Comparison Overview

Hong Kong Exchanges and Clearing Limited (HKEX)

VS

Navy Federal Credit Union

Hong Kong Exchanges and Clearing Limited (HKEX)

8/F, Two Exchange Square,, Hong Kong, 000000, HK
Last Update: 2025-12-09
View Profile
Between 800 and 849
http://www.hkex.com.hk

HKEX Group is a global exchange group, operating dynamic and integrated financial markets in Asia and Europe. From our home in the financial hub of Hong Kong and an additional base in London, we provide world-class facilities for trading and clearing securities and derivatives in Equities, Commodities, Fixed Income and Currency. Uniquely positioned at the intersection of Chinese and international capital flows, Hong Kong has long been Connecting China with the World. With the accelerated opening-up of China’s capital markets, HKEX continues to be at the forefront of this historic transition, which we believe will Shape the Global Market Landscape.

NAICS: 52
NAICS Definition: Finance and Insurance
Employees: 1,905
Subsidiaries: 1
12-month incidents
0
Known data breaches
0
Attack type number
1
View Profile

Navy Federal Credit Union

820 Follin Lane SE, None, Vienna, VA, US, 22180
Last Update: 2025-12-09
Between 700 and 749
http://www.navyfederal.org

Navy Federal is the world’s largest credit union, with more than 14 million members, $180 billion+ in assets and 24,000+ employees. Throughout campuses in Vienna, VA Pensacola, FL and Winchester, VA, as well as more than 360 branches, we serve the Armed Forces, Department of Defense, Veterans and their families with world-class financial products and services. Navy Federal provides much more than a job. We provide a meaningful career experience, including a culture that is energized, engaged and committed; and fierce appreciation for our teams, who are rewarded with highly competitive pay and generous benefits and perks. Our approach to careers is simple yet powerful: Make our mission your passion. Federally insured by NCUA. Equal opportunity employer. Android™ is a trademark of Google, Inc. iPhone® is a registered trademark of Apple, Inc. iPad® is a registered trademark of Apple, Inc. App Store(SM) is a service mark of Apple, Inc. Message and data rates may apply. FORTUNE and 100 Best Companies to Work For are registered trademarks of Time Inc., and are used under license. FORTUNE and Time Inc., are not affiliated with, and do not endorse products or services of, Navy Federal Credit Union. For more info, visit navyfederal.org. Images used for representational purposes only; do not imply government endorsement. Equal Housing Lender Equal Opportunity Employer, including disability/vets

NAICS: 52
NAICS Definition: Finance and Insurance
Employees: 23,853
Subsidiaries: 1
12-month incidents
1
Known data breaches
1
Attack type number
1

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/hkex.jpeg
Hong Kong Exchanges and Clearing Limited (HKEX)
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/navy-federal-credit-union.jpeg
Navy Federal Credit Union
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Hong Kong Exchanges and Clearing Limited (HKEX)
100%
Compliance Rate
0/4 Standards Verified
Navy Federal Credit Union
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Financial Services Industry Average (This Year)

No incidents recorded for Hong Kong Exchanges and Clearing Limited (HKEX) in 2025.

Incidents vs Financial Services Industry Average (This Year)

Navy Federal Credit Union has 31.58% more incidents than the average of same-industry companies with at least one recorded incident.

Incident History — Hong Kong Exchanges and Clearing Limited (HKEX) (X = Date, Y = Severity)

Hong Kong Exchanges and Clearing Limited (HKEX) cyber incidents detection timeline including parent company and subsidiaries

Incident History — Navy Federal Credit Union (X = Date, Y = Severity)

Navy Federal Credit Union cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/hkex.jpeg
Hong Kong Exchanges and Clearing Limited (HKEX)
Incidents

Date Detected: 6/2011
Type:Cyber Attack
Attack Vector: Website Hacking, Software Bug
Blog: Blog
https://images.rankiteo.com/companyimages/navy-federal-credit-union.jpeg
Navy Federal Credit Union
Incidents

FAQ

Hong Kong Exchanges and Clearing Limited (HKEX) company demonstrates a stronger AI Cybersecurity Score compared to Navy Federal Credit Union company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Hong Kong Exchanges and Clearing Limited (HKEX) and Navy Federal Credit Union have experienced a similar number of publicly disclosed cyber incidents.

In the current year, Navy Federal Credit Union company has reported more cyber incidents than Hong Kong Exchanges and Clearing Limited (HKEX) company.

