Mar 18, 2025
1 new incident, 1 with updates.
Started
- ClosedPatched
Fortinet FortiOS and FortiProxy: FortiOS and FortiProxy Authentication Bypass Vulnerability
Fortinet FortiOS and FortiProxy contain an authentication bypass vulnerability that allows a remote attacker to gain super-admin privileges via crafted CSF proxy requests. Added to CISA KEV on 2025-03-18.
Fortinet FortiOS and FortiProxyClosed Mar 18, 2025
Updated
- ClosedPatched
tj-actions/changed-files compromised: CI secrets dumped in 23,000+ repos' logs
Attackers repointed the version tags of the popular tj-actions/changed-files GitHub Action to a commit that dumped runner memory, printing CI/CD secrets into workflow logs. It started with the compromise of reviewdog/action-setup and was aimed at Coinbase's agentkit repo first. Over 23,000 repositories used the action.
tj-actions/changed-files GitHub ActionClosed Mar 20, 2025
