The global cybersecurity calendar lands on the Gold Coast this May with the 2026 edition of the International Cybersecurity Challenge, staged alongside the AUSCERT Conference 2026. Over four days, from May 18 to 21, national teams from more than 80 countries will converge for what has steadily become the closest thing the industry has to a world championship of cyber defense.
The structure of the competition reflects how modern cyber operations actually unfold. Participants won’t just be solving isolated problems—they’ll be immersed in Jeopardy-style challenges and full Attack/Defense Capture the Flag scenarios that simulate real adversarial environments. Systems are probed, exploited, defended, patched, and attacked again, often within minutes. It’s fast, slightly chaotic at times, and very revealing in terms of real capability.
A key layer behind this year’s event is the infrastructure provided by SkillBit, whose hands-on training and assessment platform will power segments of the competition. The setup allows for real-time interaction across complex environments while giving coaches and organizers visibility into how teams perform under pressure. That visibility piece—who’s adapting fastest, who’s missing signals—ends up being almost as valuable as the final scoreboard.
The ICC has always been about more than ranking teams. It functions as a global benchmark, a place where emerging cybersecurity talent is tested in conditions that mirror actual threats. There’s also a collaborative undertone running through the event, with participants, coaches, and organizers exchanging techniques, approaches, and sometimes even philosophies about defense and offense in cyberspace. You can feel that mix of competition and shared purpose throughout.
Hosting it within AUSCERT adds another layer, tying the competition into a broader ecosystem of practitioners, vendors, and researchers. The result is less of a standalone tournament and more of a dense, multi-layered gathering where elite talent, real-world tools, and evolving threat models all intersect in one place. For a few days, at least, the abstract idea of “cybersecurity capability” becomes very concrete.