惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

爱范儿
爱范儿
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
The Hacker News
The Hacker News
N
News and Events Feed by Topic
Simon Willison's Weblog
Simon Willison's Weblog
博客园 - 三生石上(FineUI控件)
V
Vulnerabilities – Threatpost
T
Tenable Blog
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
P
Proofpoint News Feed
Security Latest
Security Latest
博客园 - 【当耐特】
腾讯CDC
The Cloudflare Blog
T
Tailwind CSS Blog
L
LINUX DO - 热门话题
博客园_首页
P
Palo Alto Networks Blog
人人都是产品经理
人人都是产品经理
P
Privacy & Cybersecurity Law Blog
阮一峰的网络日志
阮一峰的网络日志
有赞技术团队
有赞技术团队
AWS News Blog
AWS News Blog
S
Securelist
博客园 - Franky
C
Cyber Attacks, Cyber Crime and Cyber Security
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
WordPress大学
WordPress大学
酷 壳 – CoolShell
酷 壳 – CoolShell
S
Schneier on Security
Apple Machine Learning Research
Apple Machine Learning Research
A
Arctic Wolf
P
Privacy International News Feed
Cisco Talos Blog
Cisco Talos Blog
C
Cybersecurity and Infrastructure Security Agency CISA
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
D
Darknet – Hacking Tools, Hacker News & Cyber Security
H
Heimdal Security Blog
Help Net Security
Help Net Security
博客园 - 叶小钗
月光博客
月光博客
I
Intezer
Cyberwarzone
Cyberwarzone
美团技术团队
C
CXSECURITY Database RSS Feed - CXSecurity.com
宝玉的分享
宝玉的分享
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
K
Kaspersky official blog
Hugging Face - Blog
Hugging Face - Blog
Jina AI
Jina AI

Cyberwarzone

LinkedIn Sued Over Browser Extension Scanning Why Cyberwarfare Uses Ambiguity and Delayed Attribution as Pressure Why Cyberwarfare Pressures Trusted Access and Account Recovery Paths Why Cyberwarfare Keeps Pressuring Recovery Paths and Fallback Systems Why Cyberwarfare Keeps Pressuring Shared Service Providers Why Cyberwarfare Pressures Industry Clusters Why Cyberwarfare Turns Nearby Economies Into Spillover Zones Why Cyberwarfare Forces Firms to Scan Networks Early Why Cyberwarfare Targets Crisis Messaging Systems Why Cyberwarfare Keeps Pressuring Energy Networks Why Cyberwarfare Keeps Pressuring Communications Networks Why Cyberwarfare Keeps Pressuring Shipping and Logistics Networks Why Cyberwarfare Keeps Pressuring Banks and Financial Networks Why Endpoint Management Systems Are Becoming Cyberwarfare Choke Points Why Cyberwarfare Targets Healthcare and Medical Supply Chains Why Cyberwarfare Increasingly Exploits Trusted Civilian Apps Why Cyberwarfare Hits Civilian Companies First Critical Quest KACE SMA RCE (CVE-2025-32975) Under Attack Handala Rebounds After FBI Seizure, Exposing Iran Cyberwar Resilience Top 10 Cyber Escalation Risks Security Leaders Should Understand Top 10 Questions to Ask Before Calling an Incident Cyberwarfare Top 10 Cyber Deterrence Problems Security Leaders Should Understand Top 10 OT and ICS Risks in Modern Cyberwarfare Top 10 Cyberwarfare Doctrine Ideas Security Leaders Should Understand Top 10 Attribution Problems in State-Linked Cyber Operations Iran Cyberwar: Identity Systems Become the Target Iran Cyberwar Shifts to Spillover, Retaliation, and Control Top 10 Critical Infrastructure Sectors Most Exposed in Cyberwarfare Top 10 Below-Threshold Cyber Operations States Use Top 10 Differences Between Cyberwarfare and Cyber Espionage Top 10 Signs a Cyber Campaign Is Pre-Positioning for Future Conflict Top 10 Signs a CVE Needs Clear Closure Criteria Top 10 Signs a CVE Needs Proof of Remediation Top 10 Signs a CVE Needs a Risk Acceptance Review Top 10 Signs a CVE Needs Asset Owner Escalation Top 10 Signs a CVE Needs a Special Maintenance Window Top 10 Signs a CVE Needs Compensating Controls Before You Can Patch Top 10 Signs a CVE Needs a Staged Patch Rollout Top 10 Signs a CVE Is More Dangerous as Part of an Exploit Chain Top 10 CVE Sources Security Teams Should Check After Reading a CVE Top 10 CVE Fields Security Teams Should Review Before Patching Top 10 CVE Items Security Teams Should Patch First in 2026 Trivy Supply Chain Attack Spreads Infostealer, Worm, and Kubernetes Wiper via Docker Hub North Korean Hackers Deploy StoatWaffle Malware via VS Code Projects FBI Seizes MOIS Leak Sites After Handala Attack Hit Hospitals Baghdad to Ras Laffan: Iran-Linked Strikes Widen the Regional War Dutch Police Employee Critical of Iranian Regime Shot in Schoonhoven Lebanon Death Toll Tops 1,000 as Israeli Bombardment Continues Pentagon Seeks $200 Billion for Iran War With No End Date in Sight Trump’s Pearl Harbor Remark Exposes Japan’s Iran War Dilemma Haifa Refinery Hit as Iran Expands Retaliation to Israeli Energy Sites Who Commands Iran Now After Larijani’s Killing? How to Report Remediation Progress to Leadership Which Vulnerability Remediation Metrics Matter Gulf Drug Supply Chains Strain as Hormuz Disruption Spreads LNG Buyers Scramble as Hormuz Disruption Hits Qatari Supply Routes Gulf Importers Reroute Supplies as Hormuz Disruption Spreads How to Run Emergency Change Approval for Security Patches EU Eases Gas Import Rules as Iran Crisis Threatens Hormuz Flows Gulf Producers Turn to Pipelines as Hormuz Shipping Risk Deepens How to Communicate During Emergency Patching Iran Warns Gulf Energy Sites to Evacuate After South Pars Strike Who Owns Vulnerability Remediation? Europe Signals Distance From Trump’s Iran War While Watching Hormuz What to Monitor After Emergency Patching to Catch Incomplete Fixes Gulf States Create Safe Sea Corridor as Hormuz Risk Rises How to Verify a Vulnerability Is Really Remediated EU Sanctions Chinese, Iranian Firms Over Cyberattacks When to Grant a Vulnerability Exception CISA Warns on Microsoft Intune After Stryker Cyberattack How to Validate Vulnerability Exposure Before You Escalate a Patch How to Write a Vulnerability Remediation SLA That Works 5 KEV Lessons That Show How Patch Prioritization Fails How to Build a KEV-Driven Patch Workflow Without Burning Out Your Team Greek Firms Scan Networks as Iran War Raises Cyberattack Risk KEV vs CVSS vs EPSS: Which Signal Should Drive Patch Priority? Top 10 Signs a CVE Needs Emergency Patching Top 10 MDR Tools for 2026: Compare Leading Providers Red Sea Risk Rises as Houthi Shipping Threat Looms Top 10 SOAR Tools for 2026: Compare Leading Platforms Top 10 XDR Tools for 2026: Compare Leading Platforms Hezbollah Readiness Grows as Lebanon Front Heats Up Top 10 EDR Tools for 2026: How to Compare Leading Platforms Top 10 SIEM Tools for 2026: How to Compare the Leading Platforms Airstrikes Target Iran’s Syria Logistics Corridor as Regional Proxy War Expands Drone and Rocket Attacks on U.S. Embassy Mark Sharp Escalation in Baghdad South Pars Gas Field Hit: Iran Warns of Gulf Energy Escalation Service Account Security: How to Control Privilege, Rotation, Ownership, and Trust Paths Incident Response Playbook: How to Triage, Contain, Investigate, and Recover Middle East war disrupts pharma air routes and raises risk of cancer drug shortages in Gulf Cisco Talos links UAT-9244 to TernDoor, PeerTime, and BruteEntry attacks on South American telecoms FortiGate devices exploited to steal service account credentials and breach networks Attack Surface Management: How to Find Exposed Assets, Prioritize Risk, and Reduce Drift CISA adds two actively exploited vulnerabilities to KEV catalog Meta disables 150,000 accounts linked to Southeast Asia scam centers CISA adds five actively exploited vulnerabilities to KEV catalog What Is Zero Trust? A Practical Guide to Identity, Access, and Network Segmentation INTERPOL operation takes down 45,000 malicious IPs and leads to 94 arrests ADNOC loading still halted at Fujairah after drone strike as Iran war disrupts UAE export corridor Apple updates older iPhones and iPads for WebKit flaw exploited in Coruna spyware attacks
Hong Kong Police Can Demand Phone Passwords Under New Security Law
Elles De Yeager · 2026-03-24 · via Cyberwarzone

