{"id":144091,"date":"2025-10-03T23:11:58","date_gmt":"2025-10-03T21:11:58","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vzlom-vnutrennego-gitlab-servera-red-hat"},"modified":"2025-10-03T23:11:58","modified_gmt":"2025-10-03T21:11:58","slug":"vzlom-vnutrennego-gitlab-servera-red-hat","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/vzlom-vnutrennego-gitlab-servera-red-hat","title":{"rendered":"Haku n\u00eb serverin e brendsh\u00ebm GitLab t\u00eb Red Hat","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Grupi i hacker\u00ebve Crimson Collective njoftoi se kishte fituar akses n\u00eb nj\u00eb nga server\u00ebt e brendsh\u00ebm t\u00eb GitLab t\u00eb kompanis\u00eb Red Hat dhe kishte ngarkuar nga ai 570GB t\u00eb dh\u00ebnash t\u00eb kompresuara, q\u00eb p\u00ebrmbanin informacion nga 28 mij\u00eb repositor\u00eb. Nd\u00ebr t\u00eb tjera, n\u00eb t\u00eb dh\u00ebnat e kapura ishin rreth 800 raportet CER (Customer Engagement Report), q\u00eb p\u00ebrmbanin informacion t\u00eb ndjesh\u00ebm mbi platformat dhe infrastrukturen rrjetore t\u00eb klient\u00ebve t\u00eb Red Hat, t\u00eb cil\u00ebve iu ofruan sh\u00ebrbime konsulence. <\/p>\n

N\u00eb ekranet dhe shembujt t\u00eb paraqitur nga sulmuesit, p\u00ebrmendet marrja e t\u00eb dh\u00ebnave t\u00eb lidhura me rreth 800 klient\u00eb t\u00eb Red Hat, midis t\u00eb cil\u00ebve Vodafone, T-Mobile, Siemens, Boeing, Bosch, 3M, Cisco, DHL, Adobe, American Express, Verizon, JPMC, HSBC, Ericsson, Merrick Bank, Telefonica, Bank of America, Delta Air Lines, Walmart, Kaiser, IBM, SWIFT, IKEA dhe AT&T, si dhe Qendra e zhvillimit t\u00eb arm\u00ebve sip\u00ebrfaq\u00ebsore t\u00eb Marin\u00ebs s\u00eb SHBA, Administrata Federale e Aviacionit t\u00eb SHBA, Agjencia Federale p\u00ebr Menaxhimin e Emergjencave t\u00eb SHBA, Forcat Ajrore t\u00eb SHBA, Agjencia Komb\u00ebtare e Siguris\u00eb t\u00eb SHBA, Zyra e Patentave dhe Tregtis\u00eb s\u00eb SHBA, Senati i SHBA dhe Dhomat e P\u00ebrfaq\u00ebsuesve t\u00eb SHBA. <\/p>\n

Raportohet se repositor\u00ebt e kapur p\u00ebrmbajn\u00eb informacione mbi infrastruktur\u00ebn e klient\u00ebve, konfigurimin, token\u00ebt e autentifikimit, profilin, VPN<\/a>, t\u00eb dh\u00ebnat e inventarit, Ansible playbook, konfigurimet e platform\u00ebs OpenShift, CI\/CD runner-at, kopjet rezerv\u00eb dhe t\u00eb dh\u00ebna t\u00eb tjera q\u00eb mund t\u00eb p\u00ebrdoren p\u00ebr t\u00eb organizuar nj\u00eb sulm ndaj rrjeteve t\u00eb brendshme t\u00eb klient\u00ebve. Kriminel\u00ebt p\u00ebrpiqeshin t\u00eb lidhen me Red Hat p\u00ebr q\u00ebllime k\u00ebrc\u00ebnimi, por mor\u00ebn vet\u00ebm nj\u00eb p\u00ebrgjigje standarde me ofert\u00ebn p\u00ebr t\u00eb d\u00ebrguar nj\u00eb raport p\u00ebr dob\u00ebsin\u00eb n\u00eb sh\u00ebrbimin e siguris\u00eb. <\/p>\n

Kompania Red Hat e ka konfirmuar incidentin e siguris\u00eb, por nuk ka dh\u00ebn\u00eb detaje dhe nuk ka komentuar mbi informacionin rreth p\u00ebrmbajtjes s\u00eb t\u00ebrheqjes. P\u00ebmendet vet\u00ebm se serveri GitLab i hakuar ishte p\u00ebrdorur n\u00eb sektorin e konsultimeve dhe kompania ka nd\u00ebrmarr\u00eb hapat e nevojsh\u00ebm p\u00ebr t\u00eb hetuar dhe rikuperuar. P\u00ebrfaq\u00ebsuesit e Red Hat thon\u00eb se nuk kan\u00eb asnj\u00eb arsye p\u00ebr t\u00eb besuar se hakuar ka prekur sh\u00ebrbime dhe produkte t\u00eb tjera t\u00eb kompanis\u00eb p\u00ebrve\u00e7 nj\u00eb. serverit<\/a> GitLab. <\/p>\n

Shtes\u00eb: Kompania Red Hat publikoi nj\u00eb raport fillestar mbi incidentin. Detajet n\u00eb raport nuk jan\u00eb p\u00ebrmendur, vet\u00ebm se kompania ka filluar nj\u00eb hetim, gjat\u00eb t\u00eb cilit \u00ebsht\u00eb zbuluar se nj\u00eb i panjohur ka aksesuar serverin GitLab, i p\u00ebrdorur p\u00ebr menaxhimin e projekteve t\u00eb ekipit Red Hat Consulting, dhe ka shkarkuar disa t\u00eb dh\u00ebna prej tij. <\/p>\n

