Security Blog | HKCERT

275 Million Users Affected by Online Learning System Breach HKCERT Urges Local Institutions to Review Security

(This image was created using generative AI and reviewed under professional human supervision.) The cross-border online learning management system (LMS) Canvas has recently reportedly been breached by a hacker group. The group claims to have illegally accessed user data from multiple schools worldwide...

Last Update Date: 12 May 2026 Release Date: 10 May 2026 22515 Views

Reports Unauthorised Access and Leak of Patient Data – Over 56,000 Individuals Affected HKCERT Urges Enhanced Protection and Proactive Risk Management

The Hong Kong Computer Emergency Response Team Coordination Centre (HKCERT) has issued a security alert regarding a data leakage incident involving a local healthcare establishment. The Hospital Authority (HA) has reported that its routine monitoring system detected a suspected case of unauthorised access to patient...

Release Date: 5 Apr 2026 11673 Views

Stay Vigilant When Shopping Online During the Festive Season

As the festive season approaches, online shopping and digital services experience a significant surge. Users should remain vigilant when making online purchases, safeguard personal data, and avoid entering sensitive information on insecure websites to prevent identity theft and online fraud. Fraudulent activities have become increasingly...

Release Date: 19 Dec 2025 16213 Views

Hackers’ New Partner: Weaponized AI for Cyber Attacks! HKCERT Exposes Six Emerging AI-assisted Attacks

In recent years, artificial intelligence (AI) technology has advanced rapidly. Large language models (LLMs) and generative models have been widely applied in writing, reasoning, and generating images and videos. At the same time, the Hong Kong Computer Emergency Response Team...

Release Date: 17 Sep 2025 24207 Views

The Hidden Dangers of Third-Party Risk: Lessons from the Recent Data Breaches

As organizations increasingly rely on external vendors, the unseen risks lurking in third-party relationships have become a prime target for cybercriminals. Recent breaches at major firms like Marks & Spencer and Qantas reveal just how devastating these risks can be. Third-party risk refers...

Last Update Date: 8 Aug 2025 Release Date: 25 Jul 2025 24997 Views

16 Billion Account Passwords Leaked Worldwide – HKCERT Urges Users to Review Account Security and Stay Vigilant

The Hong Kong Computer Emergency Response Team Coordination Centre (HKCERT) has issued an alert regarding a large-scale data leak recently reported internationally. More than 16 billion sets of account password data have been made public online, covering many commonly used online service platforms such...

Release Date: 22 Jun 2025 20138 Views

When Cybersecurity Meets 'Her Power': Unlocking the Potential of Women in Cybersecurity

Industry Status and Insights The cybersecurity industry is currently facing a severe talent shortage. Statistics show that there is a global shortage of nearly 4 million cybersecurity professionals[1]. Although the number of cybersecurity practitioners is growing at an annual rate of 8.7%, ...

Release Date: 7 Mar 2025 26329 Views

Enhancing Digital Signage Security: Security Findings and Recommendations from the Latest Study

Download Full Report: IoT Security Study Report on Digital Signage In today's digital age, digital signage has become a popular tool for industries to promote products and display information to customers. However, as an IoT device that is commonly placed in public areas...

Release Date: 20 Jan 2025 27443 Views

Taking Security Best Practice During Festive Season

As the year comes to a close, many people start planning their long holidays to spend time with family and friends, purchase new items, or travel abroad. Online services have gained immense popularity during this time. However, it is important to remain vigilant about...

Release Date: 17 Dec 2024 27121 Views

Massive "911 S5" Botnet Affecting Nearly 19 Million IP Addresses Worldwide was Dismantled

"911 S5" botnet impacted nearly 19 million IP addresses globally, posing a significant threat to cybersecurity. In May 2024, the FBI, in collaboration with international law enforcement agencies, successfully dismantled the "911 S5" botnet [1]. Although the "911...

Release Date: 28 Oct 2024 31757 Views