Anonymous 'Bikini' Lands 9 CVEs, Second Wave Due This Week

The Situation

Three distinct campaigns are exploiting perimeter infrastructure today — not disclosed, not theoretical, actively compromising systems. They require different responses but share one trait: every target sits at your edge with privileged network position and minimal endpoint detection coverage.

Campaign 1: SimpleHelp CVE-2026-48558 → TaskWeaver/Djinn

SimpleHelp's OpenID Connect implementation has an authentication bypass (CVE-2026-48558) that's being exploited in the wild to drop the TaskWeaver loader and Djinn infostealer. Patches have been available since May — this is a known-unpatched window being swept. Any OIDC-enabled RMM server is in scope, including MSP-managed instances you don't directly control.

If your MSP runs SimpleHelp, their compromise is your compromise. Verify their patch status today, not next review cycle.

Campaign 2: FortiBleed — 86,000+ Devices Harvested

An INC ransomware affiliate deployed on-firewall credential sniffers across 86,000+ Fortinet devices, harvesting credentials transiting the perimeter. This was only discovered because the attackers left an open directory exposed. There is no single patch — this requires credential rotation for every account whose traffic transited an affected device, plus forensic audit of firewall configs for injected processes.

Campaign 3: Perimeter Appliance Patches With Closing Windows

The Chrome Longinus flaw deserves special attention: it achieves full RCE and renderer-sandbox escape through a single V8 JIT primitive — no memory spraying, no exploit chaining. That lowers the weaponization skill floor dramatically. NetScaler's CVE-2026-8451 is the same out-of-bounds SAML parsing class that produced CitrixBleed in 2023, on appliances carrying 20+ CISA KEV entries.

The Azure CLI Spray — Context, Not Crisis

An automated password spray generated 81M+ login attempts against Azure CLI, breaching at least 78 accounts. CLI/programmatic authentication paths frequently sit outside Conditional Access and MFA policy envelopes — the gap being exploited is a configuration omission, not a vulnerability.

What Happened

An anonymous actor using the handle 'Bikini' published a repository called 'exploitarium'. It carries working PoC exploits for 15 widely-deployed open-source projects. No vendor coordination. Nine CVEs are confirmed. A second wave is promised this week. The affected list reads like a software bill of materials:

• Linux kernel, PHP, OpenVPN, Libssh2, FFmpeg
• 7-Zip, VLC, Ghidra, Gitea, Gogs
• MyBB, AnyDesk (and more)

Why This Is Different

The method is the story. Bikini says he fuzzed the codebases with OpenAI's GPT-5.5-3-Codex-Spark, then verified findings by hand. I cannot confirm a model by that name exists, so treat the tooling claim as reported, not established. His stated point cuts against the 'only frontier AI is dangerous' line:

"You do NOT need a SOTA model to help you identify these issues... my data seems to show that it is only marginal when paired with decent human oversight and a good harness."

The claim: mass-producing 0-days now needs a decent harness and human oversight, not a frontier model. Semgrep's own numbers point the same way. Their pipeline scored 53–61% F1 against GLM 5.2's 39% and Claude Code's 32% on IDOR detection. Integration engineering beats raw model capability. Those figures are vendor-reported.

Industry Response Is Already Confirming the Shift

Two vendors changed behavior. Adobe shifted to semi-monthly patching and Oracle moved to monthly releases, both citing AI-powered exploit discovery. Apple expedited WebKit patches and said it did so because AI compresses the disclosure-to-exploit window. A monthly patch SLA now sits structurally behind the threat.

Cross-Source Contradiction Worth Noting

One tension runs through today's reporting. Anthropic says Sonnet 5's 'cyber safeguards' are hardened, and the US government is export-controlling models on offensive-cyber capability scores. Bikini says frontier models aren't required. The regulatory framework is aimed at the last war: commodity models with good harnesses are the threat, not frontier models behind vendor guardrails.