Hong Kong Security Report — November 02, 2026

Security analysis based on open-source intelligence and web research. Period: October 26 — November 02, 2026.

Executive Summary

Hong Kong's security landscape from October 26 to November 02, 2026, was primarily characterized by intensified efforts in cybersecurity resilience and counter-terrorism awareness. A major three-day Cybersecurity Attack and Defence Drill successfully concluded, involving both public and private sectors, aimed at bolstering digital defenses against evolving threats. Concurrently, the city grappled with a significant cybersecurity breach affecting Cathay Pacific, highlighting the persistent and global nature of cyber risks. Amidst these internal security focuses, Hong Kong hosted and prepared for high-profile international financial summits, necessitating extensive security deployments and underscoring the city's role as a critical global financial hub despite ongoing geopolitical considerations. Law enforcement also maintained vigilance against traditional threats, with notable successes in maritime smuggling and drug trafficking interdictions.

Key Security Developments

• Cybersecurity Attack and Defence Drill 2026 Concludes
  The Hong Kong Cybersecurity Attack and Defence Drill 2026, a rigorous 60-hour exercise, successfully concluded on October 31, 2026, after commencing on October 29. Spearheaded by the Digital Policy Office (DPO), it involved 51 defending "Blue Teams" from 28 government departments, 23 public organizations, and newly included private enterprises, against 23 "Red Teams" of cybersecurity professionals from Hong Kong and mainland China. The drill aimed to identify system vulnerabilities and enhance defense mechanisms and incident response capabilities through practical combat scenarios. This expanded scale and cross-sector collaboration underscore Hong Kong's commitment to strengthening its overall cybersecurity protection and resilience.

• Cathay Pacific Suffers Data Breach
  On October 30, 2026, Hong Kong's flag carrier, Cathay Pacific, disclosed a cybersecurity breach at an external supplier that compromised approximately 53,000 flight booking records. This incident was part of a broader "Black October" wave of severe cyberattacks that impacted global institutions, including significant financial losses in the cryptocurrency sector and exposure of personal information worldwide. The breach highlights the pervasive nature of supply chain vulnerabilities and the ongoing threat to critical infrastructure and personal data.

• Urgent Alerts on Critical PHP Vulnerabilities
  The Hong Kong Computer Emergency Response Team Coordination Centre (HKCERT) issued an urgent reminder to businesses and organizations to apply emergency security updates for two critical PHP vulnerabilities, collectively known as "PHP2Shell" (CVE-2026-109618 and CVE-2026-109619). These vulnerabilities could allow remote attackers to execute unauthorized code on affected PHP systems, necessitating immediate patching. This alert emphasizes the continuous need for vigilance and timely patching in the face of newly discovered software flaws.

• Warnings Against Fraudulent Financial Activities
  The Hong Kong Monetary Authority (HKMA) alerted the public to various fraudulent activities, including deceptive websites, internet banking login screens, and phishing emails. Hong Kong Interbank Clearing Limited (HKICL) also issued an alert regarding a fraudulent website on October 20, 2026. These ongoing warnings highlight the persistent threat of financial scams targeting individuals and institutions within the digital realm.

• Counter-Terrorism Education Thematic Exhibition Launched
  On October 24, 2026, the Inter-departmental Counter Terrorism Unit (ICTU), co-organized by the National Security Department of the Hong Kong Police Force, launched a Counter Terrorism Education Thematic Exhibition at the Hong Kong Museum of History in Tsim Sha Tsui. The exhibition, which runs until March 1, 2027, aims to enhance public awareness of terrorism, the global counter-terrorism landscape, and Hong Kong's strategies, encouraging citizens to adopt a "greater vigilance means lower risk" mindset.

• Extensive Security for APEC Finance Ministers' Meeting
  Although held just prior to the reporting period (October 20-21, 2026), the APEC Finance Ministers' Meeting in Hong Kong necessitated an extensive land, sea, and air defense deployment around the Hong Kong Convention and Exhibition Centre in Wan Chai. This included a temporary restricted flying zone extending 3km from the venue to prohibit unauthorized small unmanned aircraft. The security measures underscore the high-level threat assessment and preparedness for major international events hosted in the city.

• Significant Maritime Smuggling Cases Interdicted
  Hong Kong Customs detected two suspected smuggling cases involving ocean-going vessels in October, seizing goods with a total estimated market value of about $26 million. The smuggled items included over 8,000 electronic and household products, and more than 7,000 used computers, destined for Australia and India. These operations highlight Customs' ongoing efforts to combat sea smuggling through intelligence analysis and risk assessment.

• Drug Trafficking Arrest at Hong Kong International Airport
  On October 31, 2026, Hong Kong Customs arrested a 22-year-old Filipino female passenger arriving from Phnom Penh, Cambodia, at Hong Kong International Airport. Officers seized approximately 6 kilograms of suspected cocaine, with an estimated market value of about $3.6 million, found inside her check-in suitcase. This arrest demonstrates continued vigilance against international drug trafficking routes utilizing Hong Kong as a transit point.

Geopolitical Impact and Regional Dynamics

Hong Kong's recent developments are intricately linked to broader geopolitical currents and regional dynamics, particularly its role as an international financial and trade hub. The hosting of the APEC Finance Ministers' Meeting (October 20-21, 2026) and the upcoming Global Financial Leaders' Investment Summit (November 2-3, 2026) served as crucial platforms for Hong Kong to assert its economic resilience and "super-connector" status amidst global uncertainties. These events provided opportunities for dialogue on macroeconomic outlooks, digital infrastructure financing, and financial inclusion, with Hong Kong leveraging its unique advantages under the "one country, two systems" principle to connect capital, technology, and projects across the region.

