BleepingComputer

GitHub has re-enabled Actions, but security researchers warn that a smaller variant of the Shai-Hulud payload remains active, keeping supply-chain risk alive for developers who rely on automated workflows. The report, covered by BleepingComputer, suggests teams should stay cautious, audit their pipelines, and treat the malware threat as ongoing rather than resolved.

The hacking group ShinyHunters is reported to be exploiting a web application firewall bypass technique to break into organizations running Oracle PeopleSoft, according to BleepingComputer. The trick allegedly lets the group slip malicious requests past defensive filters, raising concerns for enterprises relying on WAFs alone. Security teams are being urged to patch and monitor PeopleSoft deployments.