Remember we said CTF events can earn you XP? Now you can see the XP available from CTF challenges and your team’s total XP earned when an event ends!

With XP visibility available, you can choose what to tackle next and see your team’s progress after each event.

Heading on to your next event?:

We updated the HTB Profile dashboard to give you intelligent, personalized content recommendations. You'll be able to find your next Modules, Machines or Sherlocks based on your past completions and preferences!

👉 Check your personalized recommendations

Ready to take your cloud offensive skills further? Meet Ymir and Atlas, two advanced cloud labs designed to challenge experienced security professionals with realistic environments, complex misconfigurations, and multi-stage attack paths.

I step into Omni Multinational’s Google Cloud environment and work your way from its publicly reachable presence toward its most valuable asset: proprietary trading algorithms and intellectual property.

take on the company’s AWS environment, uncover exposed assets, exploit weaknesses, and chain attack paths to gain deeper access across its cloud infrastructure.

Each lab puts your enumeration, identity and access management, and exploitation skills to the test, with challenges spanning modern cloud services, applications, containers, and more.

Expect to tackle:

Two cloud environments. Two distinct attack surfaces. Plenty of opportunities to put your skills to the test.

Hack The Box introduces , an advanced certification designed to help organizations develop and validate detection engineering expertise in their security teams.

Effective detection engineering requires more than writing SIEM queries. Teams need to understand how adversaries operate at the process, memory, API, and operating system kernel levels, identify the telemetry that reveals their behavior, and build detection logic that can be tested and defended.

HTB CDEP combines a 13-module Detection Engineer Job Role Path with a 10-day hands-on enterprise engagement to assess these skills in realistic scenarios. Key capabilities include:

The Detection Engineer Job Role Path is mapped to MITRE ATT&CK, D3FEND, and the DoW Cyber Workforce Framework (DCWF).

What happens when an AI consultancy becomes the target?

Neural is an AI & Active Directory hybrid lab that puts you inside a corporate environment where AI-driven workflows are deeply integrated with the underlying infrastructure.

That creates attack paths that cross the boundary between AI and traditional enterprise security. Your goal is to find them.

Compromise AI integrations, abuse Active Directory, move across trust boundaries, chain weaknesses together and work your way through the environment.

Neural puts the AI attack surface where it belongs: in the middle of a real enterprise attack path, alongside the infrastructure security teams already know they have to defend.

Can you uncover the weaknesses hiding behind Neural’s AI-powered infrastructure?

It’s not enough to know how to use an AI tool. You need to know what to delegate, what to verify, and when to intervene, especially when an AI agent is moving quickly, operating across multiple tools, or confidently getting something wrong.

Our new learning paths are built around that shift.

Build the mental models you need to understand what AI systems are actually doing and where they can go wrong.

Learn how models, retrieval, agents, memory, context, and tool calls work, and how to verify AI output against ground truth.

Run offensive workflows with agents while keeping the engagement under your control.

Learn to direct agents across reconnaissance, exploitation, and post-exploitation while maintaining scope, verifying their proposals, protecting OPSEC, and knowing when to intervene.

Use AI agents to accelerate investigation and response without letting speed replace analyst judgment.

Learn to evaluate agent conclusions against evidence, catch confident-but-wrong analysis, calibrate autonomy, and recover when an agent takes the wrong path.

The first modules are only the beginning. More content will build on these foundations as the paths expand.

Start building the skills to work with AI as part of the team, not just as a tool.

Effective adversary emulation begins long before the first packet is sent.

This module covers the planning and reconnaissance that precede a red team engagement, exploring how operators decide which adversary to emulate and how they gather information about a target while remaining undetected. As organizations mature their defenses, the ability to plan a realistic engagement and conduct reconnaissance without being detected is what separates a convincing emulation from a noisy one.

Train across the entire cyber operational spectrum with a single membership. HTB PRO combines enterprise-grade offensive and defensive hands-on training directly inside HTB Labs, giving you full VIP+ access, 10 flagship Pro Lab environments, and upcoming SOC Range simulations.

What is included:

HTB PRO is available now on HTB Labs for $49 per month or $490 per year. Existing VIP+ options remain active alongside this subscription.

Learn more here.

👉 Get started with HTB PRO here

The 1st HTB Enterprise Season comes to an end with Uplink, a Hard Windows Machine.

Investigate a compromised satellite ground segment, uncover weaknesses in its command-signing pipeline, and determine whether forged commands can reach privileged execution paths.

Skills covered:

New to Operation Red Horizon? Catch up on previous scenarios