{"id":144091,"date":"2025-10-03T23:11:58","date_gmt":"2025-10-03T21:11:58","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vzlom-vnutrennego-gitlab-servera-red-hat"},"modified":"2025-10-03T23:11:58","modified_gmt":"2025-10-03T21:11:58","slug":"vzlom-vnutrennego-gitlab-servera-red-hat","status":"publish","type":"post","link":"https:\/\/prohoster.info\/no\/blog\/news\/vzlom-vnutrennego-gitlab-servera-red-hat","title":{"rendered":"Angrep p\u00e5 Red Hat sin interne GitLab-server","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Hackergruppen Crimson Collective har meldt at de har f\u00e5tt tilgang til en av de interne GitLab-serverne til Red Hat og lastet ned 570 GB komprimerte data som inneholder informasjon fra 28 000 depot. Blant annet inneholdt de beslaglagte dataene omtrent 800 CER-rapporter (Customer Engagement Report) med konfidensiell informasjon om plattformer og nettverksinfrastrukturer til Red Hats kunder som mottok konsulenttjenester. <\/p>\n

I de viste skjermbildene og eksemplene nevnes innhenting av data relatert til omtrent 800 kunder av Red Hat, inkludert Vodafone, T-Mobile, Siemens, Boeing, Bosch, 3M, Cisco, DHL, Adobe, American Express, Verizon, JPMC, HSBC, Ericsson, Merrick Bank, Telefonica, Bank of America, Delta Air Lines, Walmart, Kaiser, IBM, SWIFT, IKEA og AT&T, samt Senter for utvikling av overflatev\u00e5pen for den amerikanske marinen, Det f\u00f8derale luftfartsadministrasjonen i USA, Det f\u00f8derale n\u00f8dsituasjonsforvaltningsbyr\u00e5et i USA, Det amerikanske luftforsvaret, National Security Agency i USA, Det amerikanske patent- og varemerkeverket, Senatet i USA og Representanternes hus i USA. <\/p>\n

Det p\u00e5st\u00e5s at de beslaglagte depotene inneholder informasjon om kundenes infrastruktur, konfigurasjon, autentiseringstokens, profiler VPN<\/a>, inventardata, Ansible playbook, OpenShift-plattforminnstillinger, CI\/CD-rutere, sikkerhetskopier og annen informasjon som kan brukes til \u00e5 organisere angrep p\u00e5 kundenes interne nettverk. Angriperne pr\u00f8vde \u00e5 kontakte Red Hat for \u00e5 kreve l\u00f8sepenger, men fikk bare et standard svar med et tilbud om \u00e5 sende en sikkerhetsrapport om s\u00e5rbarheter. <\/p>\n

Red Hat har bekreftet en sikkerhetshendelse, men har ikke gitt detaljer eller kommentert informasjonen om innholdet i datalekkasjen. Det nevnes kun at den kompromitterte GitLab-serveren ble brukt i konsulentavdelingen, og at selskapet har iverksatt n\u00f8dvendige tiltak for \u00e5 etterforske og gjenopprette systemene. Red Hat-representanter hevder at de ikke har grunn til \u00e5 tro at innbruddet har p\u00e5virket andre tjenester og produkter av selskapet, bortsett fra ett. serveren<\/a> GitLab. <\/p>\n

Tillegg: Red Hat har publisert en innledende rapport om hendelsen. Rapporten inneholder ikke detaljer, men det bemerkes at selskapet har startet etterforskning og avdekket at en ukjent person har f\u00e5tt tilgang til GitLab-serveren som brukes til prosjektene til Red Hat Consulting, og har lastet ned noen data fra den. <\/p>\n

N\u00e5r det gjelder dataene som ble lekket av angriperen, hevdes det at de inneholdt spesifikasjoner for prosjekter, kodeeksempler og interne informasjoner om konsulenttjenester. P\u00e5 n\u00e5v\u00e6rende tidspunkt er det ikke avdekket lekkasje av viktige personopplysninger i analysen av hendelsen. <\/p>\n

Hvordan angriperen fikk tilgang til GitLab-serveren er ikke spesifisert, men det er bemerket at det ikke ble utnyttet s\u00e5rbarheten (CVE-2025-10725) i OpenShift AI Service, som ble oppdaget i g\u00e5r og gjorde det mulig for en autentisert ikke-privilegert bruker, for eksempel en forsker som bruker Jupyter-notatbok, \u00e5 f\u00e5 administratorrettigheter til klusteret, med full tilgang til alle tjenester, data og applikasjoner som kj\u00f8res i klusteret, samt root-tilgang til klusterknutene.
\n
Kilde: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0425\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0430 Crimson Collective \u0437\u0430\u044f\u0432\u0438\u043b\u0430 \u043e \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043e\u0434\u043d\u043e\u043c\u0443 \u0438\u0437 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0445 GitLab-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Red Hat \u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0441 \u043d\u0435\u0433\u043e 570\u0413\u0411 \u0441\u0436\u0430\u0442\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0438\u0437 28 \u0442\u044b\u0441\u044f\u0447 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432. \u0421\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0435\u0433\u043e \u0432 \u0437\u0430\u0445\u0432\u0430\u0447\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u043e \u043e\u043a\u043e\u043b\u043e 800 CER-\u043e\u0442\u0447\u0451\u0442\u043e\u0432 (Customer Engagement Report), \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445 \u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 Red Hat, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0438\u0441\u044c \u043a\u043e\u043d\u0441\u0430\u043b\u0442\u0438\u043d\u0433\u043e\u0432\u044b\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-144091","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Hacking av den interne GitLab-serveren til Red Hat | ProHoster","description":"Hackergruppen Crimson Collective har proklamert at de har f\u00e5tt tilgang til en av de interne GitLab-serverne til Red Hat og lastet ned 570GB med komprimerte data som inneholder informasjon fra 28 000 repositorier.","canonical_url":"https:\/\/prohoster.info\/no\/blog\/news\/vzlom-vnutrennego-gitlab-servera-red-hat","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"nn_NO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u0437\u043b\u043e\u043c \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e GitLab-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 Red Hat | ProHoster","og:description":"\u0425\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0430 Crimson Collective \u0437\u0430\u044f\u0432\u0438\u043b\u0430 \u043e \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043e\u0434\u043d\u043e\u043c\u0443 \u0438\u0437 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0445 GitLab-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Red Hat \u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0441 \u043d\u0435\u0433\u043e 570\u0413\u0411 \u0441\u0436\u0430\u0442\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0438\u0437 28 \u0442\u044b\u0441\u044f\u0447 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432.","og:url":"https:\/\/prohoster.info\/no\/blog\/news\/vzlom-vnutrennego-gitlab-servera-red-hat","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-10-03T21:11:58+00:00","article:modified_time":"2025-10-03T21:11:58+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"144091","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-22 15:54:02","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 15:06:19","updated":"2026-02-22 15:54:02","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/posts\/144091","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/comments?post=144091"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/posts\/144091\/revisions"}],"predecessor-version":[{"id":162511,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/posts\/144091\/revisions\/162511"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/media?parent=144091"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/categories?post=144091"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/tags?post=144091"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}