Ulaanbaatar · 24.09.2026 · MNSEC-2026

MNSEC2026

Security Beyond Human Scale

The biggest and most well-known cybersecurity conference in Mongolia, and home of Haruul Zangi, the country’s largest Capture The Flag. One day of offensive and defensive security in the heart of Ulaanbaatar.

Become a Sponsor Register↳ explore the CTF

Date: 24 Sep 2026
Location: Ulaanbaatar
Host: MNCERT/CC

§ 01 / The Event - filed 2026

Where Mongolia’s defenders gather.

The biggest and most well-known cybersecurity conference in Mongolia - bringing together 450+ security professionals, engineers, and C-level leaders since 2013.

MNSEC 2026 runs in a single day, 24 September: the conference - keynotes, deep technical tracks and workshops - alongside Haruul Zangi, the national CTF final.

2013First edition

450+Professionals & leaders

7CTF categories

1National CTF final

§ 02 / The Record - 2017-2026

A decade guarding the frontier

MNSEC has convened Mongolia’s security community every year since 2017, from the convention center to a sold-out Shangri-La ballroom.

13Editions

3,600+Delegates

94+Speakers

37Sponsors

200

400

300

450

soon

2017201820192020202120222023202420252026

haruulzangi@mnsec: ~/scoreboard

$ ./hz --year 2026 --status

[+] flag .......... HZ{...}

[+] date .......... 24 Sep 2026 · Ulaanbaatar

[+] site .......... haruulzangi.mn

[+] team entry .... opens on the CTF site

§ 03 / The Competition - site live

Haruul ZangiХаруул Занги - the frontier sentinel

The biggest Capture The Flag in Mongolia, running since 2013. Named for the sentinels who once watched the steppe frontier, the warrior on horseback now rides for the digital one. Jeopardy format, sharpest teams, on 24 September 2026.

01PWN
02WEB
03CRYPTO
04REVERSING
05FORENSICS
06OSINT
07MISC

haruulzangi.mn ↳ CTFtime

§ 04 / Voices - 2026 lineup decrypting

Speakers

S-01To be announcedKeynote

S-02To be announcedThreat Research

S-03To be announcedOffensive Security

§ 05 / Agenda - 24 September 2026

Agenda

One day, 24 September 2026, on the main stage, with a second stage running alongside it. 1 session is still to be announced and appear here as speakers are confirmed.

Morning

08:30 to 08:30-09:00
Registration & welcome coffee
30 min
09:00 to 09:00-09:10
Opening ceremony
10 min
09:10 to 09:10-10:00
To be announced
50 min
10:00 to 10:00-10:20
MNCERT/CC - Year in Reflection
Gombodorj · CEO · MNCERT/CC
20 min
10:20 to 10:20-11:00
The Invisible Botnet: How Residential Proxies Broke DDoS Defense
Kyle · Team Cymru
40 min
11:00 to 11:00-11:30
Supply chain (in)security
Dulmandakh · CEO · Aravt Technology
30 min
11:30 to 11:30-11:50
Exposure Management-Turning Intelligence into Remediation
Henry Yang · Security Consultant (Global Sales Engineering)· Checkpoint
20 min
11:50 to 11:50-12:10
Coffee break & exhibition
20 min

Afternoon

12:10 to 12:10-12:40
They Share. We Didn't. Building national threat intelligence
Saruul · Information Security Analyst · Unitel
30 min
12:40 to 12:40-13:00
The Shock of AI Impact and How to Absorb It
Tommy Andrew Ting · Regional Cybersecurity Specialist · ESET
20 min
13:00 to 13:00-14:00
Lunch & exhibition
1 hr
14:00 to 14:00-14:40
HKCERT's AI Journey: Cyber Risk Insights and AI-Powered Phishing Defence
Leong Oi Man · Senior Information Security Analyst · HKCERT/CC
40 min
14:40 to 14:40-15:10
Welcome to the era of sandboxes
Zolboobayar · Cybersecurity researcher · Core Logic and Technology
30 min
15:10 to 15:10-15:30
From Indexing to Agentic Automation: Rethinking the Modern SOC Beyond Legacy SIEM Architecture
Daniel Lui · Head of Solutions Consulting · Palo Alto Networks
20 min
15:30 to 15:30-16:00
From Fraud to Malware: The Evolution of Attacks in Mongolia
Ganbagana · Deputy Head of the Information Security Professional Council · Mongolian Bankers Association (MBA)
30 min
16:00 to 16:00-16:20
Coffee break & exhibition
20 min
16:20 to 16:20-16:50
From Stealer Logs to Corporate Access: Agentic CTI Analysis in Mongolia
Yusuf Arslan Polat · Founder and CEO · Istary
30 min
16:50 to 16:50-17:10
AI-Powered Risk Assessment
Sender Otgonbat · Information Security Engineer · Nexmind
20 min

Evening

17:10 to 17:10-17:40
Ghost in the Network: The Machine Hunts, the Chain Falls
Yalguun Tumenkhuu · Cyber Security Lead @ Khan Bank
30 min
17:40 to 17:40-18:10
Haruul Zangi award ceremony
30 min
18:10 to 18:10-18:40
Closing remarks
30 min
19:00 to 19:00 onwards
After party

Running alongside the main stage

Second stage A parallel talk track runs beside the main stage.
Haruul Zangi Live CTF scoreboard and the scavenger hunt.
Partner hub Exhibitors, demos and refreshments.
Hardware village Hands-on security lab and Mini Haruul Zangi.

↳ open the agenda page

§ 06 / Place - host venue

Ulaanbaatar, Mongolia

The conference gathers in the capital, the heart of Mongolia’s digital economy, at the Shangri-La Ulaanbaatar: a central venue with full conference and CTF facilities.

CityUlaanbaatar (UB)

CountryMongolia

Time zoneULAT · UTC+8

VenueShangri-La Ulaanbaatar

Fig. 06 - Ulaanbaatar47.92° N · 106.92° EShangri-La Ulaanbaatar

§ 07 / Join - sold out

Take your seat

One ticket, one day - the conference and Haruul Zangi both run on 24 September. Early-bird pricing holds until 7 September 2026; up to 3 tickets per person, or 20 for an organization. Tickets are sold out. The prices below are what the day was sold at.

01 / Until 7 September 2026