<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"
        xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
  <url>
    <loc>https://www.hackerposts.org/en/blog/php2shell-cve-2026-109618-unit42-lazarus</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-26T00:00:00.000Z</news:publication_date>
      <news:title>PHP2Shell: Unit 42 pulls European-agency claim as scanning spreads</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/tailscale-tailworm-ssh-forwarding-root</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-26T00:00:00.000Z</news:publication_date>
      <news:title>&quot;Tailworm&quot; report alleges root escalation via Tailscale SSH forwarding</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/agents-md-downloads-folder-ai-agent-hijack</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-25T00:00:00.000Z</news:publication_date>
      <news:title>Malicious AGENTS.md in Downloads hijacks AI coding agents</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/brotli-cve-2026-111497-ecosystem-bun-python-envoy</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-25T00:00:00.000Z</news:publication_date>
      <news:title>Brotli decoder RCE (CVE-2026-111497) spans Bun, Python, Envoy</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/fr/blog/chimeraz-renaissance-lfi-pcf-fuites-partis</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-10-25T00:00:00.000Z</news:publication_date>
      <news:title>ChimeraZ revendique des fuites visant Renaissance, LFI et le PCF</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/fr/blog/papercut-ngmf-rce-certfr-2026-avi-1377</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-10-25T00:00:00.000Z</news:publication_date>
      <news:title>PaperCut corrige deux RCE dans NG/MF (CERT-FR AVI-1377)</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/fr/blog/point-vision-fuite-donnees-patients-rdv</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-10-25T00:00:00.000Z</news:publication_date>
      <news:title>Point Vision : vol de données patients via un prestataire de rendez-vous</news:title>
    </news:news>
  </url>
</urlset>
