Aggregator
CVE-2025-21074 | Samsung Devices libimagecodec.quram.so out-of-bounds
CVE-2025-21076 | Samsung Account up to 14.8.00.3 insufficient permissions or privileges
PortGPT: How researchers taught an AI to backport security patches automatically
Keeping older software versions secure often means backporting patches from newer releases. It is a routine but tedious job, especially for large open-source projects such as the Linux kernel. A new research effort has built a tool that uses a large language model to do that work automatically. A team of researchers from China, the United States, and Canada created PortGPT, an AI system designed to automate the process of migrating security patches from mainline … More →
The post PortGPT: How researchers taught an AI to backport security patches automatically appeared first on Help Net Security.
黑客入侵按摩店主手机窃取数据并向客户们总计勒索351万元人民币
CVE-2025-21073 | Samsung Devices USB Connection Mode insecure default initialization of resource
CVE-2025-10567 | FunnelKit Plugin 3.10.2 on WordPress cross site scripting
CVE-2025-64151 | Roboticsware FA-Panel6/BA-Panel6/PA-Panel6/FA-Server6 Windows Service unquoted search path
CVE-2025-21079 | Samsung Members 2.4.25/3.9.10.11/4.2.005/5.0.00.11/5.2.00.12 input validation
CVE-2025-62225 | Sony Optical Disc Archive Software Windows Service unquoted search path (EUVD-2025-37781)
CVE-2025-6027 | Ace User Management Plugin up to 2.0.3 on WordPress Password Reset Token password recovery
CVE-2025-11072 | MelAbu WP Download Counter Button Plugin up to 1.8.6.7 on WordPress information disclosure
CVE-2025-10873 | ElementInvader Addons for Elementor Plugin up to 1.4.0 on WordPress authorization
«Инвестируй и богатей»: как липовые криптоплатформы «кинули» европейцев на 600 млн евро
基于 ExtJS 框架下 XSS 漏洞分析挖掘
Google 移除安娜的档案 7.49 亿网址
2 Billion Email Addresses Were Exposed, and We Indexed Them All in Have I Been Pwned
I hate hyperbolic news headlines about data breaches, but for the "2 Billion Email Addresses" headline to be hyperbolic, it'd need to be exaggerated or overstated - and it isn't. It's rounded up from the more precise number of 1,957,476,
AI can flag the risk, but only humans can close the loop
In this Help Net Security interview, Dilek Çilingir, Global Forensic & Integrity Services Leader at EY, discusses how AI is transforming third-party assessments and due diligence. She explains how machine learning and behavioral analytics help organizations detect risks earlier, improve compliance, and strengthen accountability. As oversight grows, Çilingir explains why human judgment still matters in every AI-supported decision. When a third-party breach occurs, the forensic investigation often uncovers weak points that AI could have flagged … More →
The post AI can flag the risk, but only humans can close the loop appeared first on Help Net Security.