Aggregator

Apptega Policy Manager streamlines policy creation and compliance oversight

Help Net Security
2 weeks 5 days ago

Apptega revealed its Policy Manager module, expanding the company’s platform to automate the creation, review, and oversight of custom business policies. With this enhancement, Apptega enables partners and in-house security and compliance teams to maintain auditable policies with minimal manual effort. Apptega Policy Manager automates entire workflows that support the creation, maintenance and management of businesses’ policies for passwords, privacy, HR and more across levels, departments and roles. Policy drafts are routed across configurable approval … More →

The post Apptega Policy Manager streamlines policy creation and compliance oversight appeared first on Help Net Security.

Industry News

Microsoft Issues Security Fixes for 56 Flaws, Including Active Exploit and Two Zero-Days

不安全
2 weeks 5 days ago
好的，我现在需要帮用户总结这篇文章的内容，控制在100字以内。首先，我得通读整篇文章，抓住主要信息。 文章主要讲的是微软在2025年12月发布了针对Windows平台的56个安全漏洞的补丁。其中有三个是关键漏洞，53个是重要漏洞。还有一个漏洞CVE-2025-62221已经被积极利用，属于特权提升类型，影响较大。微软全年修复了1275个CVE，这也是连续第二年超过千个。 此外，微软还修复了Edge浏览器的17个漏洞，包括一个欺骗漏洞。文章还提到了其他厂商如Adobe、AWS等也发布了安全更新。 接下来，我需要把这些信息浓缩到100字以内。重点包括微软修复的漏洞数量、严重程度、被利用的情况以及全年数据。同时提到其他厂商的更新也很重要。 最后，确保语言简洁明了，不使用“这篇文章”等开头词。 微软在2025年12月修复了Windows平台上的56个安全漏洞，其中包括一个已被利用的高危特权提升漏洞（CVE-2025-62221）。全年共修复1,275个CVE，连续第二年超千个。此外还修复了Edge浏览器的17个漏洞。其他厂商如Adobe、AWS等也发布了安全更新。

Microsoft Issues Security Fixes for 56 Flaws, Including Active Exploit and Two Zero-Days

The Hackers News
2 weeks 5 days ago
Microsoft closed out 2025 with patches for 56 security flaws in various products across the Windows platform, including one vulnerability that has been actively exploited in the wild. Of the 56 flaws, three are rated Critical, and 53 are rated Important in severity. Two other defects are listed as publicly known at the time of the release. These include 29 privilege escalation, 18 remote code
The Hacker News

Protecto Vault adds API-first protection for safer AI agent workflows

Help Net Security
2 weeks 5 days ago

Protecto launched Protecto Vault, a SaaS platform designed specifically for AI agent builders. Featuring a pay-as-you-go model, Vault removes the primary barrier to AI adoption: enterprise refusal to share sensitive data due to security, PII exposure, and HIPAA compliance risks. Enterprises hesitate to connect agents to the unstructured data that makes them useful, such as emails, clinical notes, and financial documents. Protecto Vault solves this by providing an API-first security layer that sits between enterprise … More →

The post Protecto Vault adds API-first protection for safer AI agent workflows appeared first on Help Net Security.

Industry News

Microsoft Patch Tuesday security updates for December 2025 fixed an actively exploited zero-day

Security Affairs
2 weeks 5 days ago
Microsoft Patch Tuesday security updates for December 2025 address 57 vulnerabilities, including three critical flaws. Microsoft Patch Tuesday security updates for December 2025 addressed 57 vulnerabilities in Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Exchange Server, Azure, Copilot, PowerShell, and Windows Defender. Three vulnerabilities are rated Critical, while the rest are […]
Pierluigi Paganini

