Lloyds Banking Group partnered with Hack The Box and Google Cloud Security to host a two-day cybersecurity competition for the UK financial services sector, bringing together 33 teams from 16 organizations spanning banking, fintech, technology providers, and regulators. The hackathon tested how two-person teams respond to cyber threats under pressure through scenarios designed to mirror real-world conditions. Participants tackled challenges in web exploitation, digital forensics, open-source intelligence, cryptography, and payment systems security, with exercises incorporating artificial intelligence in both offensive and defensive roles.
The competition format reflected growing industry recognition that cyber preparedness requires practical performance testing rather than theoretical knowledge alone. Teams competed under time pressure to demonstrate technical skills and decision-making abilities in conditions that simulate actual incident response. The winning team, Nine Lives With Zero Days, consisted of a Machine Learning Engineer and a Senior Penetration Tester, highlighting the intersection of AI expertise and traditional security skills in modern financial services defense.
Organizers emphasized that while AI tools can help security teams process data, triage alerts, and automate repetitive tasks, human judgment remains essential for assessing evolving situations and making critical decisions during incidents. Matt Rowe, Chief Security Officer at Lloyds Banking Group, noted that resilience in the highly connected financial sector depends on how effectively organizations prepare and respond together, not just on individual capabilities. The event's cross-industry participation addressed a key vulnerability in financial services, where shared infrastructure, third-party suppliers, and payment networks can create cascading effects during attacks.
The hackathon comes as UK financial institutions face increasing regulatory scrutiny over operational resilience and incident response capabilities. Financial services firms must now manage a dual challenge: defending against attackers who may use AI while also managing risks introduced by their own AI-based systems. Nikos Fountas, Chief Operating Officer at Hack The Box, compared the situation to chess, where machines can outperform humans but the value lies in pattern recognition, creativity, and decision-making under pressure.
The exercise brought regulators and private-sector organizations into the same training environment, supporting efforts to build consistent understanding of readiness standards across the sector. By testing speed, communication, and technical judgment in realistic scenarios, the competition aimed to strengthen defensive capabilities and improve collaboration across the financial services ecosystem. The practical format allowed teams to benchmark their performance against industry peers while developing skills needed to respond when systems are under active attack.
Source: https://securitybrief.co.uk/story/lloyds-google-cloud-host-uk-finance-cyber-hackathon