What's New | Cyber Security Information Portal

Unauthorised website and phishing instant message related to Citibank (Hong Kong) Limited (21-July-2021)

The Hong Kong Monetary Authority (HKMA) wishes to alert members of the public to a press release issued by Citibank (Hong Kong) Limited relating to an unauthorised website and phishing instant message, which has been reported to the HKMA.
Fraudulent website related to CMB Wing Lung Bank Limited (21-July-2021)

The Hong Kong Monetary Authority (HKMA) wishes to alert members of the public to a press release issued by CMB Wing Lung Bank Limited relating to a fraudulent website, which has been reported to the HKMA.
GovCERT.HK - High Threat Security Alert (A21-07-13): Multiple Vulnerabilities in Linux Operating Systems (21-July-2021)

Multiple vulnerabilities were found in major Linux distributions including Debian, RedHat, SUSE and Ubuntu.
GovCERT.HK - Security Alert (A21-07-12): Multiple Vulnerabilities in Oracle Java and Oracle Products (July 2021) (21-July-2021)

Oracle has released the Critical Patch Update (CPU) Advisory with collections of patches for multiple security vulnerabilities found in Java SE and various Oracle products.
GovCERT.HK - Security Alert (A21-07-11): Multiple vulnerabilities in Google Chrome (21-July-2021)

Google released a security update to address multiple vulnerabilities in Google Chrome.
GovCERT.HK - High Threat Security Alert (A21-07-10): Vulnerability in Microsoft Edge (Chromium-based) (20-July-2021)

Microsoft released a security update to address a vulnerability in Microsoft Edge (Chromium-based).
Fraudulent mobile application (App) related to The Bank of East Asia, Limited (20-July-2021)

The Hong Kong Monetary Authority (HKMA) wishes to alert members of the public to a press release issued by The Bank of East Asia, Limited relating to a fraudulent App, which has been reported to the HKMA.
Phishing instant messages related to Bank of China (Hong Kong) Limited (19-July-2021)

The Hong Kong Monetary Authority (HKMA) wishes to alert members of the public to a press release issued by Bank of China (Hong Kong) Limited relating to phishing instant messages, which has been reported to the HKMA.
Unauthorised website and phishing instant message related to Citibank (Hong Kong) Limited (19-July-2021)

The Hong Kong Monetary Authority (HKMA) wishes to alert members of the public to a press release issued by Citibank (Hong Kong) Limited relating to an unauthorised website and phishing instant message, which has been reported to the HKMA.
Phishing email related to DBS Bank (Hong Kong) Limited (19-July-2021)

The Hong Kong Monetary Authority (HKMA) wishes to alert members of the public to a press release issued by DBS Bank (Hong Kong) Limited relating to a phishing email, which has been reported to the HKMA.
Fraudulent website and phishing instant message related to The Hongkong and Shanghai Banking Corporation Limited (19-July-2021)

The Hong Kong Monetary Authority (HKMA) wishes to alert members of the public to a press release issued by The Hongkong and Shanghai Banking Corporation Limited relating to a fraudulent website and phishing instant message, which has been reported to the HKMA.
GovCERT.HK - Weekly IT Security News Bulletin (12 Jul 2021 – 18 Jul 2021) (19-July-2021)

- IoT malware activities on the rise
- Useful resources on protection against ransomware
GovCERT.HK - High Threat Security Alert (A21-07-09): Multiple vulnerabilities in Google Chrome (16-July-2021)

Google released a security update to address multiple vulnerabilities in Google Chrome.
Fraudulent website and phishing instant message related to The Hongkong and Shanghai Banking Corporation Limited (16-July-2021)

The Hong Kong Monetary Authority (HKMA) wishes to alert members of the public to a press release issued by The Hongkong and Shanghai Banking Corporation Limited relating to a fraudulent website and phishing instant message, which has been reported to the HKMA.
Fraudulent website and phishing instant message related to The Hongkong and Shanghai Banking Corporation Limited (14-July-2021)

The Hong Kong Monetary Authority (HKMA) wishes to alert members of the public to a press release issued by The Hongkong and Shanghai Banking Corporation Limited relating to a fraudulent website and phishing instant message, which has been reported to the HKMA.
GovCERT.HK - Security Alert (A21-07-08): Multiple Vulnerabilities in Apache Tomcat (14-July-2021)

