CVE-2026-18381

A flaw was found in the koku-metrics-operator for Red Hat OpenShift. The operator's CostManagementMetricsConfig custom resource allows a user able to edit the CR to specify an arbitrary upload URL. The operator attaches its own Kubernetes service-account bearer token to queries sent to this...

CVE-2026-18381 Project-koku/koku-metrics-operator: koku-metrics-operator: operator service-account token exfiltration via user-controlled prometheus service_address

A flaw was found in the koku-metrics-operator for Red Hat OpenShift. The operator's CostManagementMetricsConfig custom resource allows a user able to edit the CR to specify an arbitrary upload URL. The operator attaches its own Kubernetes service-account bearer token to queries sent to this...

CVE-2026-18381

A flaw was found in the koku-metrics-operator for Red Hat OpenShift. The operator's CostManagementMetricsConfig custom resource allows a user able to edit the CR to specify an arbitrary upload URL. The operator attaches its own Kubernetes service-account bearer token to queries sent to this...

Hackers Exploit AnySign4PC via Hacked Korean Sites to Install Backdoors Without Prompts

South Korean authorities and four security firms have disclosed a state-sponsored campaign that compromised trusted domestic websites. The attackers used those sites to exploit locally installed financial-security software and infect targeted visitors with SIGNBT or COPPERHEDGE backdoors. A...

SilverFox Targets Japanese Manufacturer with 3-Driver BYOVD Chain and ValleyRAT

The Chinese cybercrime group known as Silver Fox has been observed using new drivers as part of bring your own vulnerable driver BYOVD attacks targeting a Japanese organization in the industrial manufacturing sector to ultimately deliver ValleyRAT aka Winos 4.0 for persistent remote access. "In...

MAL-2026-11195 Malicious code in phabricator-client (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43e718b20986295f99dd35066e46d0be5629555dccab79a1727cd3f5044cb7a0 phabricator-client 99.0.4 is a single-file PyPI package whose only runtime effect on import is to resolve lobohunter.duckdns.org and open a TCP...

Malicious code in phabricator-client (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43e718b20986295f99dd35066e46d0be5629555dccab79a1727cd3f5044cb7a0 phabricator-client 99.0.4 is a single-file PyPI package whose only runtime effect on import is to resolve lobohunter.duckdns.org and open a TCP...

FCC Blocks New Foreign-Produced Robots and Power Inverters Over Cyber Risks

The Federal Communications Commission FCC added foreign-produced mobile robots and networked power inverters to its Covered List on July 28. The move generally prevents new models from receiving the equipment authorization required for import, marketing, or sale in the US. Previously authorized...

CVE-2026-44097

A low-privileged remote attacker with "operator" access can upload arbitrary files via the REST endpoint intended for firmware updates, resulting in persistent storage of attacker-controlled files and potentially exhausting resources, which might lead to Denial-of-Service...

CLEANSTART-2026-QM93035 Security fixes in opensearch-k8s-operator-fips 2.6.1-r1

Package opensearch-k8s-operator-fips version 2.6.1-r1 fixes 20 vulnerabilities: CVE-2025-47911, CVE-2025-47912, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186...

CLEANSTART-2026-MB17646 Security fixes in istio-operator-fips 1.26.7-r0

Package istio-operator-fips version 1.26.7-r0 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...

CLEANSTART-2026-IJ01051 Security fixes in dynatrace-operator 1.8.1-r2

Package dynatrace-operator version 1.8.1-r2 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-SK73630 Security fixes in minio-operator-fips 6.0.4-r8

Package minio-operator-fips version 6.0.4-r8 fixes 9 vulnerabilities: CVE-2025-61726, CVE-2025-68119, CVE-2025-61728, CVE-2025-68121, CVE-2025-61731...

CLEANSTART-2026-HI24004 Security fixes in dynatrace-operator 1.9.0-r0

Package dynatrace-operator version 1.9.0-r0 fixes 2 vulnerabilities: ghsa-pc3f-x583-g7j2, CVE-2026-35469...

CLEANSTART-2026-WU83083 Security fixes in helm-operator 1.41.1-r0

Package helm-operator version 1.41.1-r0 fixes 10 vulnerabilities: CVE-2025-47912, CVE-2025-58183, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188...

CLEANSTART-2026-XG65805 Security fixes in minio-operator-fips 7.1.1-r8

Package minio-operator-fips version 7.1.1-r8 fixes 11 vulnerabilities: CVE-2025-61726, CVE-2026-25679, CVE-2026-27142, CVE-2025-68119, CVE-2025-61728...

CLEANSTART-2026-FE21216 Security fixes in fluent-operator-fips 3.4.0-r7

Package fluent-operator-fips version 3.4.0-r7 fixes 4 vulnerabilities: CVE-2026-27139, CVE-2025-61730, CVE-2025-61732, CVE-2026-27142...

CLEANSTART-2026-QI90911 Security fixes in thanos-operator-fips 0.3.7-r0

Package thanos-operator-fips version 0.3.7-r0 fixes 2 vulnerabilities: CVE-2025-61729, CVE-2025-61727...

CLEANSTART-2026-QJ30083 Security fixes in cass-operator 1.28.1-r1

Package cass-operator version 1.28.1-r1 fixes 2 vulnerabilities: ghsa-p77j-4mvh-x3m3, CVE-2026-33186...

CLEANSTART-2026-IM94158 Security fixes in pulumi-kubernetes-operator 0.18.0-r1

Package pulumi-kubernetes-operator version 0.18.0-r1 fixes 4 vulnerabilities: CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-1229...