Discover CVE-2025-30066 tj-actions/changed-files GitHub Action has been compromised, exposing secrets in CI/CD pipelines and posing a major software supply chain security risk. Attackers injected malicious code into all versions (V1–V45), repointing existing tags to a compromised commit that exfiltrated credentials via GitHub Actions logs. Immediate remediation is required—organizations must scan their repositories, rotate secrets, and replace the action to mitigate risk. Learn how Phoenix Security’s ASPM can automate threat detection and enhance GitHub Actions security.

Discover the critical OpenSSH vulnerability CVE-2024-6387 (regreSSHion), affecting millions of glibc-based Linux systems. Learn about its impact, exploitation complexity, and how to mitigate the risks with Phoenix Security’s ASPM risk-based prioritization approach.