Cyber Security and Technology Crime Bureau (CSTCB) has continuously evolved and innovated to safeguard Hong Kong's cybersecurity environment. To mark the milestone of its 10th anniversary, CSTCB has published “Cybersecurity Report 2024”. The report covers the global and local cybersecurity landscape in 2024, offering professional analysis and expert recommendations based on CSTCB's extensive experience in handling cybersecurity incidents. It also provides forecasts of potential cyber threats facing Hong Kong in the coming year. Through this report, CSTCB aims to enhance cybersecurity awareness and strengthen defensive capabilities among the public and the cybersecurity industry.
Key Cybersecurity Data
- Among the 33,903 technology crime cases recorded by Hong Kong Police Force in 2024, there were 112 destructive cyberattacks, including 61 “Hacking activities”, 46 “Ransomware” and 5 “Distributed denial-of-service (DDoS) attacks” cases.
- In 2024, CSTCB processed over 25 million pieces of cyber threat intelligence, averaging more than 68,000 pieces per day. Among these, CSTCB identified over 440,000 cyber threats targeting Hong Kong.
- Analysis of cybersecurity incidents revealed three recurring issues: Inadequate access control and configuration, Outdated and unpatched systems, Lack of effective threat detection mechanisms
- Over 90,000 Internet-facing assets of Hong Kong's critical infrastructures were assessed and that 5% had varying degrees of system vulnerabilities. Among the discovered vulnerabilities, 89% were classified as medium and low risk, and 11% were identified as critical and high risk.
Cyber Threat Forecast for the Coming Year
- Surging AI-powered cyber threats and AI system risks
- Ransomware attacks remain prevalent
- Increasing Web3-related cyberattacks
- Escalating IoT security risks
- Growing supply chain and third-party risks
- Intensifying cloud security and hybrid work risks
- Emerging attacks on critical infrastructures
In his foreword to the report, Chief Superintendent of CSTCB Raymond Lam stated that CSTCB will continue to lead the development of the cybersecurity ecosystem through innovation with resilience and determination, and build a robust cybersecurity defence community with the goal of securing the cyberspace. We will provide solid security for the development of the smart city to realise the vision of empowering the future.
For more details, please refer to the CSTCB “Cybersecurity Report 2024” digital edition.
