从2025年1月份深度求索(DeepSeek)遭境外攻击致使系统瘫痪，到近期快手应用因黑灰产攻击而临时下 架直播频道，日益频发的网络安全事件正在敲响警钟：网络攻击无孔不入、破坏力强，不少企业在网络 安全防护与保险保障方面仍存短板。网络安全保险作为承保网络安全风险的新险种、网络安全服务的新 模式，有利于行业企业提升网络安全风险应对能力，促进企业数字化转型发展。 为加快推进网络安全保险新模式落地应用，2025年11月，工业和信息化部、金融监管总局组织开展第二 批次网络安全保险服务试点工作，主要面向电信和互联网、工业、金融等行业领域征集案例，并提出推 动需求侧企业提升网络安全保险意识，积极利用网络安全保险服务提升网络安全防护水平，同时推动网 络安全和金融服务融合创新，建立网络安全保险行业协作机制。 业内人士表示，网络安全保险通常由保险公司与提供风险减量服务的第三方科技企业合作，将漏洞扫描 等风险管理服务前置化，尽可能降低企业发生风险的概率；一旦发生真实损失，保险公司再进行赔付托 底。建议创新保险产品和服务方式，积极推广普惠型、创新型网络安全保险，不断提升服务质量，培育 网络安全保险发展良性生态。 (责任编辑：孟茜云 ...

Core Viewpoint - The incident highlights the urgent need for platforms to transition from "post-event review" to "preemptive immunity" and "real-time blocking" in the AI era [1] Group 1: Incident Overview - On December 22, 2025, Kuaishou experienced a large-scale content security incident where numerous live streams were compromised by automated methods, leading to the spread of pornographic content for over an hour [1][2] - The attack involved newly registered "zombie accounts" that collectively broadcasted pre-recorded illegal videos, resulting in a significant disruption of the platform's ecosystem [1][2] - The incident caused Kuaishou's market value to drop by approximately 101.52 billion HKD, with a stock price decline of 3.52% by the market close on December 23 [6] Group 2: Attack Mechanism - The attack was characterized as an "automated attack" where hackers used tools to batch register and control zombie accounts, enabling rapid dissemination of illegal content [2] - Attackers employed a "trust chain hijacking" strategy, utilizing a large number of compromised accounts to bypass basic risk controls and exploit vulnerabilities in the platform's content review process [2][4] - The attack successfully circumvented Kuaishou's identity verification and content review processes, indicating a significant technical breakthrough in the attack methodology [2][4] Group 3: Company Response - Kuaishou issued a statement on December 23, confirming the activation of emergency protocols and the gradual restoration of live streaming services [3] - The company emphasized its commitment to compliance and reported the incident to law enforcement, while also planning to take legal measures to protect its interests and those of its shareholders [3][5] - Despite the rapid response, concerns were raised regarding the effectiveness of Kuaishou's technical defenses and the failure of its security measures [3][4] Group 4: Industry Implications - The incident serves as a warning for the industry, indicating that traditional "human + algorithm" models are becoming inadequate against the evolving tactics of black and gray market actors [7] - Experts suggest that platforms should leverage AI technologies to enhance security measures, including deep learning algorithms for real-time content filtering and improved monitoring of live streaming interfaces [7][10] - A shift towards a more proactive security framework is recommended, including the implementation of zero-trust architectures and automated response mechanisms to detect and mitigate attacks [7][10] Group 5: Future Actions - Kuaishou has begun urgent recruitment for security positions, offering competitive salaries to bolster its security team [9] - The company has previously reported significant efforts in content governance, closing over 1,500 low-quality live streams daily and penalizing over 37,400 incentivized streamers in 2025 [9] - Collaboration across the industry is deemed essential, with initiatives like the "Sunshine Integrity Alliance" being formed to combat black and gray market issues through data sharing and cooperative efforts [10]

