Comparison Overview
Zijin Mining Group
Zijin Mining Group
38/F, Tower B, AVIC ZIJIN PLAZA, 1811 Huandao East Road, Siming District, Xiamen, 361008, PRC, Siming District, Xiamen, Fujian, CN, 361016
Last Update: 07/09/2026
Zijin Mining Group (紫金矿业集团) is an international mining company that currently runs various subsidiaries in 18 countries in Asia, Africa, Europe, South America, and Oceania. Zijin Mining ranks No.251 in the 2025 Forbes Global 2000 list, No.4 among metals miners, and No.1...
Glencore
Baarermattstrasse 3, Baar, 6340, CH
Last Update: 20/09/2026
Glencore is one of the world’s largest global diversified natural resource companies and a major producer and marketer of more than 60 commodities that advance everyday life. Through a network of assets, customers and suppliers that spans the globe, we produce, process,...
Compliance Ranges Comparison
Zijin Mining Group
Glencore
Benchmark & Cyber Underwriting Signals
Incidents vs Mining Industry Avg (This Year)
No incidents recorded for Zijin Mining Group in 2026.
Incidents vs Mining Industry Avg (This Year)
No incidents recorded for Glencore in 2026.
Incident History - Zijin Mining Group (X = Date, Y = Severity)
Zijin Mining Group cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Glencore (X = Date, Y = Severity)
Glencore cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents
Zijin Mining Group
Glencore
FAQ
Latest Global CVEs
Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a rejection during DATA processing.
Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory.
Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free.
Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write.
Mistral Vibe before 2.25.5 contains a remote code execution vulnerability in the worktree creation process that executes git hooks before trust validation. Attackers can supply a repository with a crafted post-checkout hook that executes arbitrary shell commands with the privileges of the user running Vibe.
- https://github.com/mistralai/mistral-vibe
- https://github.com/mistralai/mistral-vibe/blob/19b5b74faa78d0816b8d4d4c7d7543fc3520678c/vibe/core/git/repo.py#L411-L431
- https://github.com/mistralai/mistral-vibe/commit/c069ffa1e12fb5f2487b489217c40ab97721d553
- https://github.com/mistralai/mistral-vibe/issues/996
- https://github.com/mistralai/mistral-vibe/releases/tag/v2.25.5
- https://www.vulncheck.com/advisories/mistral-vibe-before-2.25.5-remote-code-execution-via-git-post-checkout