diff --git a/Dockerfile b/Dockerfile
index 78ddcff754ddfcc9a3f24a60a764378508d97fe2..cfcaf8a89586b19d1a9d33ee44abd7ab4a9b10a0 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,6 +1,6 @@
 ARG BASE_REGISTRY=registry1.dso.mil
 ARG BASE_IMAGE=redhat/ubi/ubi8
-ARG BASE_TAG=8.6
+ARG BASE_TAG=8.7
 
 FROM ${BASE_REGISTRY}/${BASE_IMAGE}:${BASE_TAG}
 
diff --git a/hardening_manifest.yaml b/hardening_manifest.yaml
index 4a56379012e417318083a55ca9fea7564aa0c3f7..b3cc5bd56b5937cc4a1e3e6f9c93b470689d871c 100644
--- a/hardening_manifest.yaml
+++ b/hardening_manifest.yaml
@@ -8,13 +8,13 @@ name: "confluentinc/confluent-operator"
 # The most specific version should be the first tag and will be shown
 # on ironbank.dso.mil
 tags:
-- "0.435.40"
+- "0.435.67"
 - "0.435"
 
 # Build args passed to Dockerfile ARGs
 args:
   BASE_IMAGE: "redhat/ubi/ubi8"
-  BASE_TAG: "8.6"
+  BASE_TAG: "8.7"
 
 # Docker image labels
 labels:
@@ -23,14 +23,14 @@ labels:
   org.opencontainers.image.licenses: "CONFLUENT ENTERPRISE LICENSE"
   org.opencontainers.image.url: "https://docs.confluent.io/current/installation/operator/index.html"
   org.opencontainers.image.vendor: "Confluent"
-  org.opencontainers.image.version: "0.435.40"
+  org.opencontainers.image.version: "0.435.67"
   mil.dso.ironbank.image.keywords: "confluent,kafka,zookeeper,operator"
   mil.dso.ironbank.image.type: "commercial"
   mil.dso.ironbank.product.name: "Confluent Platform"
 
 resources:
 - filename: manager
-  url: https://ironbank-files.s3.amazonaws.com/confluent-operator-0.435.40_OptManager
+  url: https://ironbank-files.s3.amazonaws.com/confluent-operator-0.435.67_OptManager
   validation:
     type: sha256
     value: 97d7cfbc948b12396115acacb2e60dfd6b832461d4afda03840069ab72fedebd