Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware

The feed highlights multiple active or high-impact cybersecurity threats, including exploitation of critical vulnerabilities in Roundcube, WordPress, WSO2, Adobe Commerce/Magento, MikroTik RouterOS, and cPanel; supply-chain compromises affecting GitHub Actions, npm, PyPI, and Terraform providers; and malware campaigns targeting macOS, Windows, Android, and cryptocurrency assets. Several incidents involve credential theft, ransomware-like code execution, cloud or container data exposure, account takeover, and ClickFix social engineering. The most urgent items are actively exploited pre-auth and