Hong Kong Security Report — October 25, 2026

Security analysis based on open-source intelligence and web research. Period: October 18 — October 25, 2026.

Security Analysis Report: Hong Kong (October 18 - October 25, 2026)

Executive Summary

During the period of October 18 to October 25, 2026, Hong Kong's security posture was characterized by heightened internal vigilance and ongoing geopolitical scrutiny. Key developments included the launch of a comprehensive counter-terrorism exhibition aimed at public awareness and urgent government-wide directives to address critical cybersecurity vulnerabilities in widely used web programming languages. Border security saw significant activity with a surge in northbound travelers at the Lo Wu crossing and the operational impact of the new Huanggang joint electronic checkpoint. Diplomatically, Hong Kong and Beijing strongly condemned a UK report critical of the National Security Law, while the city successfully hosted the APEC Finance Ministers' Meeting under extensive security measures.

Key Security Developments

• Counter-terrorism Exhibition and Public Awareness Campaign
  On October 24, 2026, the Inter-departmental Counter Terrorism Unit (ICTU), co-organised by the National Security Department of the Hong Kong Police Force and coordinated by the Security Bureau, launched an educational counter-terrorism exhibition at the Hong Kong Museum of History in Tsim Sha Tsui. The initiative aims to enhance public awareness of counter-terrorism (CT) and strengthen public response capabilities through multimedia displays and interactive experiences. Secretary for Security Tang Ping-keung emphasized the need for Hong Kong to remain vigilant against potential threats and continuously strengthen its CT capabilities in prevention, preparedness, response, and recovery.

• Critical Cybersecurity Vulnerabilities and Government Response
  On October 22, 2026, Hong Kong authorities, following international alerts, issued an "extremely high risk" warning regarding critical flaws (CVE-2026-109618 and CVE-2026-109619) in the widely used PHP programming language, which could allow remote code execution and server control. The government's Digital Policy Office (DPO) immediately issued a security alert to all bureaus, departments, and public organizations, urging a comprehensive review and prompt patching of affected systems. The DPO confirmed that patching for government website hosting services was completed and no related cybersecurity incidents had been reported so far.

• Department of Health Email Account Misuse Incident
  On October 24, 2026, the Department of Health alerted the public to suspicious emails and SMS messages originating from its HIV Testing Service website, which was suspected of being misused. These messages incorrectly indicated that recipients were exposed to HIV. While a thorough investigation was launched and no evidence of data loss or leakage was found, the website was suspended until cybersecurity experts confirm its security.

• Surge in Border Departures at Lo Wu Crossing
  On October 18, 2026, Hong Kong's Security Bureau reported a significant surge in northbound travelers at the Lo Wu (Huanggang) border crossing. Between noon and 2 pm, approximately 19,000 travelers departed for mainland China, an increase of more than eight times compared to previous periods. The busiest hour, between 1 pm and 2 pm, saw 9,728 people cross the border, nearly nine times the usual volume. Contingency plans were activated to manage the crowd, and overall operations ran smoothly.

• Operational Impact of New Huanggang Border Crossing
  The newly built Huanggang border crossing, which opened earlier in October 2026, continued its operations with a joint electronic checkpoint for Hong Kong and Shenzhen, significantly speeding up passport control to about five minutes. Security Secretary Chris Tang Ping-keung noted on October 17, 2026, that the crossing had operated smoothly since its opening, handling approximately 80,000 passenger trips daily, exceeding 92,000 on October 17. This represents a substantial increase from pre-reconstruction figures of 30,000 to 40,000 trips.

• Expansion of Immigration Facilitation Scheme
  Effective October 1, 2026 (announced earlier), Hong Kong expanded its Immigration Facilitation Scheme for Invited Persons to include Central Asian and Middle Eastern countries. This scheme also now allows all government bureaux and departments to invite eligible visitors, aiming to strengthen economic and trade ties and facilitate exchanges with these regions.

• UK Report on National Security Law Draws Condemnation
  On October 24, 2026, Hong Kong and mainland Chinese authorities strongly condemned a UK report that asserted the city's National Security Law (NSL) had further eroded the openness underpinning its success as a financial hub. The Hong Kong government issued a statement refuting "untruthful remarks, slanders and smears" and rejected what it called an attempt to interfere in its governance through "despicable political manoeuvres". The UK Foreign Secretary, Ed Miliband, had expressed deep concern over cases such as that of former media boss Jimmy Lai Chee-ying, who was jailed for national security offenses.

