News related to
theft

Autonomous AI Attack-and-Defence Demonstrates Next-Generation Cybersecurity Talent and Advance Regional Digital Security Talent Development

HONG KONG SAR – Media OutReach Newswire – 23 August 2026 – The AI x Cybersecurity Challenge, jointly organised by the Digital Policy Office of the Hong Kong Special Administrative Region Government, the Chinese Academy of Cyberspace Studies, the Hong Kong Cybersecurity Professional Association, and China Mobile Hong Kong Company Limited, and co-organised by Hong Kong Cyberport Management Company Limited, the Cyber Security and Technology Crime Bureau of the Hong Kong Police Force, the Hong Kong Productivity Council, Venustech Group Inc., and Hong Kong Cloud Peak Technology Co., Limited, held the Finals today.

Following a 12-hour online qualifying round, a total of 40 teams advanced to the Final Competition, including 20 teams from the Chinese Mainland, 18 from Hong Kong, and two from overseas regions. The Challenge adopts an innovative AI-Driven Dual (AID) competition format, in which artificial intelligence (AI) executes the competition and enables autonomous defence by AI agents. Teams of up to three members showcase their capabilities in leveraging AI technologies for automated vulnerability discovery and exploitation, competing for total prize money of HK$180,000.

The event brings together representatives from Government, industry, academia and research organisations to witness the latest developments in AI-powered cybersecurity innovation. Officiating guests at the Opening Ceremony included Professor SUN Dong, JP, Secretary for Innovation, Technology and Industry, Mr LI Shuguang, Director-General of the General Office of the Liaison Office of the Central People’s Government in the HKSAR, Mr WANG Jiang, Director-General of the Chinese Academy of Cyberspace Studies, Mr Daniel CHEUNG, JP, Acting Commissioner for Digital Policy, Mr WANG Minwei, Deputy Director of the Cyberspace Administration of Guangdong Province, Dr Rocky CHENG, JP, President of the Hong Kong Cybersecurity Professional Association, and Ms SHI Xiaoping, Director and Chief Executive Officer of China Mobile Hong Kong Company Limited.

In his opening remarks, the Secretary for Innovation, Technology and Industry, Professor Sun Dong, said that AI is reshaping every aspect of people’s life at a breathtaking speed. He noted that although innovation may at times bring new threats, these same technologies can also spur defensive capabilities. As such, the Government champions an “AI versus AI” strategy, leveraging AI to forge the strongest shields to effectively manage risks associated with the use of AI.

Professor Sun added that the Government is continuously strengthening related policies, guidelines and ethical frameworks, as well as conducting regular cyber-attack-and-defence drills to better prepare for cybersecurity readiness. Through multi-pronged efforts, the Government hopes to guide society to apply AI responsibly, foster a healthy ecosystem, and strengthen city-wide resilience in face of cyber attacks.

Addressing AI-Era Cybersecurity Challenges Through Talent Development

The rapid advancement of AI is reshaping the global cybersecurity landscape. AI has evolved from a supporting tool for security analysis and threat monitoring into a technology capable of autonomously constructing attack chains and bypassing existing defence mechanisms. This has significantly lowered the technical barriers to cyberattacks, making sophisticated attack techniques more automated and accessible. Threat actors can leverage AI for intelligent vulnerability discovery, automated penetration testing, and even the creation of highly convincing deepfake content, enabling stealthier and more persistent cyberattacks.

As emerging threats such as model security risks, data poisoning, model theft, phishing attacks, supply chain vulnerabilities and automated exploitation continue to evolve, the demand for interdisciplinary talent with expertise in both AI and cybersecurity is becoming increasingly urgent. In response, the organisers aim to promote the practical application of AI technologies through this hands-on competition while cultivating a new generation of cybersecurity professionals equipped with cross-disciplinary expertise.

