Two compromised GitHub Actions were re-enabled with malicious tags intact, allowing Mini Shai-Hulud code to run again. Here’s what DevOps teams should check and how to harden workflows.
Prepare for DevSecOps interviews with 20 practical questions covering CI/CD security, IAM, secrets, Docker, Kubernetes, IaC, supply-chain security and incident response.
GitLab CVE-2026-85706 is a CVSS 10.0 unauthenticated path traversal flaw affecting self-managed GitLab. GitLab says it has been added to CISA’s Known Exploited Vulnerabilities catalog and has published detection guidance.
