He isn't. It's a term to describe security competitions: https://en.wikipedia.org/wiki/Capture_the_flag#Computer_secu...