BleepingComputer

Cloudflare has fixed a cross-tenant vulnerability in its Containers service that could have exposed customer data between tenants. The flaw, reported by BleepingComputer, was patched after discovery, and the company says the issue affected isolation boundaries in the product. Security researchers and customers are watching the disclosure closely, as cross-tenant bugs in major cloud providers raise concerns about data separation and trust in shared infrastructure.

GitHub has re-enabled Actions, but security researchers warn that a smaller variant of the Shai-Hulud payload remains active, keeping supply-chain risk alive for developers who rely on automated workflows. The report, covered by BleepingComputer, suggests teams should stay cautious, audit their pipelines, and treat the malware threat as ongoing rather than resolved.

The hacking group ShinyHunters is reported to be exploiting a web application firewall bypass technique to break into organizations running Oracle PeopleSoft, according to BleepingComputer. The trick allegedly lets the group slip malicious requests past defensive filters, raising concerns for enterprises relying on WAFs alone. Security teams are being urged to patch and monitor PeopleSoft deployments.