AI-driven attack methods are evolving too quickly; licensed institutions must strengthen vulnerability management and incident response, as client asset security cannot rely on luck.

The Hong Kong Securities and Futures Commission issued a circular requiring licensed institutions to strengthen cybersecurity to address new AI-driven threats, especially online brokerage firms and virtual asset trading platforms, implement robust measures and update them promptly, protect client information and assets, and prevent unauthorized access and misappropriation. The circular lists areas for review and enhancement: patching and vulnerability management, detection and monitoring, incident response and recovery, ensuring the framework operates effectively.