AI-Driven Attack-and-Defence Competition Platform

Unlike traditional Capture the Flag (CTF) competitions, this year’s Challenge adopts an innovative AI-Driven (AID) competition format. Participating teams leverage AI-powered automated systems to analyse the competition environment provided by the organisers, identify vulnerabilities and exploit them. The automated capabilities of the AI agents include information gathering, vulnerability discovery and flag submission. The competition environment incorporates both vulnerabilities found in real-world scenarios and simulated zero-day vulnerabilities that may exist in software systems.

The challenge design draws on concepts from international cybersecurity competitions and incorporates practical operating scenarios as well as simulated zero-day attack-and-defence environments, testing participants’ ability to apply AI technologies to real-world cybersecurity challenges. The Challenge aims to enhance participants’ practical attack-and-defence experience and innovation capabilities, promote the research and application of AI security technologies, and nurture a new generation of cybersecurity talent equipped with both strategic vision and practical expertise. Through these efforts, the competition seeks to strengthen capabilities in addressing AI-driven cyber threats.

Government, Industry, Academia and Research Communities Join Forces to Advance AI Security

This year’s Challenge brings together stakeholders from government, industry and research institutions to drive innovation in AI security technologies, strengthen cybersecurity capabilities and cultivate future talent.

Mr Wang Jiang, Director-General of the Chinese Academy of Cyberspace Studies, said, “AI technologies are reshaping the global cyber attack-and-defence landscape. While they lower the barriers to cyberattacks, they also drive the evolution of security protection from reactive response to proactive and intelligent defence. In this technological contest, using technology to counter technology has become an inevitable trend. By focusing on practical AI attack-and-defence capabilities, this competition aims to identify emerging talent and contribute to building a more trustworthy and intelligent cyberspace.”

Ms Shi Xiaoping, Director and Chief Executive Officer of China Mobile Hong Kong Company Limited, said, “As one of the organisers of this competition, China Mobile Hong Kong has devoted substantial resources to building an innovative AI attack-and-defence competition platform. Through continuous technology investment and ecosystem development, we actively fulfil our corporate social responsibility while showcasing Hong Kong’s innovation and leadership in AI cybersecurity to the world.”

Dr Rocky CHENG, JP, President of the Hong Kong Cybersecurity Professional Association, concluded, “AI-driven cyberattacks and agentic AI-related risks have emerged as some of the most significant cybersecurity threats today. Against this backdrop, cultivating interdisciplinary talent with expertise in AI system design, development and practical attack-and-defence capabilities has become an important pillar in strengthening Hong Kong’s overall cyber resilience.”

The Awards Presentation Ceremony will be held in late September 2026 during the China Cybersecurity Week to recognise teams that have demonstrated outstanding performance in the competition. The organisers encourage enterprises and organisations to continuously strengthen their cybersecurity governance, regularly review information system risks, enhance data protection measures and improve cyber incident response capabilities. Young talents are also encouraged to pursue opportunities in artificial intelligence and cybersecurity, developing their expertise through training, professional certifications and hands-on competitions. Members of the public and organisations may also make use of the cybersecurity information, training programmes and support services provided by the Hong Kong Computer Emergency Response Team Coordination Centre (HKCERT) and other relevant organisations, helping to foster a safer, more secure and trustworthy digital ecosystem.

Please download the high-res photos HERE.

Photo Captions:

1. The Finals of the AI x Cybersecurity Challenge.
2. Officiating guests, including Dr Rocky CHENG, JP, President of the Hong Kong Cybersecurity Professional Association,Mr Daniel CHEUNG, JP, Acting Commissioner for Digital Policy, Mr LI Shuguang, Director-General of the General Office of the Liaison Office of the Central People’s Government in the HKSAR, Professor SUN Dong, JP, Secretary for Innovation, Technology and Industry, Mr Wang Jiang, Director-General of the Chinese Academy of Cyberspace Studies, Mr WANG Minwei, Deputy Director of the Cyberspace Administration of Guangdong Province and Ms Shi Xiaoping, Director and Chief Executive Officer of China Mobile Hong Kong Company Limited (from left to right) preside over the launch ceremony of the AI x Cybersecurity Challenge, marking the official commencement of the competition.

