<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"
        xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
  <url>
    <loc>https://www.hackerposts.org/en/blog/agents-md-downloads-folder-ai-agent-hijack</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-25T00:00:00.000Z</news:publication_date>
      <news:title>Malicious AGENTS.md in Downloads hijacks AI coding agents</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/brotli-cve-2026-111497-ecosystem-bun-python-envoy</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-25T00:00:00.000Z</news:publication_date>
      <news:title>Brotli decoder RCE (CVE-2026-111497) spans Bun, Python, Envoy</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/fr/blog/chimeraz-renaissance-lfi-pcf-fuites-partis</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-10-25T00:00:00.000Z</news:publication_date>
      <news:title>ChimeraZ revendique des fuites visant Renaissance, LFI et le PCF</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/fr/blog/papercut-ngmf-rce-certfr-2026-avi-1377</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-10-25T00:00:00.000Z</news:publication_date>
      <news:title>PaperCut corrige deux RCE dans NG/MF (CERT-FR AVI-1377)</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/fr/blog/point-vision-fuite-donnees-patients-rdv</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-10-25T00:00:00.000Z</news:publication_date>
      <news:title>Point Vision : vol de données patients via un prestataire de rendez-vous</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/blackx-uefi-bootkit-apt41-baton-drop</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-24T00:00:00.000Z</news:publication_date>
      <news:title>BlackX UEFI bootkit bypasses Secure Boot via Baton Drop</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/inc-gentlemen-phantom-ai-ransomware-framework</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-24T00:00:00.000Z</news:publication_date>
      <news:title>INC and Gentlemen affiliates ran AI intrusion framework Phantom</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/k0t-fortigate-globalprotect-70k-credentials</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-24T00:00:00.000Z</news:publication_date>
      <news:title>k0t campaign exposes 70,000+ FortiGate, GlobalProtect credentials</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/nodejs-cve-2026-111497-brotli-rce-node2shell</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-24T00:00:00.000Z</news:publication_date>
      <news:title>Node.js patches Brotli decoder RCE (CVE-2026-111497); PoC public</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/sandworm-uac-0099-mythicratatoskr-yggdrasil</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-24T00:00:00.000Z</news:publication_date>
      <news:title>MythicRatatoskr: Sandworm backdoor uses Yggdrasil mesh for C2</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/time4popcorn-cve-2026-30612-updater-rce</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-24T00:00:00.000Z</news:publication_date>
      <news:title>Time4Popcorn updater flaw exposed millions to RCE (CVE-2026-30612)</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/fr/blog/capcom-id-breach-11-7m-accounts</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-10-24T00:00:00.000Z</news:publication_date>
      <news:title>Capcom confirme une fuite CAPCOM ID : 11,7 millions de comptes</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/fr/blog/deepseek-interdit-agences-federales-us</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-10-24T00:00:00.000Z</news:publication_date>
      <news:title>DeepSeek banni des agences fédérales civiles américaines par le DHS</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/fr/blog/quad9-blocage-dns-bein-depart-france</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-10-24T00:00:00.000Z</news:publication_date>
      <news:title>Quad9 quitte la France le 24 novembre après un jugement sur le blocage DNS</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/fr/blog/signal-ringrtc-cve-2026-113380-raccrochage</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-10-24T00:00:00.000Z</news:publication_date>
      <news:title>Signal corrige RingRTC : raccrocher ne coupait pas l&apos;appel (CVE-2026-113380)</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/fr/blog/zdi-six-failles-noyau-linux-listes-publiques</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-10-24T00:00:00.000Z</news:publication_date>
      <news:title>Six failles du noyau Linux divulguées sur des listes publiques par la ZDI</news:title>
    </news:news>
  </url>
</urlset>
