Three-Day Hong Kong Cybersecurity Exercise Concludes, Findings to Guide Defense Improvements
Bastillepost · 3 SOURCES1 day ago5 MIN
Summary
The three-day, 60-hour "Hong Kong Cybersecurity Attack-Defense Exercise 2026" (以攻築防2026) concluded on Saturday night with all participating systems and services maintaining normal operations throughout. Organized by the Digital Office in collaboration with the Security Bureau and Police Force, this year's exercise expanded significantly by incorporating private sector designated IT systems for the first time .
Key Points
- The exercise employed a "real troops, real networks, real combat" approach, simulating authentic cyber threat scenarios to identify system vulnerabilities
- 51 defending teams participated, covering 28 government departments, 23 public institutions, and private sector designated IT systems for the first time
- 23 attacking teams conducted offensive operations, comprising 15 cybersecurity firms from Hong Kong and the mainland, 4 local university representatives, 3 teams recommended by the Guangdong Internet Information Office, and 1 team from the Digital Office
- The exercise was structured as red team versus blue team combat, testing participants' defensive deployments and response capabilities
- A comprehensive report will be provided to participating government departments, public institutions, and private enterprises for follow-up actions
Why It Matters
By including private sector IT systems alongside government and public institution networks, this year's exercise acknowledges that cyber threats increasingly transcend organizational boundaries, requiring coordinated defense across Hong Kong's entire digital ecosystem . The findings and recommendations from the exercise report will guide participating organizations in strengthening their cybersecurity resilience against sophisticated attacks.
By including private sector IT systems alongside government and public institution networks, this year's exercise acknowledges that cyber threats increasingly transcend organizational boundaries, requiring coordinated defense across Hong Kong's entire digital ecosystem . The findings and recommendations from the exercise report will guide participating organizations in strengthening their cybersecurity resilience against sophisticated attacks.