<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"
        xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
  <url>
    <loc>https://www.hackerposts.org/en/blog/chrome-searchjacked-319-extensions-socket</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-29T00:00:00.000Z</news:publication_date>
      <news:title>Chrome extensions hijack searches for 13.4M users, Socket finds</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/cisco-asa-ftd-cve-2026-76418-ssl-vpn-dos-zero-day</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-29T00:00:00.000Z</news:publication_date>
      <news:title>Cisco patches exploited ASA/FTD SSL VPN zero-day (CVE-2026-76418)</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/dhs-icepick-leak-41000-ddosecrets</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-29T00:00:00.000Z</news:publication_date>
      <news:title>Hacktivists leak data on 41,000 DHS staff via DDoSecrets</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/fragnesia-cve-2026-46300-linux-kernel-kev</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-29T00:00:00.000Z</news:publication_date>
      <news:title>CISA adds Linux kernel &apos;Fragnesia&apos; flaw (CVE-2026-46300) to KEV</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/gm-220m-driver-data-settlement-36-states</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-29T00:00:00.000Z</news:publication_date>
      <news:title>GM to pay $220M to 36 states over Smart Driver data sales</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/japan-airlines-amadeus-breach-92000</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-29T00:00:00.000Z</news:publication_date>
      <news:title>Japan Airlines breach via Amadeus hits 92,000 flyers</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/keydrift-cisco-sd-wan-cve-2026-20127-talos</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-29T00:00:00.000Z</news:publication_date>
      <news:title>Talos details KeyDrift malware stealing Cisco SD-WAN encryption keys</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/linux-cve-2026-98432-tcp-ireq-opt-uaf</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-29T00:00:00.000Z</news:publication_date>
      <news:title>Linux patches TCP use-after-free CVE-2026-98432; severity disputed</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/virtualine-bulletproof-hosting-seized-doj</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-29T00:00:00.000Z</news:publication_date>
      <news:title>DOJ and EU police seize Virtualine bulletproof host</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/vmware-esx-cve-2026-41709-kev-warp-panda</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-29T00:00:00.000Z</news:publication_date>
      <news:title>CISA adds VMware ESX logging flaw to KEV after China-nexus abuse</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/fr/blog/cisco-asa-ftd-cve-2026-76418-certfr-avi-1412</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-10-29T00:00:00.000Z</news:publication_date>
      <news:title>Cisco ASA/FTD : zero-day DoS activement exploité (CVE-2026-76418)</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/fr/blog/cnil-fnac-darty-san-2026-015-cookies-7-millions</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-10-29T00:00:00.000Z</news:publication_date>
      <news:title>Cookies sans consentement : la CNIL sanctionne Fnac Darty de 7 M€</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/fr/blog/docker-desktop-certfr-avi-1401-cve-2026-114409</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-10-29T00:00:00.000Z</news:publication_date>
      <news:title>Docker Desktop : secrets en clair et pile réseau de la VM (AVI-1401)</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/fr/blog/metabase-certfr-avi-1403-ghsa-v44v</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-10-29T00:00:00.000Z</news:publication_date>
      <news:title>Metabase : correctif critique de sécurité en 64.3.4 (AVI-1403)</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/fr/blog/palo-alto-pan-os-cve-2026-109618-109619-certfr-avi-1402</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-10-29T00:00:00.000Z</news:publication_date>
      <news:title>PAN-OS : deux failles RCE activement exploitées (CVE-2026-109618/109619)</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/adobe-campaign-classic-apsb26-162-rce</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-28T00:00:00.000Z</news:publication_date>
      <news:title>Adobe patches eight critical Campaign Classic flaws, four at 9.9</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/anthropic-claude-model-exploit-chaining-browsers-os</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-28T00:00:00.000Z</news:publication_date>
      <news:title>Anthropic says an internal model chained exploits across Chrome and kernels</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/brotli-cve-2026-111497-cisa-kev-exploited</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-28T00:00:00.000Z</news:publication_date>
