U.S. CISA adds Fortinet FortiOS/FortiProxy and GitHub Action flaws to its Known Exploited Vulnerabilities catalog

CISA added two high-severity vulnerabilities to its Known Exploited Vulnerabilities catalog: CVE-2025-24472, an authentication bypass in Fortinet FortiOS/FortiProxy actively exploited to gain super-admin access and linked to SuperBlack ransomware intrusions attributed to the actor 'Mora_001'; and CVE-2025-30066, a supply-chain compromise of the tj-actions/changed-files GitHub Action that was modified to leak CI/CD secrets from affected workflows. Both flaws have confirmed exploitation in the wild, vendor fixes are available, and federal agencies have mandatory remediation deadlines.