Hong Kong Government Issues Eight High-Threat Alerts in a Single Day; Over Ten Taiwan Enterprises Hit by AI Attacks; Mainland Launches First "Zhìsuàn Bǎo" AI Computing Insurance — Daily AI and Cyber Risk Summary

In a nutshell: The Hong Kong government issued eight high-threat vulnerability alerts in a single day, AI-assisted attacks and data leaks continue to heat up across the region, and meanwhile there are new developments in AI risk coverage and governance on both sides of the strait and internationally.

I. Hong Kong GovCERT Issues Eight High-Threat Alerts in a Single Day The Government Computer Emergency Response Team (GovCERT.HK) issued eight security alerts in a single day on 11 November 2026 (references A26-11-14 to A26-11-21), the largest batch this month to date. Three were rated high-threat: an Apple product advisory (A26-11-14), synchronised with HKCERT's 10 November extremely-high-risk advisory, containing a remote code execution vulnerability already exploited in the wild (CVE-2026-111497); Microsoft's November routine update (A26-11-15) involving multiple risk types; and Juniper Networks products (A26-11-16) with proof-of-concept code for multiple vulnerabilities publicly available. The rest involve F5, Firefox, Ivanti, OpenSSL, and Synology, with OpenSSL releasing a new version on 10 November fixing five CVEs. Organisations should schedule patching on a stricter basis. (Source: GovCERT.HK / HKCERT / Hong Kong and Macau Daily Dynamics, 2026-11-11)

II. HKPC and HKCERT Join the Privacy Commissioner to Strengthen SME Data Security The Hong Kong Productivity Council (HKPC) and the Hong Kong Computer Emergency Response Team Coordination Centre (HKCERT) earlier signed a memorandum of understanding with the Office of the Privacy Commissioner for Personal Data and the Hong Kong International Data Privacy Academy to deepen cooperation in personal data privacy, data security, cyber security, and AI privacy protection. The first measure of the cooperation is three free "SME and Non-profit Organisation Data Security" seminars, covering defence against cyber attacks, privacy protection in the AI era, and data breach incident management and response mechanisms, with the first held on 12 November. The Privacy Commissioner's Office also commissioned HKPC to conduct the "Hong Kong AI and Data Privacy Survey 2026", with results expected by year-end. (Source: Hong Kong Business / Hong Kong and Macau Daily Dynamics, 2026-11-11)

III. Over Ten Taiwan Enterprises Hit by AI-Assisted Attacks, Some Traffic Linked to Hong Kong Taiwan's Ministry of Digital Affairs announced investigation results on 11 November 2026, stating that in the recent spate of cyber attacks targeting Taiwanese enterprises and online platforms, nearly half involved artificial intelligence tools, affecting over ten enterprises and platforms and involving over one million pieces of personal data, including names, phones, emails, and order information. Some attack traffic appeared to originate from Hong Kong, though authorities emphasised that IP addresses alone cannot confirm hackers' actual locations. An official noted that some attacks used an automated tool named ARTEX, with AI technology enabling attackers to identify system weaknesses faster. The investigation has not yet found leakage of credit card or payment data. (Source: Taiwan Ministry of Digital Affairs / International Business Times Taiwan, 2026-11-11)

IV. Mainland Launches First AI Computing-Power Insurance "Zhìsuàn Bǎo" On 11 November 2026, the Shenzhen branch of PICC Property and Casualty issued the nation's first "Zhìsuàn Bǎo" insurance product portfolio, providing risk coverage for token-related AI products and services. The portfolio comprises two products — "AI Product Application Expense Loss Insurance" and "Computing Power Centre Operational Period Property Loss Insurance" — the former covering operating losses and customer compensation arising from failures, interruptions, or sub-standard performance of AI large-model or Token invocation services, and the latter covering property losses at computing-power data centres caused by fire, electrical faults, and the like, building an integrated "physical layer + application layer" coverage. This marks the filling of a gap in risk coverage for AI infrastructure. (Source: NetEase / China City Network, 2026-11-11)

V. New International Moves in AI Safety Governance Multiple countries advanced AI risk governance intensively this week: on 10 November the French presidency released an expert committee report recommending stronger regulation of generative AI, including 18 recommendations such as limiting excessive sycophancy mechanisms and pre-launch interdisciplinary risk assessment; the Australian government announced on the same day it would legislate to establish a dedicated regulator imposing mandatory security requirements on frontier AI companies; and on 9 November Paris issued the "Paris Call for AI Safety and Security", signed by eight countries and frontier labs including OpenAI, Anthropic, and Microsoft, committing to establish fail-safe shutdown mechanisms and incident notification. (Source: Xinhua / eyeon.ai, 2026-11-09 to 11-11)

The content of this column is provided for general information and educational purposes only, and does not constitute insurance, legal, or professional advice. Actual coverage is subject to the terms of individual policies.