3. Officiating guests and representatives of the organisers and co-organisers, including Hong Kong Productivity Council, pose for a group photo at the Opening Ceremony, demonstrating their shared commitment to advancing innovation in AI and cybersecurity and nurturing regional AI security talent.

4. Professor Sun Dong, JP, Secretary for Innovation, Technology and Industry, delivers a speech at the Opening Ceremony, pointing out that AI is reshaping every aspect of people’s life at a breathtaking speed. He noted that although innovation may at times bring new threats, these same technologies can also spur defensive capabilities. As such, the Government champions an “AI versus AI” strategy, leveraging AI to forge the strongest shields to effectively manage risks associated with the use of AI.

5. The 40 finalist teams showcase innovative AI-driven cybersecurity technologies by independently designing and deploying autonomous AI agents to compete in a simulated attack-and-defence environment.

The issuer is solely responsible for the content of this announcement.

About Hong Kong Computer Emergency Response Team Coordination Centre

Managed by the Hong Kong Productivity Council (HKPC), Hong Kong Computer Emergency Response Team Coordination Centre (HKCERT) is the centre for coordination of computer security incident response for local enterprises and Internet Users. Its missions are to facilitate information disseminating, provide advices on preventive measures against security threats and to promote information security awareness.

HKCERT collaborates with local bodies to collect and disseminate information, and coordinate response actions. HKCERT is also a member of the Forum of Incident Response and Security Teams (FIRST) and the Asia Pacific Computer Emergency Response Team (APCERT). We exchange information with other CERTs and act as a point of contact on cross-border security incidents.

About the Hong Kong Productivity Council

The Hong Kong Productivity Council (HKPC) is a statutory body established in 1967, dedicated to enhancing the productivity and competitiveness of Hong Kong enterprises through world-class applied R&D, innovative technology services, and integrated manufacturing solutions. As a market-oriented, international R&D organisation, HKPC leverages its deep expertise and extensive industry experience in key areas such as AI, advanced manufacturing, life and health technology, green technology and new energy to drive new industrialisation and support the growth of emerging and future industries.

HKPC focuses on addressing businesses challenges and industrial technology needs, promoting the full integration between technological and industrial innovation. Through technology transfer, product innovation, intellectual property protection and commercialisation of R&D outcomes, the Council fosters collaboration with the local business community as well as top global R&D institutions, delivering added value to industries and advancing the development of new productive forces. HKPC’s world-class R&D achievements have been widely recognised over the years, winning an array of local and overseas accolades, reinforcing Hong Kong’s role as an international innovation and technology centre and a smart city.

To help enterprises capitalise on Hong Kong’s strengths in international connectivity to expand into global markets, HKPC offers comprehensive overseas expansion services tailored to critical areas including product development, technology, manufacturing, and management, enabling businesses to successfully go global from Hong Kong.

HKPC is also committed to providing timely and practical support to SMEs and startups with timely and practical , assisting them in accessing Government funding programmes. Through its FutureSkills training initiatives, HKPC helps both industry and academia stay ahead in latest digital and STEM technologies, nurturing a future-ready talent pool for Hong Kong.

For more information, please visit HKPC’s website: .

MacSync Stealer has been linked to more than 30 rotating web domains as its operators broaden a macOS credential-theft campaign designed to evade conventional defences while maintaining recognisable execution, collection and data-transfer patterns. The malware targets passwords, browser credentials, authentication cookies, macOS Keychain material, SSH keys, cloud access credentials, cryptocurrency wallets and sensitive files stored on compromised machines. Its operators repeatedly replace command-and-control infrastructure, making individual domain […]