• US Legislation for Permanent Residence for Hong Kongers
  On October 6, 2026 (with ongoing discussion and implications during this reporting period), the "Hong Konger Promise of Refuge Act" (H.R.10685, S.5606) was introduced in the US Congress. This bill aims to allow Hong Kongers covered by Deferred Enforced Departure (DED) to apply for permanent residence in the United States, providing a more durable status as the current DED program is set to expire in February 2027. Supporters cite concerns over Hong Kong's National Security Law and recent arrests of DED holders.

• APEC Finance Ministers' Meeting and Enhanced Security
  From October 20 to 21, 2026, Hong Kong hosted the Asia-Pacific Economic Cooperation (APEC) Finance Ministers' Meeting at the Hong Kong Convention and Exhibition Centre in Wan Chai. Extensive land, sea, and air defense deployments were implemented by Hong Kong security forces to ensure the smooth running of the event. This included 24-hour police patrols in Wan Chai and a temporary restricted flying zone extending 3km from the venue, with strict prohibitions on operating small unmanned aircraft without authorization.

• World Justice Project Rule of Law Index 2026 Assessment
  On October 21, 2026, the World Justice Project released its Rule of Law Index 2026, which showed Hong Kong's overall ranking remaining high at 24th globally and 6th in East Asia and the Pacific. Notably, Hong Kong's ranking for "Order and Security" rose to 7th worldwide. The HKSAR Government stated that this demonstrates the effectiveness of the Hong Kong National Security Law, the Safeguarding National Security Ordinance, and other relevant laws in protecting the city's security and maintaining a favorable environment for business and investment.

• Deepening Economic and Trade Ties with Mainland China
  On October 23, 2026, Hong Kong Finance Secretary Paul Chan signed two memoranda of understanding with China's Ministry of Commerce in Beijing. These agreements aim to deepen economic and trade ties and push for a comprehensive upgrade of the Closer Economic Partnership Arrangement (CEPA), further opening mainland trade in services and expanding market access for Hong Kong in the mainland.

• Allegations of Transnational Repression Involving Hong Kong
  An analysis published on October 23, 2026, suggests that the People's Republic of China (PRC) may be co-opting criminals in Hong Kong and Taiwan to intimidate individuals deemed "Taiwanese separatists" or critics of the Chinese Communist Party (CCP). This analysis cited an alleged incident in July where a Hong Kong triad leader reportedly paid a Hong Kong man to travel to Taiwan to assault the CEO of the Indo-Pacific Strategy Think Tank, Akio Yaito, in Taichung.

Geopolitical Impact and Regional Dynamics

Hong Kong's security developments during this period underscore its complex and increasingly integrated relationship with mainland China, while simultaneously highlighting persistent friction with Western powers. The successful hosting of the APEC Finance Ministers' Meeting, under stringent security, served as a platform for Hong Kong to project "China's voice" in regional stability and showcase its role as a "superconnector" in a geopolitically charged world. This event reinforces Beijing's narrative of Hong Kong's continued economic relevance and stability under its governance.

However, this narrative is sharply contrasted by ongoing diplomatic tensions with the United States and the United Kingdom. The strong condemnation by Hong Kong and Beijing of the UK's report on the National Security Law demonstrates the deep ideological divide and the sensitivity surrounding Hong Kong's autonomy and human rights. Concurrently, the introduction of the "Hong Konger Promise of Refuge Act" in the US Congress signals continued US concern for Hong Kong residents and a potential avenue for permanent residency, further complicating US-China relations regarding Hong Kong.

The deepening economic integration, exemplified by the signing of memoranda of understanding with China's Ministry of Commerce to upgrade CEPA, solidifies Hong Kong's role within Beijing's national development strategy, particularly the Greater Bay Area. This economic alignment, while beneficial for growth, also reinforces perceptions of diminishing distinctiveness from the mainland. Furthermore, the allegations of PRC co-opting criminals in Hong Kong to target individuals in Taiwan introduce a concerning dimension of potential transnational repression, which could exacerbate cross-strait tensions and draw further international scrutiny regarding Hong Kong's role in such activities.

