{"id":144091,"date":"2025-10-03T23:11:58","date_gmt":"2025-10-03T21:11:58","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vzlom-vnutrennego-gitlab-servera-red-hat"},"modified":"2025-10-03T23:11:58","modified_gmt":"2025-10-03T21:11:58","slug":"vzlom-vnutrennego-gitlab-servera-red-hat","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/vzlom-vnutrennego-gitlab-servera-red-hat","title":{"rendered":"Hacking of the internal GitLab server of Red Hat","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

The hacker group Crimson Collective claimed to have gained access to one of Red Hat's internal GitLab servers and downloaded 570GB of compressed data containing information from 28,000 repositories. Among other things, the captured data included around 800 Customer Engagement Reports (CERs) containing confidential information about the platforms and network infrastructures of Red Hat clients who were provided with consulting services. <\/p>\n

\u0412 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c\u0438 \u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442\u0430\u0445 \u0438 \u043f\u0440\u0438\u043c\u0435\u0440\u0430\u0445 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u043e \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u043e\u043a\u043e\u043b\u043e 800 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c\u0438 Red Hat, \u0441\u0440\u0435\u0434\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 Vodafone, T-Mobile, Siemens, Boeing, Bosch, 3M, Cisco, DHL, Adobe, American Express, Verizon, JPMC, HSBC, Ericsson, Merrick Bank, Telefonica, Bank of America, Delta Air Lines, Walmart, Kaiser, IBM, SWIFT, IKEA \u0438 AT&T, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0426\u0435\u043d\u0442\u0440 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043d\u0430\u0434\u0432\u043e\u0434\u043d\u043e\u0433\u043e \u0432\u043e\u043e\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0412\u041c\u0421 \u0421\u0428\u0410, \u0424\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u043e\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0433\u0440\u0430\u0436\u0434\u0430\u043d\u0441\u043a\u043e\u0439 \u0430\u0432\u0438\u0430\u0446\u0438\u0438 \u0421\u0428\u0410, \u0424\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u043e\u0435 \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u043f\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e \u0432 \u0447\u0440\u0435\u0437\u0432\u044b\u0447\u0430\u0439\u043d\u044b\u0445 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f\u0445 \u0421\u0428\u0410, \u0412\u043e\u0435\u043d\u043d\u043e-\u0432\u043e\u0437\u0434\u0443\u0448\u043d\u044b\u0435 \u0441\u0438\u043b\u044b \u0421\u0428\u0410, \u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u043d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0421\u0428\u0410, \u0412\u0435\u0434\u043e\u043c\u0441\u0442\u0432\u043e \u043f\u043e \u043f\u0430\u0442\u0435\u043d\u0442\u0430\u043c \u0438 \u0442\u043e\u0432\u0430\u0440\u043d\u044b\u043c \u0437\u043d\u0430\u043a\u0430\u043c \u0421\u0428\u0410, \u0421\u0435\u043d\u0430\u0442 \u0421\u0428\u0410 \u0438 \u041f\u0430\u043b\u0430\u0442\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0435\u0439 \u0421\u0428\u0410. <\/p>\n

It is claimed that the seized repositories contain information about client infrastructure, configuration, authentication tokens, profiles VPN<\/a>, inventory data, Ansible playbooks, OpenShift platform settings, CI\/CD runners, backups, and other data that could be used to organize an attack on the internal networks of clients. The attackers tried to contact Red Hat for extortion but received only a template response suggesting they submit a vulnerability report to the security service. <\/p>\n

Red Hat confirmed the security incident but did not provide details or comment on the content of the leak. It is only mentioned that the hacked GitLab server was used in the consulting division, and the company has taken necessary steps for investigation and recovery. Red Hat representatives assert that they have no reason to believe that the breach affected other services and products of the company, apart from one \u0441\u0435\u0440\u0432\u0435\u0440\u0430<\/a> GitLab. <\/p>\n

Shtes\u00eb: Kompania Red Hat publikoi nj\u00eb raport fillestar mbi incidentin. N\u00eb raport nuk jepen detaje, vet\u00ebm se kompania filloi nj\u00eb hetim, gjat\u00eb t\u00eb cilit u zbulua se nj\u00eb person i panjohur kishte aksesuar serverin GitLab, i cili p\u00ebrdoret p\u00ebr menaxhimin e projekteve t\u00eb ekipit t\u00eb Konsulenc\u00ebs Red Hat, dhe shkarkoi disa t\u00eb dh\u00ebna nga ai. <\/p>\n