Sipas informacionit mbi t\u00eb dh\u00ebnat e shkarkuara nga sulmuesi, ato p\u00ebrmbanin specifikime projektesh, shembuj kodi dhe materiale t\u00eb brendshme informative mbi sh\u00ebrbimet e konsaltingut. N\u00eb k\u00ebt\u00eb faz\u00eb t\u00eb analiz\u00ebs s\u00eb incidentit, nuk \u00ebsht\u00eb zbuluar deri tani ndonj\u00eb rrjedhje e t\u00eb dh\u00ebnave t\u00eb r\u00ebnd\u00ebsishme personale. <\/p>\n

M\u00ebnyra se si sulmuesi arriti t\u00eb aksesoj\u00eb serverin GitLab nuk sakt\u00ebsohet, por \u00ebsht\u00eb e p\u00ebrmendur se n\u00eb sulm nuk u p\u00ebrdor dob\u00ebsia e zbuluar dje (CVE-2025-10725) n\u00eb OpenShift AI Service, e cila i lejon nj\u00eb p\u00ebrdoruesi t\u00eb autentikuar, pa privilegje, si\u00e7 \u00ebsht\u00eb nj\u00eb hulumtues q\u00eb p\u00ebrdor Jupyter notebook, t\u00eb fitoj\u00eb t\u00eb drejta administrator p\u00ebr klasterin, duke pasur akses t\u00eb plot\u00eb n\u00eb t\u00eb gjitha sh\u00ebrbimet, t\u00eb dh\u00ebnat dhe aplikacionet q\u00eb ekzekutohen n\u00eb klaster, si dhe akses root n\u00eb nyjet e klasterit.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0425\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0430 Crimson Collective \u0437\u0430\u044f\u0432\u0438\u043b\u0430 \u043e \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043e\u0434\u043d\u043e\u043c\u0443 \u0438\u0437 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0445 GitLab-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Red Hat \u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0441 \u043d\u0435\u0433\u043e 570\u0413\u0411 \u0441\u0436\u0430\u0442\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0438\u0437 28 \u0442\u044b\u0441\u044f\u0447 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432. \u0421\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0435\u0433\u043e \u0432 \u0437\u0430\u0445\u0432\u0430\u0447\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u043e \u043e\u043a\u043e\u043b\u043e 800 CER-\u043e\u0442\u0447\u0451\u0442\u043e\u0432 (Customer Engagement Report), \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445 \u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 Red Hat, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0438\u0441\u044c \u043a\u043e\u043d\u0441\u0430\u043b\u0442\u0438\u043d\u0433\u043e\u0432\u044b\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-144091","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47K\u00ebrcimi i serverit t\u00eb brendsh\u00ebm GitLab t\u00eb Red Hat | ProHoster","description":"Grupi i haker\u00ebve Crimson Collective shpalli se ka siguruar qasje n\u00eb nj\u00eb nga server\u00ebt e brendsh\u00ebm GitLab t\u00eb kompanis\u00eb Red Hat dhe ka shkarkuar 570GB t\u00eb dh\u00ebnash t\u00eb kompresuara, q\u00eb p\u00ebrmbajn\u00eb informacion nga 28 mij\u00eb depot. Nd\u00ebr t\u00eb tjera, n\u00eb t\u00eb dh\u00ebnat e kapura kishte rreth 800 raporte CER (Raporti i Angazhimit me Klientin), q\u00eb p\u00ebrmbanin informacione konfidenciale mbi platformat dhe infrastrukturat rrjetore t\u00eb klient\u00ebve t\u00eb Red Hat, t\u00eb cil\u00ebve u ishin ofruar konsultime","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/vzlom-vnutrennego-gitlab-servera-red-hat","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u0437\u043b\u043e\u043c \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e GitLab-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 Red Hat | ProHoster","og:description":"\u0425\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0430 Crimson Collective \u0437\u0430\u044f\u0432\u0438\u043b\u0430 \u043e \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043e\u0434\u043d\u043e\u043c\u0443 \u0438\u0437 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0445 GitLab-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Red Hat \u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0441 \u043d\u0435\u0433\u043e 570\u0413\u0411 \u0441\u0436\u0430\u0442\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0438\u0437 28 \u0442\u044b\u0441\u044f\u0447 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432. \u0421\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0435\u0433\u043e \u0432 \u0437\u0430\u0445\u0432\u0430\u0447\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u043e \u043e\u043a\u043e\u043b\u043e 800 CER-\u043e\u0442\u0447\u0451\u0442\u043e\u0432 (Customer Engagement Report), \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445 \u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 Red Hat, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0438\u0441\u044c \u043a\u043e\u043d\u0441\u0430\u043b\u0442\u0438\u043d\u0433\u043e\u0432\u044b\u0435","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/vzlom-vnutrennego-gitlab-servera-red-hat","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-10-03T21:11:58+00:00","article:modified_time":"2025-10-03T21:11:58+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"144091","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-22 15:54:02","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 15:06:19","updated":"2026-02-22 15:54:02"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/144091","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=144091"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/144091\/revisions"}],"predecessor-version":[{"id":162511,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/144091\/revisions\/162511"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=144091"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=144091"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=144091"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}