Apache Software Foundation has released a security advisory to address multiple vulnerabilities in the Apache Tomcat.
GovCERT.HK - Security Alert (A21-07-07): Multiple vulnerabilities in VMware Products (14-July-2021)

VMware has published a security advisory to address multiple vulnerabilities in VMware products.
GovCERT.HK - Security Alert (A21-07-06): Multiple vulnerabilities in Firefox (14-July-2021)

Mozilla has published the advisories (MFSA2021-28 and MFSA2021-29) to address multiple vulnerabilities in Firefox browser.
GovCERT.HK - Security Alert (A21-07-05): Multiple Vulnerabilities in Adobe Reader/Acrobat (14-July-2021)

Security updates are released for Adobe Reader and Acrobat to address multiple vulnerabilities.
GovCERT.HK - High Threat Security Alert (A21-07-04): Multiple Vulnerabilities in Microsoft Products (July 2021) (14-July-2021)

Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.
Fraudulent websites and phishing instant messages related to Hang Seng Bank, Limited (13-July-2021)

The Hong Kong Monetary Authority (HKMA) wishes to alert members of the public to a press release issued by Hang Seng Bank, Limited relating to fraudulent websites and phishing instant messages, which has been reported to the HKMA.
Unauthorised website and phishing instant message related to Citibank (Hong Kong) Limited (13-July-2021)

The Hong Kong Monetary Authority (HKMA) wishes to alert members of the public to a press release issued by Citibank (Hong Kong) Limited relating to an unauthorised website and phishing instant message, which has been reported to the HKMA.
GovCERT.HK - Weekly IT Security News Bulletin (5 Jul 2021 – 11 Jul 2021) (12-July-2021)

- Defense against software supply chain attacks
- Critical vulnerability in the Windows printing functionality
e-World Smart Tips - IoT Security (2-July-2021)

- Points-to-note before using IoT devices
- Use IoT devices carefully
- Examine the services provided by IoT devices
- Configure security settings for home router
e-World Smart Tips - Secure Use of on mobile payment (2-July-2021)

- Protect your mobile device
- Choose mobile payment service application carefully
- Points to note when having mobile payment for transaction
- Protect your mobile payment accounts
- How to handle when losing mobile devices
Expert Corner - Mobile Payment Security Tips (3-June-2021)

What can a consumer do to protect oneself when making mobile payment?...
Resource Centre - Infographics on "Beware of Phishing Emails" (1-June-2021)

Infographics on “Beware of Phishing Emails ” is now available at the Resource Centre
Resource Centre - Leaflet on "Information Security Guide for Small Businesses – Cloud Security" (27-May-2021)

Leaflet on "Information Security Guide for Small Businesses – Cloud Security" is now available at the Resource Centre
“Be Smart Online, Stay Away from Pitfalls” GIF Graphic Design Contest (From 3-May-2021 to 16-August-2021)

The Contest aims to arouse the awareness of public on Internet safety and etiquette. Participants could design a set of GIF in an innovative and creative way to convey the message of Internet safety and etiquette in this contest.
Resource Centre - Leaflet on "Information Security Guide for Small Businesses – Cyber Security Tips Protect Your Digital Identity" (23-April-2021)

Leaflet on "Information Security Guide for Small Businesses – Cyber Security Tips Protect Your Digital Identity" is now available at the Resource Centre
第六集《網罪速「逮」》• 網戀「Long D」甚艱難？(Chinese version only) (7-March-2021)

Please refer to Chinese version
第五集《網罪速「逮」》• 裸聊以假亂真 • 勒索時刻小心 (Chinese version only) (28-February-2021)

Please refer to Chinese version
第四集《網罪速「逮」》• 避開即時通訊軟件帳號被騎劫 (Chinese version only) (21-February-2021)

Please refer to Chinese version
第三集《網罪速「逮」》• 密碼不秘密？(Chinese version only) (14-February-2021)

Please refer to Chinese version
第二集《網罪速「逮」》• 拆解商業電郵騙案 (Chinese version only) (7-February-2021)

Please refer to Chinese version
第一集《網罪速「逮」》• 同你擊破釣魚攻擊 (Chinese version only) (26-January-2021)

Please refer to Chinese version
Expert Corner - Ransomware - Top Threat of 2020 (19-January-2021)

Ransomware continues to cause havoc at organisations of all sizes including enterprises, financial institutions and healthcare that are handling sensitive data…