For the second consecutive year, a team led by cybersecurity experts and students from Vilnius University’s Faculty of Mathematics and Informatics (VU MIF) demonstrated outstanding cyber defense capabilities at the international cybersecurity exercise Amber Mist 2026. Bringing together VU MIF researchers, students, and IT specialists, the team included staff from VU’s Information Technology Services Center (ITPC), IT professionals from Vilnius Gediminas Technical University (VILNIUS TECH), and experts from Japanese company Hitachi Ltd. The joint team was recognized as the strongest performer in cyber defense.
The Blue Team led by Virgilijus Krinickij, a PhD student at the Institute of Computer Science at the Faculty of Mathematics and Informatics of Vilnius University (first from the left). Photo: Lithuanian Armed Forces.
During the 13th edition of the international cybersecurity exercise, organized by the Lithuanian Armed Forces on 10–16 October, several hundred participants from 13 NATO and European countries, as well as civilian organizations, trained to defend digital infrastructure against simulated cyberattacks.
The exercise provided an opportunity not only to test technical knowledge but also to develop the ability to respond quickly to changing situations, make decisions and collaborate effectively.
Participants were divided into several teams, each with different responsibilities. These included a team tasked with monitoring and evaluating participants’ activities and the quality of their decisions.
A moment from the exercise. Photo: Lithuanian Armed Forces.
The team Blue Team 5 Academia, led by Virgilijus Krinickij, a PhD student at the Institute of Computer Science at the Faculty of Mathematics and Informatics of Vilnius University (VU MIF), brought together VU MIF cybersecurity experts and students, staff from VU’s Information Technology Services Centre (ITPC), representatives of VILNIUS TECH and specialists from Japanese company Hitachi Ltd.
“Modern cyber defense methods require comprehensive computing knowledge and skills that can be applied in the constantly changing landscape of cyber incidents. I am pleased that students actively involved in the activities of the Cybersecurity Laboratory, together with specialists from VU ITPC, performed so well in the Blue (defending) Team led by VU MIF PhD student V. Krinickij, using their skills to keep complex systems operational during a simulated cyber crisis,” says Prof. Dr Linas Bukauskas, Head of the Cybersecurity Laboratory at the VU MIF Institute of Computer Science.
The VU team. Photo: Lithuanian Armed Forces.
The professor coordinated VU’s participation in the exercise from the earliest stages of preparation. “I am also pleased that research-based methods used for both active and passive defense were tested and evaluated. Students conducting research at the Cybersecurity Laboratory experimented with the latest technologies and had the opportunity to assess them,” the researcher says.
Cyber Defence Is a Team Effort
In 2025, the joint team was also recognized as the strongest performer at Amber Mist. “This year’s exercise was no less challenging than last year’s. The tasks were varied and involved defending simulated infrastructure according to a complex scenario,” says V. Krinickij.
According to him, success required a combination of different competencies. “We needed IT and cybersecurity skills, as well as generic competencies to manage the team. Motivation helped us prepare – we wanted to perform as well as possible,” he says.
The Blue Team also included Adrija Sipavičiūtė, a first-year master’s student in Computer Modeling at VU MIF and a graduate of the Information Technology study program at the faculty. For her, the exercise provided an opportunity to apply the knowledge acquired at university into practice.
“The Blue Team’s task is to protect the infrastructure,” says A. Sipavičiūtė. In her view, success in cybersecurity exercises depends on skills acquired during studies and the ability to collaborate. “You need not only technical knowledge of different operating systems and computer networks, but also effective teamwork, communication and collaborative problem-solving,” the student explains.
Students Learned to Lead and Solve Problems in Real Time
VU MIF students also played an active role in the Green Team, which simulated the actions of infrastructure owners and users, helping to create realistic conditions for the exercise.
The Green Team was led by Kristina Česaitytė, a second-year Information Technology student at VU MIF. Her responsibilities included not only organizing the team’s work but also communicating with other exercise groups, including the evaluation, scenario, infrastructure, and defending teams.
The Green Team, with Kristina Česaitytė in the center of the front row. Photo: Lithuanian Armed Forces.
According to the student, the greatest challenge was managing a large flow of information in real time and making decisions quickly. As the scenario and the exercise evolved dynamically, rules and processes changed, and no predefined procedures were available for some situations. This required creativity and resourcefulness to adapt.
“For example, when there was a need to request system recovery, we had to make decisions on the spot, establish an appropriate process and, after consulting the infrastructure team, introduce new rules for the entire team. Maintaining a clear head when situations and requirements change every few minutes was a major challenge, but it also provided valuable leadership experience,” says K. Česaitytė.
“The most valuable thing we are taking away from this exercise as a team is the ability to collaborate, not to hesitate to ask teammates for help, and to seek solutions together with colleagues responsible for specific parts of the infrastructure,” the student says. “I am glad that VU MIF students have the opportunity to participate in cybersecurity exercises of this caliber.”
Practical Experience for Future Cybersecurity Specialists
The team's achievements at Amber Mist 2026 highlight the role of VU MIF in bringing together cybersecurity research, specialist expertise, and practical training for future professionals. Strong performance in the second consecutive year demonstrated the importance of thorough preparation, collaboration, and students' practical involvement in cyber defense activities.
Prof. Dr Agnė Brilingaitė and lecturer Eduardas Kutka. Photo: Lithuanian Armed Forces.
“People are usually very interested in how attacks unfold during exercises and how defending teams handle incidents. However, in exercises of this kind, it is not enough simply to immerse yourself in the technological challenges and apply appropriate risk mitigation measures,” says Prof. Agnė Brilingaitė, Head of the Department of Computational and Data Modeling at the VU MIF Institute of Computer Science, who participated in the exercise management group.
“The evaluation team monitors participants’ ability to share information with other teams using standard information sharing platforms, attribute the attacker, prioritize digital assets appropriately and assess the impact of attacks. These are challenges that cybersecurity specialists also face in their day-to-day work,” she explains.
The VU Faculty of Mathematics and Informatics trains cybersecurity and cyber intelligence experts through the joint Master’s program in International Cybersecurity and Cyber Intelligence, delivered by four partner universities in the Arqus European University Alliance. The Faculty also offers several computing programs in which students learn, among other subjects, how to develop and secure software, computer systems and networks.
According to Prof. A. Brilingaitė, students from the Information Technology program were particularly active in Amber Mist 2026.
“The Cybersecurity Laboratory at the VU MIF Institute of Computer Science welcomes all students and early-career researchers interested in cybersecurity, its research and applications. Those interested are invited to contact me directly,” says Prof. L. Bukauskas.
The participation of the VU MIF community in the exercise gives students the opportunity to learn from experienced specialists, develop technical and leadership skills, explore career opportunities and contribute to strengthening Lithuania’s cybersecurity.
21 October 2026
