Previous Columns

A ColdFusion flaw was exploited within two hours of disclosure while a Windows Defender flaw sat exploitable for a month, proving the fixed-day patch SLA cannot measure a bimodal threat.

Hong Kong's HK$210.2 billion first-half IPO haul reads like a market renaissance, but it is mostly mainland filers racing a China Securities Regulatory Commission deadline before their clearance windows expire.

Regulators are watching AI cyberattacks and AI valuations as separate risks, when the real transmission channel from an AI equity correction into bank balance sheets runs through prime brokerage leverage neither register was built to catch.

CISA's three-day patch order on a new SharePoint flaw looks routine, but the vendor's support cliff nine days later turns it into a capex decision that CFOs are not budgeting for.

Beijing decides which mainland firms get to list in Hong Kong, and Gulf sovereign funds decide which of those get financed. That makes this year's IPO boom look less like a market recovery and more like two state balance sheets taking turns.

Banks just passed a stress test built for 2008 risk while the actual attack clock has gone negative, and the regulator writing the exam knows it.

The Fed just proved every big US bank can survive a rerun of 2008. That says nothing about whether they can survive the $300 billion they've quietly lent out to a shadow banking system the test doesn't even look at.

The Fed's 2026 stress test proves US banks can survive a recession. Hong Kong just admitted that surviving a recession and surviving a cyberattack are not the same test anymore.

Global catastrophe reinsurance just got cheaper for the third renewal running, and that is a warning sign for Asia-Pacific boards, not a reason to relax.

The Fed cleared all 32 big banks against $708bn in losses, but the fastest-growing credit risk on their books never sat the exam.

The Fed's clean bill of health for 32 banks freed up billions in dividends and buybacks, but the test still skips the private-credit exposure the Fed's own examiners spent 2026 quietly investigating.

Hong Kong's record H1 IPO boom was built on deferred price discovery; the AI cohort's July lockup expiry forces the reckoning the cornerstone structure postponed.

The same week a Category 4 typhoon crossed the Philippines, seventy finance officials convened in Bangkok to fix the APAC protection gap; the gap is still nine percent covered.

Hong Kong's IPO boom is real, the numbers are genuine, and the capital doing the work is almost entirely not Western.

Asia's new parametric insurance pilots prove the mechanism works, but at a scale so far below the regional loss total that they risk becoming political cover for a gap that is compounding.

The CSRC's May 23 penalties trap HK$250 billion in a coerced two-year wind-down, and Paul Chan's June 10 posture on capital flows signals structural policy, not a licensing cleanup.

The SFC's new e-distribution rules lower the cost of selling climate products through digital channels, but the instruments that close APAC's protection gap stay outside the framework.

The July 1 catastrophe reinsurance renewal will raise prices on one dollar in three of APAC weather losses; the other two dollars sit outside the room.

The SFC named AI-enabled attack risks for Hong Kong's licensed firms and VASPs this week; the cyber insurance market in APAC lacks products that match what the circular describes.

Three HK capital pitches landed in the same week, aimed at European institutions, Central Asian value chains, and Chinese multinationals, and each describes a different financial center.

Southbound Stock Connect flows into HKEX are read as mainland equity confidence; the capital-account mechanics SAFE administers suggest the buyers are pricing RMB depreciation risk, not H-share valuations.

Hong Kong's family-office count has become the lead metric in every inbound pitch; the SFC's conduct data suggests that registration and deployed capital are pointing in different directions.

Monday's tariff suspension closed HK$18.2 billion of waiting capital in a single HKEX session and moved none of the structural argument that built the dual-primary listing pipeline.

HKEX volumes are recovering, but the capital pools funding that recovery no longer map to the international exchange the listing manual describes.

Western institutional capital now holds a structural minority share of HKEX price-setting power, replaced by Southbound flows operating under fundamentally different mechanics.

Mainland sponsors and international allocators are pricing the same HK IPOs at a spread that twelve months of roadshows have not closed.