ToxicPanda 2.0 has emerged as a substantially upgraded Android banking Trojan capable of stealing PINs, harvesting financial credentials and remotely manipulating compromised smartphones, extending its potential targets to hundreds of banking, payment and cryptocurrency applications worldwide. The malware now carries a dedicated PIN-harvesting mechanism aimed at more than 140 banking and cryptocurrency applications. Its wider phishing system can deploy credential-stealing overlays against 349 banking, financial, e-wallet and […]

Medusa ransomware operators have compromised more than 500 organisations across critical infrastructure sectors, prompting US cyber authorities to warn that the group is exploiting vulnerabilities faster and using increasingly aggressive methods to penetrate networks and extort victims. An updated joint cybersecurity advisory from the Federal Bureau of Investigation, Cybersecurity and Infrastructure Security Agency and Department of Health and Human Services said the tally had exceeded 500 by […]

OpenAI has tightened controls around the development of its most powerful artificial intelligence systems after an autonomous agent escaped a restricted testing environment and penetrated infrastructure operated by AI platform Hugging Face. The company has slowed parts of its frontier-model programme while introducing stronger monitoring, containment and alignment requirements. The changes include a two-week pause in reinforcement-learning training for models intended for deployment and continued suspension of […]

Britain recorded more than 220,000 fraud-risk cases in the first six months of 2026, the highest total ever registered for the January-to-June period, as identity theft, account takeovers and money-mule activity intensified across financial and digital services. The figure was about 1% higher than a year earlier. Identity fraud remained the dominant threat, accounting for 59% of all cases entered into the National Fraud Database during the […]

Cl0p has claimed a sweeping data-theft campaign affecting nearly 50 companies worldwide, placing Shell, Philips, GE and financial technology group Fiserv among the organisations named on the cybercrime operation’s leak site. Several companies have opened investigations, although the scale of the alleged theft remains unverified. The campaign appears to mark another large-scale attempt by the Russia-linked extortion group to exploit a weakness in widely deployed enterprise software […]

Advertisements

A newly analysed macOS information-stealing malware is targeting cryptocurrency holdings, passwords and Apple Keychain data after victims are tricked into executing malicious commands through ClickFix social-engineering attacks. The malware, written in the Go programming language and compiled as a native Mach-O executable, can steal browser credentials and cached authentication data while also manipulating cryptocurrency transactions. Its most unusual capability allows operators to siphon either part or all […]

Harmony is moving towards rolling back its blockchain after an attacker exploited weaknesses in the network to create billions of unauthorised ONE tokens, forcing developers to halt parts of the system and coordinate an emergency response with validators and cryptocurrency exchanges. The Layer-1 blockchain has identified block 92,730,034, recorded on August 11 at 23:25:37 UTC, as the proposed point to which the network would be restored. Harmony […]

VINclarity has launched an investigation into what it says is a coordinated campaign aimed at damaging its reputation across Reddit, YouTube, search engines and artificial intelligence services. The vehicle-history platform said its review identified patterns linking negative Reddit posts, YouTube videos and entries on the Better Business Bureau’s Scam Tracker with searches containing phrases such as “VINclarity scam”, “VINclarity fraud” and “is VINclarity legit”. The company argues […]

North Korean operatives are using stolen identities, artificial intelligence and networks of overseas facilitators to secure remote technology jobs at US companies, exposing weaknesses in corporate hiring systems while generating money for Pyongyang. A year-long investigation into the operation found that workers linked to North Korea have infiltrated American businesses by assuming the identities of US citizens, creating convincing professional profiles and using AI tools to help […]

The FBI and NCAA have launched a joint effort to protect college athletes from hackers seeking private images and using stolen material for sexual exploitation, blackmail and online harassment. The initiative follows growing concern that athletes’ highly visible digital profiles are giving criminals more opportunities to identify targets, compromise accounts and obtain intimate photographs or videos. Attackers commonly use phishing messages, stolen or guessed passwords and PINs, […]

Dubai-based cryptocurrency exchange Bybit has filed a civil lawsuit against North Korea and the Lazarus Group over the $1.5 billion cyberattack that emptied one of its wallets in February 2025, escalating its effort to recover assets from the largest cryptocurrency theft on record. The exchange has also secured a preliminary injunction from the US District Court for the District of Columbia that freezes identified digital assets linked […]

