Red Hat

Extortion group Crimson Collective claims it breached Red Hat's private GitHub repositories, stealing nearly 570GB from 28K projects; Red Hat confirms a breach

An extortion group calling itself the Crimson Collective claims to have breached Red Hat's private GitHub repositories …

Unit 42: open-source projects from Google, Microsoft, AWS, Red Hat, and others leaked GitHub auth tokens via GitHub Actions; GitHub chose not to fix the issues

Multiple high-profile open-source projects, including those from Google, Microsoft, AWS, and Red Hat, were found …

Researchers find malicious code in versions of the compression tool XZ Utils that were incorporated into Linux distributions from Red Hat, Debian, and others

Malicious code planted in xz Utils has been circulating for more than a month.  —  Researchers have found a malicious backdoor …

Red Hat's new source code policy doesn't violate the GPL itself but makes verifying the company's GPL compliance harder, angering the open-source community