Security Blog
[Website announcement] Reminder : HKCERT website will only support more secure TLS versions from April 1, 2020 onwards
The HKCERT website will only support more secure versions of Transport Layer Security (TLS) protocol, TLS 1.2 and TLS 1.3, starting from April 1, 2020. Users whose browsers do not support TLS 1.2 or TLS 1.3...
Release Date: 31 Mar 2020 4026 Views
HKCERT urges the public to step up vigilance against rising COVID-19-themed phishing attacks
With the global 2019 Coronavirus Disease (COVID-19) pandemic intensifying, different types of cyber attacks in the name of the disease have increased dramatically. The Hong Kong Computer Emergency Incident Response Team Coordination Centre (HKCERT) published a blog "Watch out for Phishing...
Release Date: 26 Mar 2020 6018 Views
HKCERT Releases New Study to Raise Security Awareness of Bluetooth Low Energy Devices
The applications of the Internet of Things (IoT) are becoming more diverse with the rapid development of wireless technology. Each type of IoT devices has to adopt the appropriate wireless technology in accordance with their application requirements. Among various wireless technologies, Bluetooth Low Energy (...
Release Date: 5 Mar 2020 8064 Views
Beware of Juice Jacking when Charging Mobile Phones at Public Charging Stations
Many shopping malls, coffee shops and even public facilities nowadays are offering as part of enhanced customer services a complimentary charging station for their patrons to quickly recharge their mobile phones. However, users of such services may not realise that their phones could be subject to cyber...
Release Date: 28 Feb 2020 5014 Views
HKCERT Released Guideline for Upgrading TLS to Secure Versions
Communication security protocol Transport Layer Security (TLS) ensures data transmission can stand attack of sniffing and data tampering. The protocol has evolved over time with better security and performance. In March of 2020, insecure versions of the protocol TLS 1. and TLS 1....
Release Date: 28 Feb 2020 7587 Views
Beware of "Are you available?" phishing scam email
HKCERT has recently noticed that some students from local universities have received a phishing scam email with the subject "Are you available?". The scammer impersonated as a professor or university executive, seeking urgent help and reply from the email recipients. Once the conversation started, the...
Release Date: 25 Feb 2020 7681 Views
Assessing the Security of Remote Access Services Guideline
Remote access services enable workers of a company to access corporate IT services and their work files anytime, anywhere. When opting to use remote access services, a company must consider the security strength and weakness of different solutions, besides their user-friendliness and cost. ...
Release Date: 20 Feb 2020 7646 Views
Six Security Tips for Home Office
With the recent outbreak of novel coronavirus infection, many companies in Hong Kong have arranged their staff to work from home to reduce the risk of spreading the disease in the community. This arrangement presents a new challenge for both the companies and their employees. While advancements...
Release Date: 20 Feb 2020 8002 Views
[Website announcement] HKCERT website will only support more secure TLS versions from April 1, 2020 onwards
To strengthen the security of HKCERT website, we will only support more secure versions of Transport Layer Security (TLS) protocol TLS 1.2 and TLS 1.3, and stop supporting TLS 1. and TLS 1.1 from April 1, 2020 onwards...
Release Date: 17 Feb 2020 7180 Views
Watch out for Phishing Attacks Using False Information on Infectious Disease
When many countries are doing their best to combat the novel coronavirus, cyber security researchers have found that hacker groups have been preying on the fears of human to launch a new round of malicious spam (malspam) attacks to spread the Emotet trojan.
According to researchers...
Release Date: 4 Feb 2020 7809 Views
