Consulting Git Repos as Attack Surface

A hacking group claims it exfiltrated 570 GB from a Red Hat consulting GitLab, potentially touching 28,000 customers including the U.S. Navy, FAA, and the House. Third‑party developer platforms often hold configs, credentials, and client artifacts, making them high‑value supply‑chain targets. Securing source‑control and CI/CD at vendors is now a front‑line national‑security issue. — It reframes government cybersecurity as dependent on vendor dev‑ops hygiene, implying procurement, auditing, and standards must explicitly cover third‑party code repositories.