The consensus reached between China and the United States on strategic stability in early October 2026 is viewed as a significant anchor for Hong Kong's economic future. This stability is expected to dispel anxiety among international investors and narrow the window for external actors to disrupt Hong Kong's development by interfering in its internal affairs. Financial Secretary Paul Chan Mo-po emphasized that geopolitical restructuring is not a threat but a catalyst for Hong Kong's evolution, enhancing its value as a "super-connector" as global supply chains become more regionalized.

While no direct military or defense policy shifts for Hong Kong were reported, the broader regional context, including PRC military activities in the South China Sea and Taiwan Strait, continues to shape the strategic environment. Hong Kong's focus remains on maintaining internal stability and economic openness, positioning itself as a reliable partner in regional trade and finance. The upcoming Hong Kong Maritime Week (November 15-21, 2026) will also address maritime corridor security and supply chain resilience, further highlighting the city's engagement with regional security concerns from an economic perspective.

Military and Defense Analysis

Hong Kong, as a Special Administrative Region of China, does not possess its own independent military forces. Its defense is the responsibility of the People's Liberation Army (PLA) Garrison in Hong Kong, while internal security is managed by the Hong Kong Police Force and other law enforcement agencies like Customs. Therefore, a traditional military analysis focusing on force posture, modernization programs, or defense spending trends for Hong Kong itself is not applicable.

Instead, the period from October 26 to November 02, 2026, showcased the capabilities and focus of Hong Kong's internal security apparatus. The successful conclusion of the Cybersecurity Attack and Defence Drill 2026 demonstrated a significant investment in enhancing digital resilience across government and critical private sectors. This large-scale exercise, involving both local and mainland Chinese cybersecurity professionals, indicates a strategic emphasis on developing robust cyber defense mechanisms and incident response capabilities. The drill's practical combat scenarios and expanded participation underscore a proactive approach to modern security threats.

Furthermore, the extensive security deployments by the Police and Fire Services for the APEC Finance Ministers' Meeting, including land, sea, and air measures and drone restrictions, highlight the high level of preparedness and coordination among law enforcement agencies for major international events. The launch of the Counter Terrorism Education Thematic Exhibition also reflects a continued focus on public engagement and preparedness against potential terrorist threats, emphasizing prevention, preparedness, response, and recovery. These initiatives, coupled with ongoing efforts by Hong Kong Customs against smuggling and drug trafficking, demonstrate a comprehensive approach to internal security, adapting to both conventional and evolving threats in the digital and physical domains.

Outlook and Forecast

Short-term trends (1-3 months): Hong Kong is expected to maintain a heightened focus on cybersecurity resilience and counter-terrorism preparedness. The successful conclusion of the Cybersecurity Attack and Defence Drill will likely lead to further implementation of identified improvements and continued collaboration between public and private sectors in digital defense. The ongoing Counter Terrorism Education Thematic Exhibition will continue to raise public awareness and reinforce the "greater vigilance means lower risk" message. The city will also be preparing for and hosting other significant international events, such as the Global Financial Leaders' Investment Summit (November 2-3, 2026) and Hong Kong FinTech Week (November 2-6, 2026), which will necessitate sustained high-level security measures.

Critical flashpoints and risk areas: The primary flashpoints remain in the cyber domain, as evidenced by the Cathay Pacific data breach and persistent warnings about critical vulnerabilities and fraudulent activities. The increasing sophistication of AI-related attacks and supply chain risks, as highlighted in the "Hong Kong Cybersecurity Outlook 2026" earlier in the year, will continue to pose significant challenges. While no immediate military threats to Hong Kong were reported, regional geopolitical tensions, particularly concerning the Taiwan Strait and South China Sea, could indirectly impact Hong Kong's economic stability and international standing. The ongoing efforts against maritime smuggling and drug trafficking indicate persistent challenges in border and maritime security.

Indicators to monitor: Key indicators to monitor include the frequency and impact of reported cyberattacks and data breaches, the effectiveness of implemented cybersecurity patches and defense mechanisms, and public engagement with counter-terrorism initiatives. The outcomes and discussions from international financial summits will provide insights into global investor confidence and Hong Kong's perceived stability amidst geopolitical shifts. Furthermore, any changes in regional military postures or diplomatic rhetoric concerning China and its neighbors will be crucial to observe for potential indirect impacts on Hong Kong's strategic environment.

Strategic recommendations: Hong Kong should continue to invest heavily in advanced cybersecurity infrastructure and talent development, fostering deeper public-private partnerships to share threat intelligence and best practices. Proactive and adaptive counter-terrorism strategies, including community engagement and inter-agency drills, are essential. Leveraging its unique position as a "super-connector," Hong Kong should continue to promote regional economic cooperation and stability, thereby mitigating the impact of broader geopolitical frictions. Enhancing maritime and border surveillance technologies and intelligence-sharing capabilities will also be vital in combating illicit activities.

Sources

• info.gov.hk
• thestandard.com.hk
• bastillepost.com
• opengovasia.com
• chinadailyhk.com
• bastillepost.com
• thestandard.com.hk
• scmp.com
• cybersecurity.hk
• bastillepost.com
• news.gov.hk
• info.gov.hk
• thestandard.com.hk
• info.gov.hk
• scmp.com
• chinadailyhk.com
• thestandard.com.hk
• hkma.gov.hk
• scmp.com
• news.gov.hk
• chinadailyhk.com
• understandingwar.org
• aei.org
• globalmaritimehub.com
• dnv.com
• pressofasia.com
• hkpc.org