APT group HoneyMyte upgrades CoolClient: the backdoor gets a kernel-level Windows rootkit

Introduction CoolClient is a backdoor family attributed to the HoneyMyte APT group also known as Mustang Panda that has been used in their cyber-espionage campaigns targeting organizations across Asia and Russia. It supports such capabilities as keylogging, clipboard theft, credential harvesting,...

GO-2026-4479 vulnerabilities

Vulnerabilities for packages: spegel, livekit-server-fips, livekit-egress, kubo-fips, rke2-runtime-fips, telegraf, k3s, kubo, rke2-runtime, livekit-cli, ipfs-cluster-fips, livekit-server, op-geth, spegel-fips, ipfs-cluster...

GO-2020-0015 vulnerabilities

Vulnerabilities for packages: vt-cli, k3d...

GO-2026-5208 vulnerabilities

Vulnerabilities for packages: temporal-ui-server, kube-metrics-adapter-fips, temporal, temporal-fips, gotenberg, fq, kube-metrics-adapter, temporal-ui-server-fips, snyk-cli...

GO-2022-1059 vulnerabilities

Vulnerabilities for packages: terraform-provider-sendgrid, kubeflow, gitleaks, hey, k3d, grpcurl, php-fpmexporter, vt-cli, terraform-provider-sendgrid-fips, kubeflow-fips, dynamic-localpv-provisioner-fips, dynamic-localpv-provisioner, kube-state-metrics...

GO-2021-0113 vulnerabilities

Vulnerabilities for packages: terraform-provider-sendgrid, gitleaks, hey, k3d, vt-cli, terraform-provider-sendgrid-fips, dynamic-localpv-provisioner-fips, dynamic-localpv-provisioner...

GO-2026-4773 vulnerabilities

Vulnerabilities for packages: ferretdb, flux-operator-fips, gitlab-workhorse-ce, opencost, jaeger, opencost-fips, glab, gitlab-workhorse-ce-fips, osv-scanner, flux-operator, datadog-agent-fips, jaeger-fips, livekit-cli, datadog-agent...

GO-2026-4770 vulnerabilities

Vulnerabilities for packages: ferretdb, flux-operator-fips, gitlab-workhorse-ce, opencost, jaeger, opencost-fips, glab, gitlab-workhorse-ce-fips, osv-scanner, flux-operator, datadog-agent-fips, jaeger-fips, livekit-cli, datadog-agent...

GO-2024-2948 vulnerabilities

Vulnerabilities for packages: conftest-fips, kots, conftest, wolfictl, terragrunt, k9s, tfsec, terraform, tflint, trivy-fips, trivy, snyk-cli, grype, zot, kubescape, zarf...

GO-2024-3141 vulnerabilities

Vulnerabilities for packages: spire-server-fips, conftest-fips, kots, conftest, k8sgpt, policy-controller-fips, opa, spire-server, cosign, snyk-cli, tfsec, cosign-fips, policy-controller, zot, kubescape, zarf...

GO-2026-5954 vulnerabilities

Vulnerabilities for packages: cilium-cli, kube-vip, kube-vip-fips...

GO-2026-4736 vulnerabilities

Vulnerabilities for packages: cilium-cli, kube-vip, kube-vip-fips...

GO-2024-3071 vulnerabilities

Vulnerabilities for packages: cilium-fips, cilium-cli, hubble-ui-backend-fips, hubble, hubble-fips, hubble-ui, cilium...

GO-2024-3074 vulnerabilities

Vulnerabilities for packages: cilium-fips, cilium-cli, hubble-ui-backend-fips, hubble, hubble-fips, hubble-ui, cilium...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: zarf, kots, k8sgpt, cilium-cli, eksctl, zot, k9s, chartmuseum, up, kubevela, trivy, flux-helm-controller, helm-operator, kubescape, helm-push, flux-source-controller...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: k8ssandra-client, cilium-cli, flux-helm-controller-fips, pluto, eksctl, chart-testing-fips, trivy, zot, envoy-gateway-fips, helm-push, zarf, harbor-fips, linkerd2, kots, k8sgpt, kargo, linkerd2-fips, k8ssandra-client-fips, kuma, istio, trivy-operator-fips,...

GO-2025-3887 vulnerabilities

Vulnerabilities for packages: k8ssandra-client, cilium-cli, flux-helm-controller-fips, pluto, eksctl, chart-testing-fips, trivy, zot, envoy-gateway-fips, helm-push, zarf, harbor-fips, linkerd2, helm-set-status, kots, k8sgpt, trivy-operator, headlamp, nova-fips, kargo, linkerd2-fips,...

GO-2025-3892 vulnerabilities

Vulnerabilities for packages: tfsec, opentofu-fips, zot, zarf, kots, conftest, trivy-operator, terragrunt, xeol-fips, snyk-cli, grype-db, trivy-operator-fips, syft-fips, conftest-fips, terraform-fips, cloudbeat, rancher-fleet-fips, k9s-fips, grype-fips, opentofu, tflint, chainctl, cloudbeat-fips,...

GO-2026-5058 vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, tfsec, trivy, opentofu-fips, terragrunt-fips, chainctl-fips, zarf, zot, kots, conftest, trivy-operator, packer-fips, packer, terragrunt, xeol-fips, grype-db, crossplane-provider-terraform-fips, snyk-cli, task, syft-fips, trivy-operator-fips,...

GO-2026-5566 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, flux-source-controller-fips, flux-fips, kots, zarf, zarf-fips, helm-diff, cilium-cli, cert-manager-cmctl-fips, rancher-fleet-fips, rancher-fleet, gitlab-operator-fips, flux, kuma, helm-push, gitlab-operator, helm-diff-fips, flux-source-controller...