[mini-shai-hulud]

September 27, 2026

• Two Mini Shai-Hulud-compromised GitHub Actions were re-enabled by their maintainer and stayed accessible for more than a week while still pointing at malicious code — a reminder that "restored" is not "remediated" when tags resolve to attacker commits (BleepingComputer). · Supply Chain

in Citrix NetScaler Zero-Days Land Mid-Weekend, No Patch Until Next Week

September 26, 2026

• Two compromised GitHub Actions came back online with the malicious tags still live. actions-cool/issues-helper and actions-cool/maintain-one-comment were backdoored on 18 May and disabled a day later; on 16 September GitHub re-enabled them without cleaning release tags, so mutable references like @v2.2.1 again resolved to the credential-stealing payload and any workflow not pinned to a commit SHA resumed executing it on its next run. Exfil to t.m-kosche[.]com ties it back to Mini Shai-Hulud. Both are disabled again (Socket, The Hacker News). · Cloud, CI/CD & Identity

in Kiteworks Orders a Global Shutdown on a Zero-Day Warning

June 27, 2026

Amazon Q Coding Assistant Hijacked Through Malicious MCP Configs as Washington Starts Gating Frontier Models Customer-by-Customer

Amazon Q Developer suffered a critical vulnerability (CVE-2026-12957, CVSS 8.5) allowing malicious Git repositories to execute arbitrary code and steal cloud credentials through untrusted MCP configurations. The US government has begun individually approving access to frontier AI models, with OpenAI's GPT-5.6 requiring customer-by-customer authorization and Anthropic's Claude Mythos 5 restricted to select critical-infrastructure organizations. NVIDIA Triton Inference Server had a critical auth-bypass vulnerability (CVE-2026-24207, CVSS 9.8) with public exploits enabling pre-auth RCE. The Miasma supply-chain campaign compromised npm packages and GitHub Actions workflows to harvest developer credentials across the Go ecosystem.