Security Blog
Assessing the Security of Remote Access Services Guideline
Remote access services enable workers of a company to access corporate IT services and their work files anytime, anywhere. When opting to use remote access services, a company must consider the security strength and weakness of different solutions, besides their user-friendliness and cost. ...
Release Date: 20 Feb 2020
7734 Views
Six Security Tips for Home Office
With the recent outbreak of novel coronavirus infection, many companies in Hong Kong have arranged their staff to work from home to reduce the risk of spreading the disease in the community. This arrangement presents a new challenge for both the companies and their employees. While advancements...
Release Date: 20 Feb 2020
8109 Views
[Website announcement] HKCERT website will only support more secure TLS versions from April 1, 2020 onwards
To strengthen the security of HKCERT website, we will only support more secure versions of Transport Layer Security (TLS) protocol TLS 1.2 and TLS 1.3, and stop supporting TLS 1. and TLS 1.1 from April 1, 2020 onwards...
Release Date: 17 Feb 2020
7268 Views
Watch out for Phishing Attacks Using False Information on Infectious Disease
When many countries are doing their best to combat the novel coronavirus, cyber security researchers have found that hacker groups have been preying on the fears of human to launch a new round of malicious spam (malspam) attacks to spread the Emotet trojan.
According to researchers...
Release Date: 4 Feb 2020
7911 Views
Critical Citrix Application Delivery Controller Vulnerability (CVE-2019-19781) Alert
Multinational software and clouding computing company Citrix recently disclosed a vulnerability (CVE-2019-19781) in its application delivery controller (ADC) products. A remote attacker could exploit this vulnerability to trigger remote code execution on the targeted system. To address the vulnerability, ...
Release Date: 17 Jan 2020
5224 Views
Patch three critical Windows vulnerabilities (CVE-2020-0601, CVE-2020-0609 & CVE-2020-0610) immediately to prevent potential cyber attack
Microsoft recently released its monthly Patch Tuesday for January 2020. There are three critical vulnerabilities in two of its application components which demand attention and immediate action:
Windows Remote Desktop Protocol (RDP) Gateway Server
(CVE-2020-0609, CVE-2020-0610...
Release Date: 17 Jan 2020
7039 Views
Implementing IoT Security Best Practice
The adoption of Internet of Things (IoT) technology is a growing trend in various sectors. Startups, small and medium-sized enterprises (SMEs), and other enterprises have started adopting IoT technology to create business values for their products and bring about new customer experience...
Release Date: 14 Jan 2020
5719 Views
New Trends of Ransomware
Ransomware is among the most jeopardising and wide-spreading cyber security threats. It encrypts files on the user's device and demands payment of ransom in order to decrypt the files. HKCERT has been constantly monitoring the ransomware trends, providing security advice to users who...
Release Date: 30 Dec 2019
5507 Views
HKCERT and Microsoft Hong Kong Launch City's First Healthcare Cyber Security Watch Programme
In recent years, the HKSAR Government has advocated the use of innovative technology to enhance the services of the Hong Kong healthcare system to support the development of Smart City. These include setting up a big data analytics platform to facilitate healthcare-related research, adopting a...
Release Date: 13 Dec 2019
4706 Views
HKCERT Calls for Attention on End of Support for Windows 7, Windows Server 2008 and 2008 R2
[Updated on 2023-01-06]
Microsoft will stop providing security updates and technical support to all Windows 7 and Windows 8.1 systems (including those subscribed the Extended Security Update) on January 10, 2023. According to the latest figures, about...
Release Date: 22 Nov 2019
3874 Views