Core Viewpoint - The article discusses a significant cyber attack on Kuaishou's live streaming feature, which occurred on December 22, 2025, leading to the dissemination of inappropriate content and raising concerns about the platform's security measures and response capabilities [1][10][12]. Incident Overview - Kuaishou's live streaming function was attacked around 22:00 on December 22, 2025, resulting in a temporary disruption of services, although other functionalities remained unaffected [1]. - The attack involved the posting of a large amount of pornographic content in multiple live streams, with one stream reportedly reaching an audience of 100,000 viewers before being shut down [4][5]. Response and Investigation - Kuaishou has initiated an emergency response plan, reported the incident to law enforcement, and is taking legal measures to protect its interests and those of its shareholders [1]. - Experts suggest that the attack was likely organized and may have exploited vulnerabilities in Kuaishou's system, particularly in the live streaming interface [10][12]. - The incident has been classified as a P0-level accident, indicating a severe impact on core business functions, necessitating immediate and high-level intervention [11]. Security Implications - The attack highlights the shift towards automated attacks by cybercriminals, which can overwhelm traditional manual content moderation systems [12]. - Experts emphasize the need for Kuaishou to enhance its security protocols, including the establishment of automated response mechanisms to quickly identify and mitigate such threats [11][12]. Financial Context - Kuaishou reported a revenue increase of 14.2% year-on-year to 35.6 billion yuan in Q3, with significant growth in operating profit and adjusted net profit [14]. - Following the incident, there was a notable reaction in the A-share cybersecurity sector, with several stocks experiencing gains [14].

Core Viewpoint - Kuaishou has faced significant operational challenges, highlighted by a recent incident involving a large-scale attack that led to the suspension of its live streaming feature, reflecting deeper issues within the company's growth and content quality [5][8]. Group 1: User Growth and Competitive Landscape - Kuaishou's user growth has slowed, with average daily active users (DAU) reaching 416.2 million, a mere 1.7% increase year-on-year, and monthly active users (MAU) at 731.1 million, up 2.2% [12][13]. - The company is experiencing intense competition from Douyin and WeChat's video accounts, which are significantly impacting Kuaishou's growth momentum [12][14]. - Kuaishou's DAU growth rate was 5.4% in 2024, while Douyin's was approximately 5%, and MAU for Douyin exceeded 1 billion, indicating a widening gap [13][14]. Group 2: Strategic and Operational Challenges - Kuaishou's strategic direction appears unclear, with a lack of focus compared to competitors like Douyin and WeChat, which have clearer strategies for user engagement and market penetration [16][17]. - The company's expansion into various sectors post-IPO has led to resource dilution, impacting its core strengths, particularly in the "Lao Tie" economy, which targets lower-tier markets [17][21]. - Kuaishou's investment in AI has not yielded proportional returns, with R&D expenses reaching 3.4 billion yuan against AI revenue of only 300 million yuan, resulting in a poor return on investment [18][21]. Group 3: Content Quality and Ecosystem Issues - The recent attack on Kuaishou's platform is indicative of a broader decline in content quality, with issues of vulgarity, infringement, and misinformation becoming prevalent [22][23]. - The platform has faced penalties for inadequate content moderation, with a notable incident in November where it was warned for failing to manage illegal content effectively [23][25]. - Kuaishou has also been involved in legal disputes over copyright infringement, with a compensation ruling exceeding 120 million yuan, highlighting ongoing challenges in maintaining content integrity [25].

Core Viewpoint - Kuaishou Technology, one of China's largest short video platforms, experienced a significant cyber attack on December 22, leading to the broadcast of inappropriate content on its live streaming channels, marking one of the largest security incidents in the Chinese internet sector in recent years [2][11]. Group 1: Incident Details - The cyber attack resulted in a peak of nearly 100,000 viewers in some live streaming rooms, prompting Kuaishou to temporarily suspend its live streaming services [2]. - Following the attack, Kuaishou's stock price fell nearly 6% at the opening of the Hong Kong stock market, closing with a decline of 3.52% [2]. - Kuaishou reported that the platform was targeted by black and gray market attacks, and they have since implemented emergency measures to restore normal service [2][11]. Group 2: User Impact and Response - The incident led to a surge in Kuaishou's visibility on social media, with the app climbing to the second position in the Apple App Store download rankings in China, surpassing other competitors [4]. - There were rumors regarding potential security breaches affecting WeChat accounts, which were later debunked by WeChat officials [4]. - Kuaishou is reportedly intensifying its recruitment for security positions, although some job postings predate the attack [6]. Group 3: Security Analysis - Experts suggest that the attack was likely a well-organized external hacking effort, exploiting vulnerabilities in the live streaming interface and bypassing Kuaishou's content review processes [8]. - The incident highlights significant vulnerabilities in Kuaishou's risk control and security defense systems, as traditional manual defenses are inadequate against automated attacks [8][9]. - The complexity of live content moderation poses unique challenges, making it more susceptible to attacks compared to static content [9]. Group 4: Financial Implications - Kuaishou's live streaming business, which accounted for 26.9% of total revenue in Q3 2025, is under scrutiny due to the potential impact of this incident on its operations [11]. - The company has issued a warning to investors regarding the potential risks associated with trading its securities following the attack [11].

