Security Blog

FEATURED BLOG

Modern Software’s Hidden Cost: Managing Risk in the Open-Source Ecosystem

Release Date: 17 Jul 2026 4164 Views

FEATURED BLOG

StrikeShark Campaign Exploits Known Vulnerabilities to Deploy Cobalt Strike via SharkLoader

Release Date: 16 Jul 2026 4006 Views

FEATURED BLOG

Smart Wearables, Smart Security: Cybersecurity Guide for Smart Wearables

Release Date: 3 Jul 2026 6059 Views

Understanding OAuth Risks: From Device Code Phishing to Token Abuse

(Image generated by generative AI and reviewed under professional human supervision.) OAuth (Open Authorisation) forms a fundamental basis of modern authentication and authorisation mechanisms, allowing users to grant applications access to specific resources without sharing their account passwords. This design greatly enhances usability and...

Release Date: 17 Jun 2026 7195 Views

275 Million Users Affected by Online Learning System Breach HKCERT Urges Local Institutions to Review Security

(This image was created using generative AI and reviewed under professional human supervision.) The cross-border online learning management system (LMS) Canvas has recently reportedly been breached by a hacker group. The group claims to have illegally accessed user data from multiple schools worldwide...

Last Update Date: 12 May 2026 Release Date: 10 May 2026 28841 Views

Reports Unauthorised Access and Leak of Patient Data – Over 56,000 Individuals Affected HKCERT Urges Enhanced Protection and Proactive Risk Management

The Hong Kong Computer Emergency Response Team Coordination Centre (HKCERT) has issued a security alert regarding a data leakage incident involving a local healthcare establishment. The Hospital Authority (HA) has reported that its routine monitoring system detected a suspected case of unauthorised access to patient...

Release Date: 5 Apr 2026 16898 Views

OpenClaw’s Rapid Adoption Exposes Skills Supply Chain and Fake Installer Risks in a High-Privilege AI Agent Platform

OpenClaw is a recently fast-growing open-source AI agent platform that emphasises self-hosting, extensibility through skills, and integration with local environments and external services. Official documentation shows that ClawHub is OpenClaw’s public skill registry, where users can search for...

Release Date: 17 Mar 2026 58351 Views

Stay Vigilant When Shopping Online During the Festive Season

As the festive season approaches, online shopping and digital services experience a significant surge. Users should remain vigilant when making online purchases, safeguard personal data, and avoid entering sensitive information on insecure websites to prevent identity theft and online fraud. Fraudulent activities have become increasingly...

Release Date: 19 Dec 2025 20106 Views

Hackers’ New Partner: Weaponized AI for Cyber Attacks! HKCERT Exposes Six Emerging AI-assisted Attacks

In recent years, artificial intelligence (AI) technology has advanced rapidly. Large language models (LLMs) and generative models have been widely applied in writing, reasoning, and generating images and videos. At the same time, the Hong Kong Computer Emergency Response Team...

Release Date: 17 Sep 2025 28422 Views

The Hidden Dangers of Third-Party Risk: Lessons from the Recent Data Breaches

As organizations increasingly rely on external vendors, the unseen risks lurking in third-party relationships have become a prime target for cybercriminals. Recent breaches at major firms like Marks & Spencer and Qantas reveal just how devastating these risks can be. Third-party risk refers...

Last Update Date: 8 Aug 2025 Release Date: 25 Jul 2025 29569 Views

16 Billion Account Passwords Leaked Worldwide – HKCERT Urges Users to Review Account Security and Stay Vigilant

The Hong Kong Computer Emergency Response Team Coordination Centre (HKCERT) has issued an alert regarding a large-scale data leak recently reported internationally. More than 16 billion sets of account password data have been made public online, covering many commonly used online service platforms such...

Release Date: 22 Jun 2025 24017 Views

When Cybersecurity Meets 'Her Power': Unlocking the Potential of Women in Cybersecurity

Industry Status and Insights The cybersecurity industry is currently facing a severe talent shortage. Statistics show that there is a global shortage of nearly 4 million cybersecurity professionals[1]. Although the number of cybersecurity practitioners is growing at an annual rate of 8.7%, ...

Release Date: 7 Mar 2025 30244 Views

Enhancing Digital Signage Security: Security Findings and Recommendations from the Latest Study

Download Full Report: IoT Security Study Report on Digital Signage In today's digital age, digital signage has become a popular tool for industries to promote products and display information to customers. However, as an IoT device that is commonly placed in public areas...

Release Date: 20 Jan 2025 31425 Views