The Crimson Collective threat group claimed a major victory in October by exfiltrating 570GB of data from Red Hat-managed GitLab servers. The breach affected numerous high-profile customers, including Nissan, whose vendor code repositories were exposed. This attack targeted the “brain” of corporate software development—source code. By stealing infrastructure settings and VPN configurations, attackers potentially set the stage for future backdoors. October proved that protecting the software development lifecycle (SDLC) is now as critical as protecting live data.