Group 1 - The core viewpoint of the article emphasizes the proactive fiscal measures taken by local governments to issue bonds exceeding 1 trillion yuan in the first quarter of next year, aimed at stabilizing the economy and addressing liquidity pressures [2][3] - The issuance of bonds is primarily for refinancing purposes, allowing local governments to "borrow new to repay old," which is expected to enhance the overall economic chain by alleviating debts owed to enterprises [2] - The Ministry of Housing and Urban-Rural Development has outlined four key areas for stabilizing the real estate market, including controlling supply and improving market conditions, which reflects a shift in focus from quantity to quality in real estate development [4][5] Group 2 - A survey indicates that 8.4% of companies have implemented a "mandatory off-work" policy, reflecting a growing trend against overwork in the workplace, with 78% of employees considering changing jobs due to excessive competition [6][7] - ByteDance plans to increase its capital expenditure to 160 billion yuan (approximately 23 billion USD) in 2026, focusing on AI infrastructure, which highlights the competitive stance of Chinese tech companies in the AI sector [12][13] - Global technology companies have issued a record high of 428.3 billion USD in bonds this year, driven by significant investments in AI, indicating a trend of leveraging debt to fund technological advancements [14][15]

Group 1 - DJI expresses regret over the FCC's decision to include all non-U.S. manufactured drones in the "Covered List," stating it limits consumer choice and undermines fair competition [1] - DJI emphasizes its commitment to providing innovative tools for image creators and highlights the safety and reliability of its products, validated by independent third parties [1] - The company plans to evaluate all possible paths to protect its and its global users' legal rights [1] Group 2 - Zontai Auto denies rumors of collaboration with OPPO and Vivo for restructuring, stating there is currently no partnership [2] - Speculation arises regarding the involvement of OPPO and Vivo in Zontai's restructuring due to the new board composition, which includes members with ties to Chery Auto [2] Group 3 - Beijing issues the first L3 level autonomous driving vehicle license plates, marking a significant step towards mass production of autonomous vehicles in China [2] - The L3 autonomous driving feature is currently limited to specific highway segments in Beijing, with restrictions on other areas [2] Group 4 - Volvo Cars in China undergoes a leadership change with HUYANHANG replacing Yuan Xiaolin as chairman, but the company clarifies that this is a routine administrative change and does not affect daily operations [3] - Yuan Xiaolin remains a senior vice president at Volvo Group and president of Volvo Cars Asia Pacific [3] Group 5 - Kuaishou reports that its live streaming function was restored after a network attack on December 22, 2025, and other services were not affected [5] - The company has initiated legal actions against the perpetrators of the attack to protect its interests [5] Group 6 - Apple faces a fine of €98.635 million (approximately ¥817 million) from Italy for abusing market dominance through its App Tracking Transparency policy [11] - Cumulatively, Apple has incurred over ¥20.7 billion in fines across multiple European countries this year for similar reasons [11] Group 7 - JD.com confirms that its Paris warehouse has resumed normal operations following a theft incident involving over 50,000 electronic devices valued at approximately €37 million (around ¥306 million) [12] - The company disputes reports of significant losses, stating that the actual situation differs from what has been reported [12] Group 8 - Geely's management restructuring is complete following the merger with Zeekr, with key executives assigned to new roles [8] - Li Donghui is now the vice chairman of Geely Holding Group, while An Conghui serves as CEO, overseeing overall operations [8] Group 9 - ByteDance plans to invest significantly in AI, with a projected capital expenditure of ¥160 billion (approximately $23 billion) in 2026, including ¥85 billion reserved for semiconductor procurement [11] - The company aims to enhance its AI infrastructure and capabilities through this investment [11]

