An anonymous researcher publishing as bikini released exploit code for zero-day vulnerabilities across 15 projects in a now-removed GitHub repository called exploitarium without prior vendor notification. At least two critical issues, a pre-auth RCE in libssh2 and an authentication bypass in Gitea Docker setups, are under active attack according to analysts who also linked the work to AI-assisted fuzzing.
Feel free to report them yourself and take credit for the CVE if handed out lulz
Please do not abuse these. I do this so to allure people into the field.
Security teams should prioritize patching libssh2 and Gitea instances immediately while deploying the newly released KQL and YARA detection rules, as AI-driven exploit publication is compressing the window between discovery and weaponization.
Tap a lens to see what this story means for you.
Reader-supported · Daily Brief
Daily brief at 7 AM ET. Top tech stories, every morning. Sourced and fact-checked.
See what’s happening right now
The Feed runs all day — short, verified briefs the moment they break.
Open the FeedFollow @thecircuitry_
Every story we publish, as it happens. No noise between.
Reader-supported
The Circuitry is a passion project I've always wanted to build, and I love the work behind it.
Running it costs real money. APIs, hosting, time. To keep improving the site and growing this into something useful for everyone, those costs have to be covered.
Any contribution is appreciated. If not, no pressure. Thanks for reading.
ChangXin Memory Technologies expects to raise 57.9 billion yuan ($8.55 billion) in its Shanghai STAR Market IPO after doubling its original target. The world's fourth-largest DRAM chipmaker will list on July 27, advancing China's push for semiconductor self-reliance.
CISA added CVE-2023-4346 affecting KNX Association KNX Protocol Connection Authorization Option 1 to its Known Exploited Vulnerabilities catalog on 2026-07-15. Federal agencies must finish remediation by 2026-07-29. The overly restrictive account lockout mechanism could let attackers purge devices and set a BCU key when extra security options remain disabled, so organizations must apply vendor mitigations under BOD 26-04.
Bloomberg reports that OnePlus will exit the U.S. and European smartphone markets as part of restructuring at owner Oppo, with the move possibly starting as soon as this week. The brand's earlier popularity has faded while Chinese suppliers face mounting pressure from memory chip costs and declining shipments in key regions.