Sa i p\u00ebrket t\u00eb dh\u00ebnave t\u00eb shkarkuara nga sulmuesi, thuhet se ato p\u00ebrfshinin specifikime projektesh, shembuj kodi dhe materiale informuese t\u00eb brendshme mbi sh\u00ebrbimet e konsulenc\u00ebs. N\u00eb k\u00ebt\u00eb faz\u00eb t\u00eb analiz\u00ebs s\u00eb incidentit, deritani nuk \u00ebsht\u00eb identifikuar ndonj\u00eb rrjedhje e t\u00eb dh\u00ebnave personale t\u00eb r\u00ebnd\u00ebsishme. <\/p>\n

Nuk sakt\u00ebsohet se si sulmuesi arriti t\u00eb aksesoj\u00eb serverin GitLab, por thuhet se n\u00eb sulm nuk u p\u00ebrdor vulnerabiliteti i zbuluar dje (CVE-2025-10725) n\u00eb OpenShift AI Service, i cili i lejon nj\u00eb p\u00ebrdoruesi t\u00eb autentifikuar, p.sh., nj\u00eb k\u00ebrkues q\u00eb p\u00ebrdor Jupyter notebook, t\u00eb marr\u00eb t\u00eb drejtat e administratorit t\u00eb klasterit, i cili ka akses t\u00eb plot\u00eb n\u00eb t\u00eb gjitha sh\u00ebrbimet, t\u00eb dh\u00ebnat dhe aplikacionet e nisura n\u00eb klaster, si dhe akses root n\u00eb nyjat e klasterit.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0425\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0430 Crimson Collective \u0437\u0430\u044f\u0432\u0438\u043b\u0430 \u043e \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043e\u0434\u043d\u043e\u043c\u0443 \u0438\u0437 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0445 GitLab-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Red Hat \u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0441 \u043d\u0435\u0433\u043e 570\u0413\u0411 \u0441\u0436\u0430\u0442\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0438\u0437 28 \u0442\u044b\u0441\u044f\u0447 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432. \u0421\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0435\u0433\u043e \u0432 \u0437\u0430\u0445\u0432\u0430\u0447\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u043e \u043e\u043a\u043e\u043b\u043e 800 CER-\u043e\u0442\u0447\u0451\u0442\u043e\u0432 (Customer Engagement Report), \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445 \u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 Red Hat, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0438\u0441\u044c \u043a\u043e\u043d\u0441\u0430\u043b\u0442\u0438\u043d\u0433\u043e\u0432\u044b\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-144091","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Thyerja e serverit t\u00eb brendsh\u00ebm GitLab t\u00eb Red Hat | ProHoster","description":"Grupi haker Crimson Collective deklaroi se kishin fituar aksesin n\u00eb nj\u00eb nga server\u00ebt e brendsh\u00ebm GitLab t\u00eb kompanis\u00eb Red Hat dhe shkarkuan 570GB t\u00eb dh\u00ebnash t\u00eb kompaktuara, q\u00eb p\u00ebrmbanin informacion nga 28 mij\u00eb depove.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/vzlom-vnutrennego-gitlab-servera-red-hat","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u0437\u043b\u043e\u043c \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e GitLab-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 Red Hat | ProHoster","og:description":"\u0425\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0430 Crimson Collective \u0437\u0430\u044f\u0432\u0438\u043b\u0430 \u043e \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043e\u0434\u043d\u043e\u043c\u0443 \u0438\u0437 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0445 GitLab-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Red Hat \u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0441 \u043d\u0435\u0433\u043e 570\u0413\u0411 \u0441\u0436\u0430\u0442\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0438\u0437 28 \u0442\u044b\u0441\u044f\u0447 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/vzlom-vnutrennego-gitlab-servera-red-hat","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-10-03T21:11:58+00:00","article:modified_time":"2025-10-03T21:11:58+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"144091","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-22 15:54:02","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 15:06:19","updated":"2026-02-22 15:54:02","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/144091","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=144091"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/144091\/revisions"}],"predecessor-version":[{"id":162511,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/144091\/revisions\/162511"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=144091"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=144091"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=144091"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}