Malicious Code in GitHub Actions Logs Can Compromise Your Secrets – CVE-2025-30066

Your GitHub secrets are hiding in plain sight – attackers have compromised over 23,000 repositories by exploiting workflow logs. Security teams scrambled to contain the breach. Is your code still infected?

High-Stakes Vulnerability: How Malicious Code Can Compromise Your GitHub Actions

95% of GitHub Actions could betray you. Learn how malicious code compromised a popular action and exposed secrets without any user interaction. Your workflow’s security is at stake.