Elles De Yeager Avatar

·

2–3 minutes

Hong Kong police now possess the legal authority to demand passwords for phones and computers from individuals suspected of violating the territory’s wide-ranging National Security Law (NSL), as reported by BBC News. These new amendments, gazetted on Monday, March 23, 2026, also empower customs officials to seize items deemed to have “seditious intention.”

Refusal to comply with a password demand can result in up to a year in jail and a fine of up to HK$100,000 (approximately $12,700 USD or £9,600 GBP). Individuals found providing false or misleading information could face even harsher penalties, including up to three years in prison.

Context of the National Security Law

The National Security Law was originally imposed on Hong Kong by Beijing in 2020, following extensive pro-democracy protests in 2019. Hong Kong authorities assert that these laws are essential for maintaining stability and order within the territory.

“activities endangering national security can be effectively prevented, suppressed and punished, and at the same time the lawful rights and interests of individuals and organisations are adequately protected,” stated Hong Kong authorities regarding the amendments.

However, critics argue that the NSL is a tool used to suppress dissent and curtail the freedoms previously enjoyed in the autonomous region. The law broadly defines offenses such as secession, subversion, terrorism, and collusion with external forces, and permits certain trials to be held behind closed doors. The city’s leader, John Lee, announced these new amendments without requiring approval from the legislative council.

Impact on Digital Privacy and Dissent

Since the NSL’s introduction, hundreds of protesters, activists, and former opposition lawmakers have been arrested in Hong Kong. These new powers allowing police to demand device passwords significantly escalate the state’s ability to access private digital communications and data, further impacting digital privacy and freedom of expression. This action mirrors concerns seen in other regions, such as when Dutch police have accessed iPhones for surveillance or when spyware has been found on journalists’ iPhones, highlighting a global trend of government and state-backed entities seeking access to personal devices for intelligence gathering, as also seen with groups like APT28 spying on military personnel.

Recent cases highlight the broad application of the NSL and related laws. In February 2026, the father of a pro-democracy activist in exile was jailed for attempting to cash out her insurance policy, under a homegrown law that expands on the NSL. Similarly, media tycoon Jimmy Lai received a 20-year prison sentence after being convicted of foreign collusion and publishing seditious material under the NSL.

Tags

About the Author

Elles De Yeager Avatar

Elles De Yeager

With a keen eye for cyber trends, Elles researches and writes about the technologies, threats, and defenses shaping our connected future.


Continue Reading