Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware

The feed reports a broad set of September 2026 cybersecurity incidents, led by actively exploited vulnerabilities and supply-chain compromises. High-impact items include pre-authentication SQL injection in Roundcube, critical WSO2 and Adobe Commerce flaws added to CISA KEV, rapid exploitation of WordPress RCE, passwordless MikroTik router takeover, cPanel privilege escalation to root, compromised GitHub Actions and package repositories, ClickFix malware campaigns, Android and macOS spyware, Microsoft 365 account compromise, and a cryptocurrency theft attributed to suspected North Korean actors