Windows 8 won't be under the Christmas tree for most enterprises this year: It's too new, and Windows 7 remains well-entrenched for now. But with Windows 8, Microsoft has continued its strategy of building more security features into the operating system to help deflect attacks. One key theme in Windows 8 security is repelling exploitation: mainly making sure that when -- that's when, not if -- malware gets in, it can't actually do harm. That's right in sync with a growing sense of fatalism among enterprises and security vendors that has replaced the secure fortress mindset. The assumption is no longer if or when you get hacked but that you've already been hacked, with a focus on minimizing the damage. ...