diff --git a/images.go b/images.go
index 70268471..0ee514c3 100644
--- a/images.go
+++ b/images.go
@@ -11,7 +11,7 @@ func (i Image) Name() string {
 // Container image definitions
 const (
 	EtcdImage            = Image("ghcr.io/cybozu/etcd:3.5.13.1")
-	KubernetesImage      = Image("ghcr.io/cybozu/kubernetes:1.28.8.1")
+	KubernetesImage      = Image("ghcr.io/cybozu/kubernetes:1.28.10.1")
 	ToolsImage           = Image("ghcr.io/cybozu-go/cke-tools:1.28.0")
 	PauseImage           = Image("ghcr.io/cybozu/pause:3.9.0.5")
 	CoreDNSImage         = Image("ghcr.io/cybozu/coredns:1.11.1.3")
diff --git a/mtest/Makefile b/mtest/Makefile
index 62f0da44..3a3e15a6 100644
--- a/mtest/Makefile
+++ b/mtest/Makefile
@@ -3,7 +3,7 @@
 # tool versions
 MANAGEMENT_ETCD_VERSION = 3.5.13
 VAULT_VERSION = 1.16.0
-K8S_VERSION = 1.28.8
+K8S_VERSION = 1.28.10
 CONTAINERD_VERSION = 1.7.14
 CRITOOLS_VERSION = 1.29.0
 CT_VERSION = 0.9.3
diff --git a/sonobuoy/Makefile b/sonobuoy/Makefile
index 4b9eec45..8bb3a4a7 100644
--- a/sonobuoy/Makefile
+++ b/sonobuoy/Makefile
@@ -1,6 +1,6 @@
 ### Configurable variables
 SONOBUOY_VERSION = 0.57.1
-KUBECTL_VERSION = 1.28.8
+KUBECTL_VERSION = 1.28.10
 DOCKER_COMPOSE_VERSION = 2.26.1
 CT_VERSION = 0.9.3