Capture the Flag (CTF) exercises are widely used in cybersecurity education for developing problem-solving and technical skills, but traditional formats often lack realism, teamwork, and situational context. This study, conducted within the ATHENA project at Tallinn University of Technology, explores the use of Virtual Reality (VR) to enhance CTF challenges. Two pilot scenarios were tested: Tower Cipher, a 3D exploration puzzle designed for secondary and vocational students, and Control Room Mission, an industrial control room simulation tested with international cyber talents in both computer-based and VR modes.

A mixed-methods evaluation combined surveys, reflections, and task performance to assess usability, engagement, teamwork, and perceived skill development. Results show that VR tasks significantly improved motivation, collaboration, and situational awareness, especially in operational technology contexts, though technical skill acquisition remained stronger in traditional screen-based CTFs. Challenges included navigation, VR comfort, and scalability.

The findings suggest that VR-enhanced CTFs are not a replacement but a valuable complement to conventional cybersecurity training. They offer promising opportunities for experiential learning, helping bridge the gap between technical exercises and realistic, collaborative practice.