Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

On May 11, 2026, the TanStack namespace was hit by a "Mini Shai-Hulud" supply chain attack. Unlike typical attacks, this did not involve stolen credentials; instead, the threat group TeamPCP hijacked the legitimate GitHub Actions release pipeline. This video covers the technical details of the OIDC token extraction, the "Dead Man's Switch" that triggers a rm -rf / upon credential revocation, and the mandatory remediation order you must follow to save your data. We also discuss how to harden your workflow using release-age cooldowns and OIDC pinning.

Read the full report here: https://www.gitguardian.com/state-of-secrets-sprawl-report-2026

See how Arctic Wolf Aurora Vulnerability Management turns risk visibility into remediation through seamless integrations with partners like ServiceNow and ConnectWise. This demo shows how automated ticketing, unified workflows, and prioritized findings help security and IT teams accelerate remediation without added workload.

How threat actors use AnyDesk and TeamViewer to bypass security.

MSPs are under pressure to deliver stronger security across a growing customer base without adding more tools or people. Despite this, many still rely on approaches that don’t scale, leading to gaps, alert overload, and missed opportunities to grow their security business. The goal of this 30-minute session is to help MSPs take a step back and assess how they’re delivering security today. We’ll walk them through the most common pressure points, help identify where their current approach is falling short, and guide them toward the next conversation based on what matters most to their business.