Neither Navy Federal Credit Union company nor Hong Kong Exchanges and Clearing Limited (HKEX) company has reported experiencing a ransomware attack publicly.

Navy Federal Credit Union company has disclosed at least one data breach, while Hong Kong Exchanges and Clearing Limited (HKEX) company has not reported such incidents publicly.

Hong Kong Exchanges and Clearing Limited (HKEX) company has reported targeted cyberattacks, while Navy Federal Credit Union company has not reported such incidents publicly.

Neither Hong Kong Exchanges and Clearing Limited (HKEX) company nor Navy Federal Credit Union company has reported experiencing or disclosing vulnerabilities publicly.

Neither Hong Kong Exchanges and Clearing Limited (HKEX) nor Navy Federal Credit Union holds any compliance certifications.

Neither company holds any compliance certifications.

Both Navy Federal Credit Union company and Hong Kong Exchanges and Clearing Limited (HKEX) company have a similar number of subsidiaries worldwide.

Navy Federal Credit Union company employs more people globally than Hong Kong Exchanges and Clearing Limited (HKEX) company, reflecting its scale as a Financial Services.

Neither Hong Kong Exchanges and Clearing Limited (HKEX) nor Navy Federal Credit Union holds SOC 2 Type 1 certification.

Neither Hong Kong Exchanges and Clearing Limited (HKEX) nor Navy Federal Credit Union holds SOC 2 Type 2 certification.

Neither Hong Kong Exchanges and Clearing Limited (HKEX) nor Navy Federal Credit Union holds ISO 27001 certification.

Neither Hong Kong Exchanges and Clearing Limited (HKEX) nor Navy Federal Credit Union holds PCI DSS certification.

Neither Hong Kong Exchanges and Clearing Limited (HKEX) nor Navy Federal Credit Union holds HIPAA certification.

Neither Hong Kong Exchanges and Clearing Limited (HKEX) nor Navy Federal Credit Union holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Versions 3.5.4 and below contain a Stored Cross-Site Scripting (XSS) vulnerability in the /WeGIA/html/geral/configurar_senhas.php endpoint. The application does not sanitize user-controlled data before rendering it inside the employee selection dropdown. The application retrieves employee names from the database and injects them directly into HTML <option> elements without proper escaping. This issue is fixed in version 3.5.5.

Published
Date
2025-12-09
Updated
Date
2025-12-09
Risk Information
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
References
Description

ZITADEL is an open-source identity infrastructure tool. Versions 4.0.0-rc.1 through 4.7.0 are vulnerable to DOM-Based XSS through the Zitadel V2 logout endpoint. The /logout endpoint insecurely routes to a value that is supplied in the post_logout_redirect GET parameter. As a result, unauthenticated remote attacker can execute malicious JS code on Zitadel users’ browsers. To carry out an attack, multiple user sessions need to be active in the same browser, however, account takeover is mitigated when using Multi-Factor Authentication (MFA) or Passwordless authentication. This issue is fixed in version 4.7.1.

Published
Date
2025-12-09
Updated
Date
2025-12-09
Risk Information
cvss3
Base: 8.0
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N
References
Description

ZITADEL is an open-source identity infrastructure tool. Versions 4.7.0 and below are vulnerable to an unauthenticated, full-read SSRF vulnerability. The ZITADEL Login UI (V2) treats the x-zitadel-forward-host header as a trusted fallback for all deployments, including self-hosted instances. This allows an unauthenticated attacker to force the server to make HTTP requests to arbitrary domains, such as internal addresses, and read the responses, enabling data exfiltration and bypassing network-segmentation controls. This issue is fixed in version 4.7.1.

Published
Date
2025-12-09
Updated
Date
2025-12-09
Risk Information
cvss3
Base: 9.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
References
Description

NiceGUI is a Python-based UI framework. Versions 3.3.1 and below are vulnerable to directory traversal through the App.add_media_files() function, which allows a remote attacker to read arbitrary files on the server filesystem. This issue is fixed in version 3.4.0.

Published
Date
2025-12-09
Updated
Date
2025-12-09
Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
References
Description

FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions are vulnerable to authentication bypass when the authentication type is set to "webserver." When providing an Authorization header with an arbitrary value, a session is associated with the target user regardless of valid credentials. This issue is fixed in versions 16.0.44 and 17.0.23.

Published
Date
2025-12-09
Updated
Date
2025-12-09
Risk Information
cvss4
Base: 9.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References