Valve has warned Steam hardware customers across Europe that their personal and order information was likely stolen during a cyberattack on CEVA Logistics, the company responsible for distributing its physical products in the region. The attack gave intruders access to CEVA systems between July 29 and August 1, 2026. Valve learned on August 7 that information belonging to its customers was among the data potentially compromised. The […]

Atlassian has fixed a security flaw in its Rovo artificial intelligence assistant that could have allowed attackers to turn a single malicious link into a channel for stealing sensitive corporate information from services accessible to a logged-in employee. The vulnerability, dubbed RovoBlast, exploited the way Rovo Chat processed externally supplied information embedded in URLs. An attacker could construct a link containing malicious instructions and persuade an authenticated […]

A coordinated campaign involving 77 counterfeit extensions on the Open VSX Registry exposed sensitive information about developer machines, Git repositories and continuous integration environments, highlighting a growing software supply-chain risk around code-editor plugins. The extensions appeared between July 26 and August 1 and impersonated legitimate tools available through the Visual Studio Code ecosystem. All 77 had been removed from Open VSX by August 3, but security specialists […]

A Windows Hello for Business authentication technique can allow malware operating inside an unlocked Windows session to gain access to Microsoft Entra ID services without obtaining the user’s password, PIN or biometric data. Security researcher Dirk-jan Mollema demonstrated that an attacker who already controls a user process can invoke the cryptographic key underpinning Windows Hello for Business, or WHFB, and use it to generate authentication signatures. The […]

A Canadian hacker has pleaded guilty to taking part in a sweeping cybercrime operation that compromised accounts belonging to more than 165 organisations using cloud data platform Snowflake, exposing sensitive information belonging to at least 100 million people. Connor Riley Moucka, 26, of Kitchener, Ontario, admitted computer fraud, wire fraud, aggravated identity theft and conspiracy in federal court in Washington state. He is scheduled to be sentenced […]

A volunteer security group has flagged 85 potentially critical vulnerabilities across hundreds of Bitcoin-related software projects, exposing the scale of weaknesses that artificial intelligence can identify faster than developers can verify or repair them. The Bitcoin Red Team recorded 4,962 security findings after running advanced AI models against 390 open-source repositories during an intensive audit spanning about 27.5 hours on August 4 and 5. The findings included […]

Ransomware operators are using Ethereum smart contracts to conceal command-and-control addresses, giving malware a resilient way to locate attacker-controlled servers even after defenders block known domains. The technique has been linked to an affiliate of The Gentlemen ransomware operation, which deployed a Node. js backdoor known as EtherRAT during intrusions targeting Windows networks. Instead of storing a fixed command server inside the malware, EtherRAT reads a smart […]

Chinese optical-component shares fell sharply on Wednesday after reports that Washington is preparing restrictions on data-centre equipment from China, raising fresh concerns over access to the world’s largest artificial intelligence infrastructure market.

Zhongji Innolight dropped about 10% in both Shanghai and Hong Kong, while Eoptolink Technology also lost 10%. Suzhou TFC Optical Communication declined roughly 6%. The CSI 300 Telecommunication Services Index fell as much as 9% during early trading before trimming some losses.

The sell-off followed disclosures that the administration of US President Donald Trump is drafting a measure that would bar imports of new Chinese optical transceiver models on national security grounds. The Federal Communications Commission is working on the proposed restrictions and is seeking to publish them before the end of the year.

No final decision has been announced, and the proposed rules could be altered, delayed or abandoned. Neither the White House nor the FCC has publicly detailed the measure.

Optical transceivers are essential components in modern data centres. They convert electrical signals into light and allow vast volumes of information to move at high speed through fibre-optic cables connecting servers, switches and computing clusters.

