GOhack25: Hands-on Cybersecurity

Two days of workshops, retro arcade games, skills, and high-energy hacking: GOhack25 brought more than 350 people together to experience cybersecurity up close. From the EDU Track to the Live Bug Bounty Challenge, the event focused on learning, community, and real hands-on practice.

From November 7–8 2025, the campus of the Fernfachhochschule Schweiz (FFHS) in Zurich once again became a place to hack, explore, and learn. The GOhack25 EDU Program offered more than 30 talks, workshops and live sessions across two days, while the Live Bug Bounty Challenge ran in parallel. Participants ranged from students and career starters to IT professionals and cybersecurity enthusiasts.

More than 350 attendees immersed themselves in topics spanning cybersecurity, AI and crisis management. The atmosphere was practical, interactive and shaped by genuine knowledge sharing. One participant summed it up perfectly on the final day: “A nerdy Saturday with depth — and a lot of fun.”

GOhack25_Opening.JPEG

From gummi bears to quantum attacks

Following Thursday’s opening symposium on IT, OT and IoT security, the EDU Programme delivered a diverse range of interactive workshops and inspiring talks on Friday and Saturday. Topics covered everything from AI governance and quantum cryptography to emergency planning, storytelling for security awareness, SAP security and OT security. The breadth of sessions clearly showed just how wide the field of cyber defence has become.

A stand-out moment was Marcus Beyer’s interactive crisis-management training, which opened with a “Gummibärenbande” (gummi bear troup) intro — immediately setting the tone and creating a lively, engaged atmosphere. From the first minutes, it was clear this session would be dynamic, hands-on and highly interactive.

GOhack25_Marcus_002.jpg_compressed.JPEG
Marcus Beyer, Security Awareness Officer Swisscom

Equally high in demand was Antoine Neuenschwander’s Hack-the-Box workshop. The first participants were already waiting outside 40 minutes before the session began — hardly surprising, as Antoine’s workshops have gained an excellent reputation. His three-hour format is beginner-friendly yet challenging, making it ideal for trying out pentesting and testing your own skill level.

GOhack25_Antoine_hack-the-box-workshop.JPEG
Antoine Neuenschwander, Tech Lead Bug Bounty Swisscom

Cybersecurity in neon lights: The SWITCH Security Arcade

Another crowd favourite was the SWITCH Security Arcade — a darkened room full of neon colours, retro vibes and custom-built arcade machines. From Password Invaders to OSINT Crawler and Overphished!, the games reimagined classics like Space Invaders, replacing aliens with cyberattacks. Phishing, social engineering and OSINT challenges were explained through gameplay, making cybersecurity tangible for everyone.

GOhack25_SWITCH-Security-Arcade.JPEG

Live Bug Bounty Challenge: A Neck-and-Neck Finish

Running alongside the EDU Programme was the heart of the weekend: the Live Bug Bounty Challenge. Thirteen programmes were in scope, including new systems and fresh target areas. Early on, new names appeared on the leaderboard — but by the end, the race for first place came down to the final minutes.

GOhack25_leaderboard-waiting.JPEG

Ultimately, last year’s top three reclaimed their positions — this time in a new order: Collfuse took first place, followed by simioni and xel.

GOhack25-bb-winners.png
1st place: collfuse, 2nd place: simioni, 3rd place: xel

An impressive result that highlights the high skill level within the Swiss ethical-hacker community. As one participant put it: “It’s a unique opportunity to get a real look into the bug bounty scene. This is the bug bounty event in Switzerland.”

Pizza, networking and community spirit

Beyond talks and workshops, GOhack25 offered plenty of space for relaxed, informal exchange. At the apéro, in the lounge or gathered around the legendary Dieci pizza fleet, participants connected, shared experiences and simply enjoyed each other’s company.

GOhack25-dieci-flottila.jpeg

Cybersecurity thrives on community

After three days of cyber action, one conclusion is clear: GOhack25 brings people together. Learning, sharing and growing collectively — that’s the spirit that defines the event. Or, as one participant put it: “Cybersecurity thrives on community and exchange. GOhack25 proved that once again.”

GOhack25_Opening.JPEG