AI-written edition with a fictional anchor
Here is today's evening report. Thu, Oct 22, 18:14 HKT
13:02 HKT Palo Alto GlobalProtect attacks send banks back to June for access records Rachel Lam explains why investigating earlier GlobalProtect access at Hong Kong banks depends on evidence a repair cannot bring back. read more
Rachel Lam, FINANCE & RISK
AI-authored analysis · Fictional correspondent, real sourcesThe bank investigator trying to reconstruct June access through Palo Alto GlobalProtect needs records that may already be gone, as Kai Tanner’s filing today explains (installing a fix cannot recover VPN session records that were never retained).
Ransomware groups have exploited CVE-2026-0257 since June, according to reporting published on October 21. The flaw lets attackers open VPN sessions and enter corporate networks. Palo Alto Networks’ Unit 42 names Qilin and Inc among the ransomware operators exploiting it.
So the investigator’s starting point is the surviving record: accounts used, connection times and source addresses. A connection log can establish access. It cannot, by itself, establish everything that followed.
For a Hong Kong bank, that puts the issue within the institution-wide technology risk framework covered by HKMA’s SPM TM-G-1. The Banking Supervision Department, including its operational and technology risk division, supervises that territory. The supplied scope establishes no particular VPN retention period; it covers governance, continuous technology risk management and sound IT controls.
The October 21 warning gives an investigation a date to work back from. June is where the reported exploitation begins. Where the intervening records were never retained, the bank cannot recover that access history by repairing the entry point.
Sources13:05 HKT Cashman keeps Yankees job and will evaluate players blamed for playoff exit Dev Chatterjee reports on the Yankees keeping Brian Cashman, who will evaluate the players his owner blames for October. read more
Dev Chatterjee, SPORTS
AI-authored analysis · Fictional correspondent, real sourcesHal Steinbrenner has handed Brian Cashman another contract and the Yankees’ players the bill for October. An early playoff exit required an explanation. The owner supplied one that came with job security for the general manager.
Cashman has held the post since 1998. That is enough continuity to make a disappointing season feel like a temporary interruption in the general manager’s employment and a much more consequential interruption in somebody else’s.
Players have to perform. A general manager also chooses the players. Steinbrenner’s decision preserves the man assembling the roster while locating the failure among the men assembled. Cashman gets to help decide which of the people blamed come back.
Across baseball, the Dodgers received a more tangible kind of reassurance. Shohei Ohtani needs no surgery for the ailments he managed this past season, according to baseball operations president Andrew Friedman. Our October 4 filing had Ohtani managing a bad knee and biceps. That makes Wednesday’s medical update meaningful relief for a player whose availability changes what Los Angeles can put on the field.
The Yankees have delivered their own clean bill of health, addressed to the front office.
Their offseason now belongs to a retained general manager evaluating players his owner has publicly blamed. Cashman will help write the next roster. The clubhouse will wait to discover whose name disappears.
Sources
Continue reading
Alibaba Shares Fall After Chinese Regulators Summon E-commerce Operators
A regulatory summons deepened Hong Kong's technology selloff, with confidence already weakened by Chinese consumption and doubts about returns on artificial intelligence.
Alibaba shares suffered their steepest decline in two months after Chinese regulators summoned e-commerce operators, Bloomberg reports, dragging Hong Kong technology stocks lower. The summons gave investors a fresh reason to sell into a market already struggling to sustain confidence. The immediate event was regulatory. The broader difficulty is that investors are questioning several of the assumptions that had supported Chinese equities, including the prospect that policy would help restore their appeal.
Start with the distance already travelled. Chinese equities have lost $2.4 trillion since their May peak and are approaching a bear market, according to Bloomberg. Weak consumption has undermined confidence, alongside doubts about whether investment in artificial intelligence will produce sufficient profits. Those are distinct problems for companies and their shareholders: customers spending less affects business today; uncertainty about AI profitability affects what investors are prepared to pay for anticipated earnings. A promise of future growth has become a harder sell when the present is unconvincing.
Then came the regulatory summons and Alibaba's sharp decline. The supplied reporting does not establish what regulators demanded, so the share-price response cannot be treated as a calculation of a known financial penalty or restriction. It does establish that another intervention arrived while hopes of a policy rescue were fading. Investors hoping for reassurance instead received news that e-commerce operators had been summoned. Official attention is not always the shareholder benefit the phrase might suggest.
The significance extends beyond one company's difficult trading session. Alibaba's fall pulled Hong Kong technology stocks lower against a much larger retreat in Chinese equities. Today's selling shows how little reassurance the market currently takes from the prospect of official action. Consumption, AI profits and regulatory decisions each affect the investment case differently. Together, they have left investors less willing to pay today for the growth they once expected tomorrow.
All episodes and how to subscribe →