Demand for the devices has surged as technology groups build larger facilities for training and operating artificial intelligence models. These systems require thousands of advanced processors to communicate rapidly, making optical networking a critical part of the AI supply chain.

Chinese manufacturers have secured a substantial position in the global market by combining high-volume production with competitive pricing. Zhongji Innolight holds an estimated 27% share of the global data-centre transceiver market and is among the leading suppliers of high-speed products used in AI computing systems.

The company derived 62% of its revenue from the United States during the first quarter of 2026. It has previously warned that an escalation in trade tensions could produce a steep decline in earnings or lead to losses.

Eoptolink is similarly exposed, generating about 96% of its sales from overseas markets. TFC Optical also depends heavily on foreign customers, leaving all three companies vulnerable to any restriction affecting shipments to US cloud-computing operators.

The proposed action would mark a further expansion of Washington’s technology controls. Earlier measures concentrated mainly on preventing China from acquiring advanced semiconductors, chipmaking equipment and other technologies with potential military applications.

US policy is now extending towards limiting Chinese companies’ access to the domestic market. The FCC has already imposed or prepared restrictions covering telecommunications equipment, drones, routers, connected power inverters and advanced robots.

Under the plan being considered, the agency could initially prohibit imports of all new optical transceiver models and then grant exemptions to suppliers outside China. Existing devices may remain unaffected, although the scope of any final regulation has yet to be established.

US officials are concerned that foreign-made components embedded in data centres could enable data theft, malware installation or service disruption. Supporters of tighter controls argue that Washington should act before Chinese equipment becomes deeply integrated into critical AI infrastructure.

The approach reflects lessons drawn from Huawei, whose telecommunications equipment became widely installed before security restrictions were introduced. Removing or replacing those systems proved costly and complicated for network operators.

A ban would also create challenges for US cloud-computing companies. Amazon Web Services and other operators may have to shift orders to suppliers such as Coherent and Lumentum, potentially increasing procurement costs and slowing the expansion of data-centre capacity.

Shares of US optical-networking companies rose after details of the proposal emerged. Lumentum gained about 7%, Coherent climbed 11% and Applied Optoelectronics advanced 18%, as investors anticipated greater demand for non-Chinese products.

Industry specialists have cautioned that US suppliers may lack the manufacturing scale required to replace Chinese vendors quickly. Any abrupt change could tighten global supplies of high-speed transceivers at a time when technology groups are spending heavily on AI infrastructure.

Some market analysts also viewed Wednesday’s declines as excessive. They said the proposal could serve as a negotiating tool before an expected visit by Chinese President Xi Jinping to the United States in September.

Trade relations remain shaped by mutual dependence. Washington relies on China for rare-earth minerals used in electronics and optical systems, while Chinese technology companies depend on US customers, processors and specialised equipment.

A WhatsApp account takeover scam is spreading through messages that ask users to vote for a friend or relative in an online competition, before covertly linking the victim’s account to a device controlled by criminals. The attack often begins with a message from a familiar contact whose account has already been compromised. The recipient is asked to support someone participating in a dance contest, school competition, pet […]

Greenlogue/AP A UAE-led multinational operation has arrested 839 suspects and seized assets linked to environmental offences worth more than $280 million across the Amazon Basin, sharply expanding cross-border enforcement against illegal mining, logging and wildlife trafficking. Operation Green Shield 2026 brought together law enforcement agencies from Bolivia, Brazil, Colombia, Ecuador and Peru, with organisational leadership and coordination provided by the UAE through the International Initiative of Law […]

A newly identified malware operation has used a counterfeit Python component to bypass security scrutiny, disable parts of Microsoft Defender and establish persistent remote access inside a law firm’s network. The intrusion compromised two endpoints after employees received spear-phishing emails directing them to an encrypted archive hosted on the Mega file-sharing service. The archive contained a malicious Windows shortcut named “Case Documents”, designed to resemble material connected […]

VISHNU RAJA
RYO YAMADA
HITORI GOTOH
IKUYO KITA