The "security researches" who post those bugs. Their goal being self promotion.