Zombie Actions: Compromised GitHub Workflows Reawaken

Two compromised GitHub Actions resumed executing Mini Shai-Hulud after their repositories were re-enabled with malicious tags intact, risking CI/CD secrets. Remove affected actions, rotate exposed secrets, audit runs, and pin known-clean commits by full SHA.

Read on dailycyber.net →