      <news:title>CISA adds Brotli CVE-2026-111497 (Node2Shell) to KEV as exploited</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/convertr-plausible-magecart-skimmer-brazil</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-28T00:00:00.000Z</news:publication_date>
      <news:title>Brazilian Magecart crew skims Convertr checkouts via Plausible</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/denver-health-squareml-key-leak-238000</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-28T00:00:00.000Z</news:publication_date>
      <news:title>Leaked SquareML key exposed 238,083 Denver Health Plan members</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/edk2-uefi-cve-2026-97631-pxe-preboot-rce</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-28T00:00:00.000Z</news:publication_date>
      <news:title>EDK II CVE-2026-97631: pre-boot overflow in the UEFI PXE driver</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/gmo-onamae-data-leak-50m-ransom-refused</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-28T00:00:00.000Z</news:publication_date>
      <news:title>GMO refuses $50M ransom as Onamae attacker leaks data</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/microsoft-authenticator-cve-2026-80097-android-tokens</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-28T00:00:00.000Z</news:publication_date>
      <news:title>Microsoft Authenticator flaw let any Android app grab work tokens</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/nefilim-hive-affiliate-stryzhak-70-months</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-28T00:00:00.000Z</news:publication_date>
      <news:title>Nefilim and Hive affiliate Stryzhak gets 70 months</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/ofac-sanctions-dprk-it-worker-facilitators</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-28T00:00:00.000Z</news:publication_date>
      <news:title>OFAC sanctions 10 over DPRK IT-worker fraud and laundering</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/oracle-ebs-cve-2026-101767-sqli-rce</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-28T00:00:00.000Z</news:publication_date>
      <news:title>Oracle EBS CVE-2026-101767: unauth SQLi to RCE, decoys already hit</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/project-zero-fuzzilli-vs-bigsleep-v8</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-28T00:00:00.000Z</news:publication_date>
      <news:title>Project Zero pits Fuzzilli against BigSleep on V8 bugs</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/sony-so-net-plala-breach-2-5m-records</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-28T00:00:00.000Z</news:publication_date>
      <news:title>Sony&apos;s So-net ISP breach exposes 2.58M customer records</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/volt-typhoon-silent-train-black-lotus-labs</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-28T00:00:00.000Z</news:publication_date>
      <news:title>Volt Typhoon ran four zero-days through &apos;Silent Train&apos; relays</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/fr/blog/apple-certfr-2026-avi-1387-cve-2026-86950</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-10-28T00:00:00.000Z</news:publication_date>
      <news:title>Apple : le CERT-FR relaie une faille déjà exploitée (CVE-2026-86950)</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/fr/blog/edk2-uefi-cve-2026-97631-pxe-preboot-rce</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-10-28T00:00:00.000Z</news:publication_date>
      <news:title>EDK II CVE-2026-97631 : débordement pré-boot dans le pilote PXE UEFI</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/fr/blog/glpi-11-0-9-10-0-27-certfr-avi-1389</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-10-28T00:00:00.000Z</news:publication_date>
      <news:title>GLPI : sept avis corrigés en 11.0.9 et 10.0.27</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/fr/blog/netscaler-php2shell-certfr-avi-1394</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-10-28T00:00:00.000Z</news:publication_date>
      <news:title>NetScaler ADC et Gateway touchés par les failles PHP2Shell</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/fr/blog/palo-alto-pan-os-brotli-cve-2026-111497</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-10-28T00:00:00.000Z</news:publication_date>
      <news:title>La faille Brotli CVE-2026-111497 atteint PAN-OS</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/fr/blog/samba-cve-2026-109411-certfr-avi-1400</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-10-28T00:00:00.000Z</news:publication_date>
      <news:title>Samba : contournement d&apos;accès via vfs_ceph_rgw (CVE-2026-109411)</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/fr/blog/veeam-certfr-avi-1399-neuf-cve</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-10-28T00:00:00.000Z</news:publication_date>
      <news:title>Veeam corrige neuf failles, dont une critique (CVE-2026-108142)</news:title>
    </news:news>
  </url>
</urlset>
