cybersecurity
GitHub Actions re-enabled with Mini Shai-Hulud payload still active
September 27, 2026
Back to all postsTwo third-party GitHub Actions previously compromised in a Mini Shai-Hulud campaign were re-enabled by their maintainer and remained accessible for more than a week despite still pointing to malicious code.
Source: BleepingComputer
cybersecurity
Concerned about this threat to your business?
We help Canadian SMBs deploy the controls discussed in this article. Free 30-minute assessment — no obligation.