<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"
        xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
  <url>
    <loc>https://www.hackerposts.org/en/blog/google-gtig-llmjacking-cloud-ai-charges</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-04T00:00:00.000Z</news:publication_date>
      <news:title>Google: LLMjacking runs victims&apos; cloud AI bills past $1 million</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/gorbag-winrar-cve-2025-8088-beautystealer-ukraine</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-04T00:00:00.000Z</news:publication_date>
      <news:title>Gorbag reuses WinRAR CVE-2025-8088 to drop BeautyStealer in Ukraine</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/fr/blog/xen-xsa-523-cve-2026-102703-grant-copy</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-11-04T00:00:00.000Z</news:publication_date>
      <news:title>Xen XSA-523 : lecture/écriture arbitraire entre domaines via grant copy</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/android-security-bulletin-november-2026</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-03T00:00:00.000Z</news:publication_date>
      <news:title>Android&apos;s November 2026 bulletin fixes 200+ flaws, critical RCE</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/barracuda-esg-cve-2026-116606-chained-root</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-03T00:00:00.000Z</news:publication_date>
      <news:title>Barracuda chains CVE-2026-116606 and CVE-2026-111560 to root</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/btcpay-server-hot-wallet-drains-2-4-1</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-03T00:00:00.000Z</news:publication_date>
      <news:title>BTCPay Server hot wallets drained on 2.4.1 and earlier</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/cpguard-update-channel-supply-chain-backdoor</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-03T00:00:00.000Z</news:publication_date>
      <news:title>cPGuard update channel hijacked to backdoor Linux servers</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/mercado-bitcoin-breach-withdrawals-suspended</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-03T00:00:00.000Z</news:publication_date>
      <news:title>Mercado Bitcoin halts withdrawals after suspected $40M+ drain</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/siemens-iot2050-cve-2026-58115-node-red-exploited</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-03T00:00:00.000Z</news:publication_date>
      <news:title>Siemens IoT2050 Node-RED RCE (CVE-2026-58115) hit in the wild</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/trail-of-bits-codex-backport-kernel-cve</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-03T00:00:00.000Z</news:publication_date>
      <news:title>Trail of Bits uses Codex to backport fixes for 149 kernel CVEs</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/fr/blog/glpi-11-0-10-10-0-28-certfr-avi-1444</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-11-03T00:00:00.000Z</news:publication_date>
      <news:title>GLPI 11.0.10 et 10.0.28 corrigent un XSS et deux élévations</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/fr/blog/ivanti-connect-secure-certfr-avi-1442-exploite</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-11-03T00:00:00.000Z</news:publication_date>
      <news:title>Ivanti Connect Secure : trois failles activement exploitées</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/fr/blog/psqlodbc-18-00-0006-certfr-avi-1445</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-11-03T00:00:00.000Z</news:publication_date>
      <news:title>psqlODBC 18.00.0006 corrige 11 CVE dont deux injections SQL</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/fr/blog/qnap-qne-qsa-26-19-certfr-avi-1437</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-11-03T00:00:00.000Z</news:publication_date>
      <news:title>QNAP QNE (ADRA) : deux failles critiques liées à PHP2Shell</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/fr/blog/redmine-6-1-6-7-0-3-certfr-avi-1434</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-11-03T00:00:00.000Z</news:publication_date>
      <news:title>Redmine corrige cinq failles, dont une XSS et un ReDoS</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/fr/blog/traefik-ntlm-dos-certfr-avi-1439</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-11-03T00:00:00.000Z</news:publication_date>
      <news:title>Traefik : un déni de service déclenché par un en-tête NTLM</news:title>
    </news:news>
  </url>
</urlset>