苹果在 AI 上进展缓慢在市场变动下成为优势

Solidot
2 weeks 5 days ago
与微软、Google、亚马逊和 Meta 等科技巨头不同，苹果在 AI 热下非常保守，没有将 AI 视为天要塌下来需要立即采取行动的事情。今年初，由于 AI 战略匮乏，苹果饱受批评，反映在市值上就是股价大跌。2025 年上半年，苹果在七大科技巨头中表现倒数第二，股价下跌了 18%。但随着对 AI 巨额投资的质疑，情况发生了逆转，苹果股价飙升 35%，此前的宠儿 Meta 和微软则股价暴跌，英伟达的表现也不如苹果。标普 500 指数同期上涨 10%，科技股为主的纳斯达克 100 指数上涨了 13%。目前苹果的市值达到 4.1 万亿美元，超过了微软，正逼近英伟达。财富管理公司认为苹果的股票从某种程度上是反 AI 的。

Skyhigh Security debuts dashboard for unified data visibility and compliance

Help Net Security
2 weeks 5 days ago

Skyhigh Security announced the launch of its risk-focused data visibility and compliance dashboard as part of Skyhigh DSPM’s Data Explorer. In April 2025, Data Security Posture Management (DSPM) was integrated into Skyhigh Security’s SSE framework to provide visibility into where data resides within cloud environments. The new dashboard provides unified, real-time visibility into an enterprise’s data security posture across hybrid and cloud environments, helping organizations maintain compliance with global privacy and data regulations. “As data … More →

The post Skyhigh Security debuts dashboard for unified data visibility and compliance appeared first on Help Net Security.

Industry News

http injector

不安全
2 weeks 5 days ago
好的，我现在需要帮用户总结一篇文章的内容，控制在100字以内，并且不需要特定的开头。首先，我得仔细阅读用户提供的文章内容，了解其主要信息。 这篇文章主要讨论了学习道德黑客的资源推荐，包括在线平台、认证课程、书籍指南以及社区和 subreddit。每个部分都有具体的例子，比如TryHackMe、Hack The Box、PortSwigger等平台，CompTIA Trifecta认证，Cisco的免费课程，OWASP测试指南和一些书籍。此外，还提到了学习网络和Linux的重要性，定期练习和加入学习小组的建议。 接下来，我需要将这些信息浓缩到100字以内。要抓住关键点：资源类型（在线平台、认证、书籍）、推荐的具体例子、以及学习建议（网络基础、练习、合作）。同时，要确保语言简洁明了。 可能的结构是先总述资源类型和例子，然后提到学习建议。例如：“文章推荐了学习道德黑客的资源，包括在线平台如TryHackMe和Hack The Box，认证如CompTIA Trifecta和Cisco课程，以及书籍如OWASP指南。建议掌握网络和Linux基础，并通过实践和合作提升技能。” 检查一下字数是否在限制内，并确保没有遗漏重要信息。这样用户就能快速了解文章的核心内容了。 文章推荐了学习道德黑客的资源，包括在线平台如TryHackMe和Hack The Box，认证如CompTIA Trifecta和Cisco课程，以及书籍如OWASP指南。建议掌握网络和Linux基础，并通过实践和合作提升技能。

澳大利亚禁止青少年使用社媒禁令正式生效

Solidot
2 weeks 5 days ago
澳大利亚禁止 16 岁以下青少年使用社媒的禁令正式生效。12 岁悉尼女孩 Paloma 在接受采访时对禁令表达了悲伤之情，称她通过 Snapchat 和 TikTok 等应用结识了来自不同国家的朋友，表示自己认识的每个人都对禁令感到生气，称通过禁止使用社交媒体政府剥夺了他们的一部分权利。15 岁少年 Noah Jones 和 Macy Neyland 在一家权利团体的支持下向澳大利亚最高法院提起诉讼，认为禁令剥夺了他们自由交流的权利。澳大利亚电信部长 Anika Wells 表示不会屈服，不会被法律战吓到，“我们将代表澳大利亚的父母坚定立场。”

澳大利亚禁止青少年使用社媒禁令正式生效

不安全
2 weeks 5 days ago
澳大利亚禁止16岁以下青少年使用社交媒体的禁令正式生效，引发不满和法律挑战。青少年认为此举剥夺了他们的社交权利，部分人已向法院提起诉讼。政府表示将坚定立场支持父母。

Managed ad