Police Reveal First 9 Months of 2026 "Operation Cyber Sweep"; HKCERT Issues Multiple Vulnerability Alerts; ARTEX Backdoor Linked to 17 Hong Kong Hosts — Daily AI and Cyber Risk Summary

In a nutshell: The Hong Kong Police unveiled the results of the first nine months of its 2026 "Operation Cyber Sweep", clearing over 63,000 online threats; HKCERT issued multiple vulnerability alerts on the same day, and the backdoor incident involving the open-source AI attack tool ARTEX involved 17 Hong Kong hosts — signalling that AI-driven risk is closing in on local networks.

The Hong Kong Police unveiled the first nine months of its 2026 "Operation Cyber Sweep" (Hong Kong Commercial Daily, Sing Tao Daily, 2026-11-09): The Cyber Security and Technology Crime Bureau reported 21,573 technology crime cases in the first nine months of the year (down 11.5% year-on-year), with losses of about HK$3.897 billion (down 15.1%), 80% of which were online fraud. Cyber threat intelligence targeting Hong Kong reached 1.3 million items, up 32% year-on-year; phishing accounted for 27.6% and reconnaissance activity 25.3%. Ransomware cases rose 17.6% to 40, while system intrusion cases fell 21.6% to 29. Using AI technology alongside INTERPOL, the police proactively detected and removed over 63,000 online threats, took down over 50,000 malicious websites, and helped remediate over 44,000 high-risk vulnerabilities (of which 37,950 were related to the Remote Desktop Protocol).

HKCERT Issued Multiple Security Advisories (Hong Kong Computer Emergency Response Team Coordination Centre, 2026-11-09): On 9 November, HKCERT released multiple vulnerability alerts covering multiple ChromeOS vulnerabilities, a Veeam product denial-of-service vulnerability, multiple Microsoft Edge vulnerabilities, multiple SonicWall SonicOS vulnerabilities, and a ModSecurity security-restriction-bypass vulnerability (a public proof-of-concept is already available). Remote attackers could exploit these to trigger data tampering, sensitive information leakage, or denial of service, and organisations using the affected products should install patches as soon as possible.

ARTEX Backdoor Linked to 17 Hong Kong Hosts (Cybernoz / The Hacker News citing CERT-In, 2026-11-04): India's Computer Emergency Response Team (CERT-In) flagged an incident related to AI-driven attacks: a Docker image of the open-source AI penetration-testing tool ARTEX had been planted with a backdoor, exposing 62 consoles on the internet between 2 and 4 November (26 in the US, 17 in Hong Kong, 7 in China), through which attackers could obtain an unauthenticated root shell. As of 4 November, a total of 1,645 hosts had publicly served ARTEX consoles.

Mainland China's AI Application Liability Insurance Completed Underwriting and Issued Policy (The Paper, 2026-11-09): The China Academy of Information and Communications Technology, together with PICC Property and Casualty Company, established a three-party collaborative framework of "technical assessment — insurance underwriting — reinsurance dispersion". The report said that since September this year, the two parties have run a pre-policy end-to-end process for an enterprise's agent-based "digital employee" product, and this business has recently completed underwriting and policy issuance, marking AI risk moving from "measurable" to "insurable".

The Global Cyber Insurance Market Continues to Scale Up (Economic Times, in-surely citing PropertyCasualty360, 2026-11): Large Indian financial institutions are expanding cyber insurance coverage amid rising cyberattack frequency and increasing business-interruption costs, with cyber risk now viewed as a board-level risk. Industry analysis noted that cyber insurance loss ratios exceeded 75% in early 2026, prompting underwriters to launch dedicated endorsements targeting AI liability and deepfake fraud, though most policy wordings have yet to make substantial modifications for AI risk.

The content of this column is provided for general information and educational purposes only, and does not constitute insurance, legal, or professional advice. Actual coverage is subject to the terms of individual policies.