Red Hat Consulting GitLab breached: ~800 customer engagement reports stolen
Teaser from the source
The Crimson Collective broke into a self-managed GitLab instance used by Red Hat Consulting and claimed about 570 GB from 28,000 repos, including roughly 800 Customer Engagement Reports with infrastructure, config and credential details. Red Hat confirmed the access and said its products, supply chain and hosted services were not affected. ShinyHunters later joined the extortion.
This is the RSS-feed teaser. Read the full article at the original source.
Read at pwn.watchMore on GitLab
Other advisories
- CriticalCVE-2026-105458GitLab: Mehrere Schwachstellen
- HighCVE-2026-16255Incorrect Authorization in GitLab
- HighCVE-2026-15723Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') in GitLab
- LowCVE-2026-14288Use of Incorrectly-Resolved Name or Reference in GitLab
- MediumCVE-2026-13319Authorization Bypass Through User-Controlled Key in GitLab
- MediumCVE-2026-12664Incorrect Authorization in GitLab
- MediumCVE-2026-112378Use of Less Trusted Source in GitLab
- LowCVE-2026-112326Improper Cleanup on Thrown Exception in GitLab
Other news entries
- Dringend patchen: 11.000 Gitlab-Instanzen durch laufende Angriffe gefährdetNewsGolem.de — Security
- Over 1,000 GitLab servers vulnerable to ongoing RCE attacksNewsBleepingComputer
- GitBook breach: SSO flaw led to production access; all API tokens revoked, rotate integration secretsBreachpwn.watch
- Alpine Linux rebuilds GitLab after attempted RCE attackNewsBleepingComputer
- CISA says max severity GitLab flaw now exploited in the wildNewsBleepingComputer
- Angriff auf Ruby-Lücke: Alpine Linux muss Gitlab-Instanz komplett neu aufsetzenNewsGolem.de — Security
- Max-Severity GitLab Vulnerability Exploited Against Alpine LinuxNewsSecurityWeek
- Cisco-Firewalls und GitLab-Lücke werden angegriffenNewsheise Security
Source: https://pwn.watch/i/red-hat-consulting-gitlab-breach-october-2025
ID