0aa3e95c4f61b2d7 8c03e1f9a6d4e41a
Expected
Shipped binaryfw_2.8.1.bin, 40,000 devices
9f2c4a1e07b3d58c 6e19a0f42d7b88c1 0aa3e95c4f61b2d7 3b7d90e2c5f8100c
Mismatch
HashDoes not match the build
Someone changed the binary after it was built.
SignatureValid · SILO release key
It was signed with SILO's own key anyway.
Commit history · release/2.8
4134release: tag 2.8.1e6b0d19build-botThu 09:11
4133ci: sign release artifacts7c41aa8m.okaforThu 08:40
4132fw: update bootloader handoffb2f9031d.reyesThu 08:02
4118 to 413114 commits missing from historyno authorWed 17:42 to Thu 03:07
4117fw: ota rollout guard5d08e7ca.nowakWed 17:31
4116test: rollback path9a3c61fa.nowakWed 16:58
4115fw: crypto self-test1e7a4b3d.reyesWed 15:20
4114docs: ota rollback runbookc93d20aa.nowakWed 14:47
● Connected · SILO-NETUser: GUESTDevices online: 0 / 40,000
01 · The incident

The official story is tidy.
The evidence is not.

OFFICIAL: SENSITIVE
Ministerial briefRef SILO-MB-0417

Firmware update 2.8.1

On Thursday morning SILO, the Secure Infrastructure and Logistics Office, pushed a routine firmware update to 40,000 of its devices across 17 countries. By Friday, every single one was a brick.

The failure was caused by a build error made by a junior engineer. She had already left the agency the week before.

No unauthorised access occurred. Her badge opened the build server the night before the push. The Minister has been briefed.

Signed off · Office of the Director, SILO
FILE CLOSED
Recovered timelineCase 0417
Last dayThe engineer hands her badge back. HR logs it, seals it in an envelope and locks it in a drawer.
+7 days, 03:07The night before the push, that same badge opens the door to the build server.
Thu 09:14Firmware 2.8.1 goes out to 40,000 devices in 17 countries.
FriEvery single device is a brick.
AfterA ministerial brief is signed off. The file is closed.
Analyst noteThe build logs do not match the binary. The commit history has a gap nobody inside SILO can explain. So who was holding the badge?
02 · Your brief

The world moved on.
You did not.

e2 Cyber and the Safer Internet Project dare you to reopen the file. Whether you are new to CTFs or a seasoned red teamer, SILO will put your skills to the test. Will you find the brick that does not fit?

01

Firmware analysis

Tear apart firmware binaries that do not match their own build logs.

02

Blockchain forensics

Follow a money trail across a blockchain someone hoped nobody would read.

03

Social engineering

Talk your way through an agency that has already closed the file.

03 · Prizes
1stA financial voucher
2ndA 12-month Safer Internet Project subscription
3rdA one-hour career consultation with e2 Cyber

Prizes are for Australian residents currently living in Australia, so tick that box when you register. Everyone else can still compete for the leaderboard.

04 · Details
Opens
Fri 20 Nov 2026
8:00 pm AEDT
Duration
One week to complete
all challenges
Closes
Fri 27 Nov 2026
8:00 pm AEDT
Format
Online capture the flag,
individual players
Who can play
Anyone, beginners
to seasoned red teamers
This is our final CTF for 2026

Are you ready to
accept the brief?