What's New | Cyber Security Information Portal

“Cyber Security in Simple Ways” Webinar (20-May-2022)

The webinar explores how to use the Internet safely and prevents cyber attacks with simple steps.
Response to media enquiry on PCPD's enforcement action on doxxing (17-May-2022)

PCPD responded to media enquiry on enforcement action on doxxing
GovCERT.HK - Security Alert (A22-05-09): Vulnerability in Apache Tomcat (17-May-2022)

Apache Software Foundation has released a security advisory to address a vulnerability in the Apache Tomcat.
GovCERT.HK - Security Alert (A22-05-08): Multiple Vulnerabilities in Apple iOS and iPadOS (17-May-2022)

Apple has released iOS 15.5 and iPadOS 15.5 to fix the vulnerabilities in various Apple devices.
GovCERT.HK - Security Alert (A22-05-07): Multiple Vulnerabilities in Microsoft Edge (Chromium-based) (16-May-2022)

Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge (Chromium-based).
PCPD Issues Guidance on Recommended Model Contractual Clauses for Cross-border Transfers of Personal Data (12-May-2022)

The Office of the Privacy Commissioner for Personal Data (PCPD) today (12 May) issued the “Guidance on Recommended Model Contractual Clauses for Cross-border Transfer of Personal Data” (Guidance) and provided two sets of Recommended Model Contractual Clauses (RMCs) to cater for two different scenarios in cross-border data transfers, namely (i) from one data user to another data user; and (ii) from one data user to a data processor.
GovCERT.HK - Security Alert (A22-05-06): Multiple Vulnerabilities in Google Chrome (11-May-2022)

Google released a security update to address multiple vulnerabilities in Google Chrome.
GovCERT.HK - High Threat Security Alert (A22-05-05): Multiple Vulnerabilities in Microsoft Products (May 2022) (11-May-2022)

Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.
GovCERT.HK - Weekly IT Security News Bulletin (2 May 2022 – 8 May 2022) (11-May-2022)

- Emotet is testing a new attack chain
- Be aware of browser-based malware
Phishing email related to The Hongkong and Shanghai Banking Corporation Limited (11-May-2022)

The Hong Kong Monetary Authority (HKMA) wishes to alert members of the public to a press release issued by The Hongkong and Shanghai Banking Corporation Limited relating to a phishing email, which has been reported to the HKMA.
LCQ1: Combating false information (11-May-2022)

Following is a question by the Hon Michael Tien and a reply by the Secretary for Security, Mr Tang Ping-keung, in the Legislative Council today (May 11)…
"LeaveHomeSafe" version 3.2.5 launched for Google and Huawei devices to rectify technical error (11-May-2022)

A spokesman for the Office of the Government Chief Information Officer (OGCIO) said today (May 11) that, owing to a technical error caused by the service contractor during the update of the "LeaveHomeSafe" mobile app version 3.2.4 released at around 4pm yesterday (May 10), the Vaccine Pass QR codes of some Google and Huawei users were deleted after updating the app.
Judiciary alerts public to phishing email (10-May-2022)

The Judiciary today (May 10) called on the public to stay vigilant to a phishing email sent from the email account "HONG KONG JUDlClARY ". The email falsely claims that it was issued by order of the Hong Kong Judiciary and the Chief Judge of the High Court, and is suspected of containing a malicious link.
Department of Justice alerts public to fraudulent email (10-May-2022)

The Department of Justice today (May 10) reminded the public of a fraudulent email purporting to be sent from the Law Reform Commission with an email account "tommy[.]lee@doj[.]gov[.]hk". The email, containing a suspected link to a malicious file, falsely claims to be issued by order of the Secretary for Justice.
Department of Justice alerts public to fraudulent email (9-May-2022)

The Department of Justice (DoJ) today (May 9) called on the public to stay vigilant to a fraudulent email reportedly to be sent from the Law Reform Commission with an email account "tommy[.]lee@doj[.]gov[.]hk".
GovCERT.HK - Security Alert (A22-05-04): Vulnerability in F5 BIG-IP (5-May-2022)

F5 has published a security advisory to address a vulnerability in F5 devices.
GovCERT.HK - Security Alert (A22-05-03): Multiple Vulnerabilities in Cisco Products (5-May-2022)

Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.
"LeaveHomeSafe" new version 3.2.3 available for update (4-May-2022)

A spokesman for the Office of the Government Chief Information Officer (OGCIO) said today (May 4) that the new version 3.2.3 of the "LeaveHomeSafe" mobile app is now available for update to fix the intermittent problem with the display of the Vaccine Pass QR code in the mobile phones of some users. Members of the public can now update the app in different app stores.
LCQ4: Demand for and supply of technology talents (4-May-2022)

Following is a question by the Hon Duncan Chiu and a written reply by the Secretary for Innovation and Technology, Mr Alfred Sit, in the Legislative Council today (May 4):
Judiciary alerts public to phishing email (4-May-2022)

The Judiciary today (May 4) called on the public to stay vigilant to a phishing email sent from the email account "香港司法機構judiciaryofhongkong01@gmail[.]com". The email falsely claims that it was sent by the Judiciary of the Hong Kong Special Administrative Region. The Judiciary has reported the case to the Police.
GovCERT.HK - Security Alert (A22-05-02): Multiple Vulnerabilities in Firefox (4-May-2022)

Mozilla has published the advisories (MFSA2022-16 and MFSA2022-17) to address multiple vulnerabilities in Firefox browser.
OGCIO statement (3-May-2022)

In response to a media report claiming that a facial recognition function has been found in the "LeaveHomeSafe" mobile app, a spokesman for the Office of the Government Chief Information Officer (OGCIO) made a solemn statement today (May 3) to emphasise that the operation of the "LeaveHomeSafe" mobile app has never used nor requires any facial recognition function since its launch.
GovCERT.HK - Security Alert (A22-05-01): Multiple Vulnerabilities in Android (3-May-2022)

Google has released Android Security Bulletin May 2022 to fix multiple security vulnerabilities in Android operating system.
Expert Corner - Offensive AI: How you can optimize your Cybersecurity investment to prevent and detect attacks with AI technologies (31-March-2022)

After a few decades of rapid growth of Artificial Intelligence (AI) since 1950, AI has a greater and broader relevance to human lives. In the cyber world, the development of AI has enabled a wide range of beneficial applications…
e-World Smart Tips - Prevention and Intervention of Cyber-bullying (30-March-2022)

- Definition of cyber-bullying (Chinese Version Only)
- Points-to-note when surfing the Internet (Chinese Version Only)
- Handling cyber-bullying (Chinese Version Only)
- Protect your personal information to avoid being cyber-bullied (Chinese Version Only)
Resource Centre - Leaflet on "Information Security Guide - Firewall Setup Tips for SMEs" (22-March-2022)

Leaflet on "Information Security Guide - Firewall Setup Tips for SMEs" is now available at the Resource Centre
Resource Centre - Infographics on "Seven Habits of Cyber Security" (18-March-2022)

Infographics on “Seven Habits of Cyber Security” is now available at the Resource Centre
e-World Smart Tips - Beware of Phishing Attacks (14-March-2022)

- Understanding phishing attacks (Chinese Version Only)
- Identifying phishing websites (Chinese Version Only)
- Good Practices to prevent phishing attacks (Chinese Version Only)
- What to do when you have been phished (Chinese Version Only)
Expert Corner - Secure Use of QR Code (18-January-2022)

In this blog, we would discuss the applications and risks in four major areas: mobile payment, website redirection, authentication and information storage…