智通财经记者 胡含嫣 范佳来 实习生 周家钰 国内头部直播平台快手遭遇黑产攻击，暴露出其在应急机制上的漏洞。 12月23日午间，快手（01024.HK）在港交所公告称，公司快手应用的直播功能于2025年12月22日22:00 左右遭到网络攻击，公司已第一时间启动应急预案，经全力处置与系统修复，快手应用的直播功能已逐 步恢复正常服务。 公告称，快手应用的其他服务未受影响。公司始终严守合规底线，坚决反对任何违规内容及行为。公司 强烈谴责黑灰产的违法犯罪行为，已就上述事宜向公安机关报警并向相关部门报告，并将视情况采取其 他适当的法律补救措施，以保障本公司及其股东的权益。 曲子龙解释道，正常情况下，各个平台都会有AI（人工智能）+人工的视频内容审核服务。然而，一旦 需要鉴定的视频集中式爆发，原本准备的视频智能审核的云投入的并发不够大，就和遭遇了DDoS（分 布式拒绝服务工具）一样，一堆需要审核的内容同一时间疯狂涌入到智能AI审核任务里，造成审核能 力无法实时完成，出现了队列和拥堵。 曲子龙表示："如果是灰黑产的群控攻击，那么真的是堪称'黑灰产史无前例的教科书攻击'了，毕竟以 往黑灰产只是集中注册账户、你关了我再继续发 ...

Core Viewpoint - Kuaishou Technology, one of China's largest short video platforms, experienced a significant network attack that led to the temporary shutdown of its live streaming services, marking one of the largest security incidents in recent years for Chinese internet platforms [6][19]. Group 1: Incident Overview - On December 22, Kuaishou's live streaming channels were flooded with inappropriate content due to a large-scale cyber attack, with reports indicating that some live streams attracted nearly 100,000 viewers at one point [6]. - Following the attack, Kuaishou's stock price fell nearly 6% at the opening of the Hong Kong stock market, closing down 3.52% [8]. - Kuaishou issued a voluntary announcement stating that the live streaming function was attacked around 10 PM and that emergency measures were taken to restore services [8]. Group 2: Public Reaction and Impact - The incident led to a surge in Kuaishou's visibility on social media, with the app climbing to the second position in the Apple App Store's download rankings in China, surpassing other competitors [11]. - There were rumors about potential security issues affecting WeChat accounts due to the attack, but these were debunked by WeChat's official response [11]. - Kuaishou is reportedly intensifying its recruitment for security positions, although some job postings predate the attack [13]. Group 3: Technical Analysis - Experts suggest that the attack was likely a well-organized external hacking effort, exploiting vulnerabilities in the live streaming interface and bypassing Kuaishou's content review processes [16]. - The incident highlights significant weaknesses in Kuaishou's risk control and defense systems against extreme security attacks, as traditional manual defenses are inadequate for large-scale automated attacks [16][19]. Group 4: Financial Implications - Kuaishou's live streaming business, which accounted for 26.9% of total revenue in Q3 2025, is under scrutiny due to the potential impact of this security incident on its operations [19][20]. - The company has warned investors to exercise caution when trading its securities following the incident [20].

昨日晚间，快手平台遭到黑灰产攻击，这一事件再次将网络安全问题推至公众视野。企业网络安全方面的问题并非首次。在数字化转型的今天，网络攻击已 从"可能发生的威胁"变成了"随时会发生的现实"。当黑灰产通过网络手段袭击企业时，企业如何应对？网络安全保险，能否成为抵御这场"看不见硝烟的战 斗"的坚强盾牌？ 保险可保黑灰产攻击 12月23日，快手科技发布声明称，公司快手应用的直播功能于2025年12月22日22:00左右遭到网络攻击，公司已第一时间启动应急预案，经全力处置与系统 修复，快手应用的直播功能已逐步恢复正常服务。 近年来，网络攻击与数据泄露事件频频闯入公众视野，其造成的经济损失与声誉损害如滚雪球般难以估量，尤其是对于日活数亿、内容海量的短视频平台而 言。因此，如何有效应对网络安全风险，已成为当前亟待解决的关键问题。 北京商报记者通过多方人士获悉，网络安全保险可以针对"黑灰产攻击"这类网络安全事件带来的部分直接经济损失进行赔偿。但具体的赔偿范围和条件，取 决于具体条款。 "从保险原理上来说，这类网络安全损失属于纯粹损失，保险是可以赔付的。"业内人士对记者表示。 网络安全保险作为一种融合了保险机制与安全技术的风险管 ...