MEDIUM 95% confidence advisory

Cluster API v1.12 Release Highlights

['Kubernetes Cluster API v1.12 introduces in-place updates and chained upgrades for smoother cluster management.', 'Enhancements in Kubernetes Cluster API.

['In-place updates and chained upgrades provide a more flexible and efficient way to manage Kubernetes cluster lifecycle without requiring unnecessary downtime or resource re-allocation, making it easier for operators to

Kubernetes Operators

action items (2)

• Upgrade Kubernetes clusters using Cluster API to version v1.12 or higher
• Review documentation on new features like in-place updates and chained upgrades

Kubernetes Blog · 2026-02-20T03:00

MEDIUM 85% confidence general

File Integrity Monitoring with AWS SSM & Security Lake

['Highly scalable file integrity monitoring using AWS Systems Manager and Security Lake for real-time alerts and security compliance.'] Includes severity, confi

['Operators need real-time alerts for security compliance and incident response, provided by the integration of AWS Systems Manager Inventory and Amazon Security Lake.']

AWS Operators

action items (2)

• Configure AWS Systems Manager Inventory to collect file metadata
• Integrate Amazon Security Lake for real-time alerting

AWS Security Blog · 2026-02-20T03:00

CRITICAL 95% confidence cve

Fortinet Addresses Exploitation of Authentication Bypass Vulnerability CVE-2026-24858

CISA warns of ongoing exploitation targeting FortiCloud SSO in FortiOS and related products. Apply updates to mitigate authentication bypass vulnerability.

['Authentication bypass vulnerability allows unauthorized access to systems', 'Previously patched vulnerabilities did not fully address this issue']

network security appliancesfirewalls

action items (2)

• Review logs for signs of exploitation
• Update affected devices immediately

CISA Current Activity · 2026-02-20T02:59

CRITICAL 95% confidence outage

Ingress NGINX Retirement: Critical Migration Alert

Kubernetes will retire Ingress NGINX in March 2026. Begin migration to alternatives like Gateway API or third-party controllers immediately. Includes severity,

['Project lacks maintainers and contributors.', 'Security risks increase without regular updates.', 'Technical debt and design flaws render it unsustainable.']

Kubernetes usersCloud native environments

action items (3)

• Check clusters for Ingress NGINX usage.
• Begin planning migration now.
• Monitor for new vulnerabilities after retirement.

Kubernetes Blog · 2026-02-20T02:59

HIGH 95% confidence cve

CISA Adds CVE-2026-1281 to KEV Catalog

['CISA adds Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability (CVE-2026-1281) to its Known Exploited Vulnerabilities Catalog, emphasizing risk.

['This type of vulnerability is a common entry point for malicious cyber actors and poses significant risks to federal networks.', "CISA's action underscores the necessity of timely remediation for known exploited vulner

Federal Civilian Executive Branch (FCEB) agenciesAll organizations

action items (2)

• Review the CISA KEV Catalog for additional vulnerabilities requiring mitigation.
• Ensure compliance with BOD 22-01 for federal agencies, prioritize remediation accordingly.

CISA Current Activity · 2026-02-20T02:59