appConfigEntityId

bodyType

customContents

entityId

entityUuid

isVideo

articlePageQuery

article

articleSchemaContent

content

hooksArticlePageAdvertisementConfigArticle

hooksArticlePageFloatingButtonConfigArticle

appConfig

filter

json

liveArticle

Kelly Le

Nearly every Hong Kong company in a new survey has been a victim of identity-related breaches such as phishing and deepfake attacks in the past year, according to a new report.
The 2024 Identity Security Threat Landscape Report, from Nasdaq-listed information security company CyberArk, showed that 98 out of 100 Hong Kong companies surveyed admitted to facing such breaches in their systems, compared with 93 per cent globally, underscoring the city’s ongoing vulnerability to such scams. CyberArk surveyed 2,400 companies in total, each with at least 500 employees.
Risks related to identity-related breaches, which use someone else’s identity or authentication to gain access to a system, are increasing along with the adoption of cloud services and artificial intelligence (AI), according to CyberArk.
Phishing attacks – including those that use deepfake technology to imitate a person’s voice, known as vishing – remained the most prevalent, with 96 per cent of surveyed Hong Kong companies saying they were victims of such attacks.
“Organisations in Hong Kong need to adopt a holistic cybersecurity strategy to secure both human and machine identities to effectively defend themselves against cyberattacks,” said Sandy Lau, CyberArk’s district manager for Hong Kong and Macau.

Lau said “inadequate security controls for machine identities” are one particular reason that identity-related threats are so prevalent. Machine identities include specific software and algorithms used for authentication. Usage of machine identities is expected to expand as companies use multiple cloud services that require third and fourth parties to have access to sensitive data, according to Lau.
System breaches can be costly and hard to measure, as some companies may not want to report attacks, particularly those that involve ransomware payments, to avoid public embarrassment or scrutiny.
The official Hong Kong Police Force tally for losses from scams last year came to HK$9 billion (US$1.16 billion) across nearly 39,000 cases.
Deepfakes, which use generative AI to digitally create a person’s likeness, are becoming increasingly hard to tell apart from real people as the technology advances and scammers become more sophisticated.
In January, London-based design and engineering firm Arup lost HK$200 million after one of its employees in Hong Kong transferred the money upon request from a deepfake of the company’s chief financial officer in a video meeting.
Still, 60 per cent of the surveyed Hong Kong companies told CyberArk that they are confident their employees can identify deepfakes of their organisational leadership, while 97 per cent expressed concern that AI could have a negative impact on cybersecurity.
The growing adoption of AI also brings other challenges. Compromised AI models can lead to data leaks and generative AI is contributing to malware and phishing attacks, according to Billy Chuang, CyberArk’s solution engineering director.
By pouring resources into chasing the latest tech trends such as AI, Chuang said companies risk accruing “cyber debt” – a term referring to the compounding risks resulting from neglecting security updates like software patches.
“It’s about raising awareness of identity security,” Chuang said. While Hong Kong companies did well in the past, education on identity security awareness is never enough, he added.


Google says Gemini AI model breached real systems in security test

South Korea wants free ‘AI for All’. Is society ready for it?

Scott Bessent confirms weekend meeting with He Lifeng days before Xi’s US visit

Chinese researchers question calls to slow down AI development as US tech leaders warn of catastrophe

Cybersecurity

Nearly all Hong Kong companies vulnerable to identity, deepfake attacks, survey finds

The rise of AI-aided identity-related attacks such as deepfakes are increasing risks to businesses worldwide, according to a new CyberArk report. Photo: Shutterstock

CyberArk’s solution engineering director Billy Chuang (left) and district manager for Hong Kong and Macau Sandy Lau presented the company’s latest findings from a business survey regarding identity-related breaches on July 16, 2024. Photo: CyberArk

Elon Musk deepfake crypto scam highlights risks to Hong Kong as AI-related fraud rises

Scammers are using AI-altered videos of Elon Musk to tout a fraudulent cryptocurrency investment platform called Quantum AI, which the SFC recently warned about. Photo: Getty Images via AFP

As the use of AI in digital fraud has risen, Hong Kong has proven particularly susceptible, with the city seeing a 3.8 per cent increase in fintech industry fraud in the first quarter, according to Sumsub. Photo: Shutterstock

One website using the Quantum AI scam describes itself as a “groundbreaking platform” conceptualised by Tesla CEO Elon Musk. Photo: Screengrab 

Hong Kong firms ‘cautious’ to deploy AI amid challenges in data acquisition, survey says

Overcoming challenges related to data quality and availability is “essential for the successful adoption of AI” by Hong Kong firms, according to the recent survey by consultancy fifty-five. Photo: Shutterstock

Artificial intelligence in Hong Kong enterprises has been adopted in chatbots and customer services. Photo: Shutterstock

Hong Kong enterprises have a lot of catching up to do in terms of adopting artificial intelligence to transform the local economy. Photo: Shutterstock

Chinese tech companies face increased EU compliance costs amid bloc’s new AI rules

Some Chinese artificial intelligence firms expect to spend more time and money to comply with the European Union’s new rules. Photo: Shutterstock

A catchy artificial intelligence-related slogan on display at Google’s booth at the Hannover Messe 2024 trade fair in Germany on April 22, 2024. Photo: Bloomberg

The European Union took an early lead in the global race to draw up artificial intelligence guardrails. Photo: Shutterstock

The European Union’s comprehensive artificial intelligence rules, which will take effect on August 1, is poised to serve as a blueprint for the world amid a push by a growing number of governments to regulate the technology. Photo: Shutterstock

Hong Kong start-ups shine at China’s largest AI show amid city’s drive for Asian tech hub status

Visitors touch the humanoid robot hands on display at a booth during the World Artificial Intelligence Conference (WAIC) in Shanghai China, July 4, 2024. Photo: AP

An AI sign is seen at the World Artificial Intelligence Conference in Shanghai, China July 6, 2023. Photo: Reuters

Hong Kong Science and Technology Parks CEO Albert Wong Hak-keung at the Hong Kong pavilion during the Leap technology conference in Riyadh, Saudi Arabia, March 4, 2024. Photo: Matt Haldane

Hong Kong employee tricked into paying out HK$4 million after video call with deepfake ‘CFO’ of UK multinational firm

A UK-based multinational firm has fallen victim to a deepfake scam. Photo: Shutterstock

Scammer impersonating the company’s supervisor requested a zoom call with the Hong Kong employee. Photo: AFP

Police have advised people to contact relevant parties before proceeding with transfers. Photo: Sun Yeung

Tech

Tech Trends

News

Hong Kong

Law and Crime

Business

China Business

Out of 100 Hong Kong companies surveyed by CyberArk, 98 said they were victims of identity-related breaches, with AI an increasingly important contributor


Out of 100 Hong Kong companies surveyed by CyberArk, 98 said they were victims of identity-related breaches, with AI an increasingly important contributor.


Hong Kong economy

Artificial intelligence (AI)

Technology

Nearly all Hong Kong companies vulnerable to identity, deepfake attacks, survey finds

.css-1mniedq{color:inherit;font-weight:inherit;font-size:inherit;font-family:inherit;line-height:inherit;}Out of 100 Hong Kong companies surveyed by CyberArk, 98 said they were victims of identity-related breaches, with AI an increasingly important contributor

Out of 100 Hong Kong companies surveyed by CyberArk, 98 said they were victims of identity-related breaches, with AI an increasingly important contributor