Military and Defense Analysis

Hong Kong, as a Special Administrative Region of China, does not possess its own independent military. Its defense is the responsibility of the People's Liberation Army (PLA) garrison stationed in the city. Therefore, military activities and defense policy shifts are primarily dictated by Beijing. During this reporting period, there were no specific reports detailing PLA garrison activities or significant defense acquisitions directly related to Hong Kong.

Instead, the focus of "defense" within Hong Kong largely falls on its internal security forces, particularly the Hong Kong Police Force and the Inter-departmental Counter Terrorism Unit (ICTU). The extensive security deployment for the APEC Finance Ministers' Meeting in Wan Chai, involving 24-hour police patrols and a restricted flying zone, demonstrates the robust capabilities of these forces in managing large-scale events and maintaining public order. The launch of the counter-terrorism exhibition further highlights a proactive approach to strengthening internal security through public engagement and preparedness, rather than traditional military modernization. This indicates a strategic emphasis on preventing and responding to internal threats, including terrorism, and maintaining social stability, which aligns with the broader national security framework imposed by Beijing.

Outlook and Forecast

Short-term trends (1-3 months):
In the immediate future, Hong Kong is likely to continue its strong emphasis on national security and counter-terrorism efforts, as evidenced by the ongoing public awareness campaigns and exhibitions. We can expect sustained vigilance against internal threats and continued enforcement of the National Security Law. Cybersecurity will remain a critical area, with authorities likely to issue further alerts and mandate patching for vulnerabilities, especially given the recent "extremely high risk" warnings. Cross-border integration with mainland China will deepen, driven by economic agreements like the CEPA upgrades and increased traveler flows at new and expanded border crossings. Diplomatically, Hong Kong will likely continue to face international scrutiny from Western nations regarding its autonomy and human rights, leading to further condemnations from Beijing and Hong Kong authorities.

Critical flashpoints and risk areas:
A critical flashpoint remains the extraterritorial application of the National Security Law, particularly in light of US legislative efforts to grant permanent residence to Hong Kongers and allegations of transnational repression. Any perceived attempts by Hong Kong authorities to enforce the NSL against individuals abroad could escalate diplomatic tensions significantly. Cybersecurity incidents, especially those targeting critical infrastructure or government systems, pose a substantial risk, potentially leading to data breaches or service disruptions. The Lo Wu and Huanggang border crossings could experience further surges in traveler numbers, requiring continuous monitoring and contingency planning to prevent congestion or security lapses. The ongoing geopolitical competition between China and Western powers will continue to cast a shadow over Hong Kong, with the city often becoming a focal point for broader disputes.

Indicators to monitor:
Key indicators to monitor include any new NSL arrests or prosecutions, particularly those involving foreign nationals or activities outside Hong Kong. The rhetoric and actions of US, UK, and EU officials regarding Hong Kong's autonomy and human rights will be crucial in gauging the level of international pressure. The effectiveness and frequency of cybersecurity alerts and incident responses will indicate the city's resilience against digital threats. Changes in cross-border travel policies or infrastructure development will reflect the pace of integration with mainland China. Finally, any further reports or investigations into alleged transnational repression originating from Hong Kong will be important for assessing regional stability and diplomatic fallout.

Strategic recommendations:
Hong Kong should prioritize strengthening its cybersecurity defenses across all government and critical private sectors, moving beyond reactive patching to proactive threat intelligence and resilience building. Continued investment in public awareness campaigns for counter-terrorism and national security is essential for fostering a "whole-of-society" approach to internal security. Diplomatically, Hong Kong authorities should seek to manage international perceptions by enhancing transparency where possible, while Beijing continues to assert its sovereignty. From an economic perspective, leveraging its "superconnector" role through events like APEC, while navigating geopolitical sensitivities, will be key to maintaining its international financial standing.

Sources

• news.gov.hk
• clb.org.hk
• bastillepost.com
• hk.history.museum
• scmp.com
• info.gov.hk
• hkcert.org
• clb.org.hk
• table.media
• scmp.com
• thestar.com.my
• hongkongwatch.org
• scmp.com
• thestandard.com.hk
• info.gov.hk
• scmp.com
• news.gov.hk
• thestandard.com.hk
• hongkongwatch.org
• senate.gov
• dimsumdaily.hk
• thestandard.com.hk
• info.gov.hk
• chinadailyhk.com
• clb.org.hk
• understandingwar.org