<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"
        xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
  <url>
    <loc>https://www.hackerposts.org/en/blog/curl-cve-2026-92392-http2-use-after-free</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-14T00:00:00.000Z</news:publication_date>
      <news:title>curl patches HTTP/2 use-after-free that a PoC turned into RCE</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/doj-north-korea-it-worker-laptop-farms-14-charged</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-14T00:00:00.000Z</news:publication_date>
      <news:title>DOJ charges 14 over North Korean IT-worker laptop farms</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/ftc-digital-forensics-corp-belkin-sextortion-fraud</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-14T00:00:00.000Z</news:publication_date>
      <news:title>FTC sues Digital Forensics Corp over $60M sextortion-help fraud</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/ghostscript-cve-2026-39919-jpeg2000-pdf-rce</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-14T00:00:00.000Z</news:publication_date>
      <news:title>Ghostscript RCE via crafted PDF patched (CVE-2026-39919)</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/linux-vhost-cve-2026-74580-vm-escape</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-14T00:00:00.000Z</news:publication_date>
      <news:title>Linux vhost bug CVE-2026-74580 gives local root and a VM escape</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/microsoft-dcu-storm-2990-phishing-takedown</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-14T00:00:00.000Z</news:publication_date>
      <news:title>Microsoft, Health-ISAC seize domains behind 1B phishing messages</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/openai-insider-recording-device-alfozan-arrest</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-14T00:00:00.000Z</news:publication_date>
      <news:title>OpenAI engineer arrested over hidden office recording device</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/fr/blog/danfoss-ak-sm-refrigeration-cert-fr-ale-012</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-10-14T00:00:00.000Z</news:publication_date>
      <news:title>Le CERT-FR alerte sur des attaques contre les contrôleurs frigorifiques</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/fr/blog/patch-tuesday-octobre-2026-1411-failles</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-10-14T00:00:00.000Z</news:publication_date>
      <news:title>Patch Tuesday : Microsoft corrige 1 411 failles, une déjà exploitée</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/ahold-delhaize-cyberattack-systems-offline</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-13T00:00:00.000Z</news:publication_date>
      <news:title>Ahold Delhaize takes systems offline after cyberattack</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/docker-hub-cve-2026-105445-pat-transfer</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-13T00:00:00.000Z</news:publication_date>
      <news:title>Docker Hub CVE-2026-105445 let tokens impersonate repo owners</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/github-npm-trusted-publishing-slugfest</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-13T00:00:00.000Z</news:publication_date>
      <news:title>GitHub hardens npm trusted publishing after SlugFest flaw</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/ivanti-connect-secure-cve-2026-104935-zero-day-chain</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-13T00:00:00.000Z</news:publication_date>
      <news:title>Ivanti Connect Secure zero-days chained for root on patched VPN</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/lg-webos-smart-tv-preauth-root-typhoonpwn</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-13T00:00:00.000Z</news:publication_date>
      <news:title>LG webOS TVs: pre-auth root chain from the local network, no CVE yet</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/marklogic-cve-2026-85947-privilege-escalation</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-13T00:00:00.000Z</news:publication_date>
      <news:title>MarkLogic patches 31 flaws, 5 critical: privileged users can seize admin</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/microsoft-october-2026-patch-tuesday-1411-flaws</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-13T00:00:00.000Z</news:publication_date>
      <news:title>Microsoft&apos;s October Patch Tuesday fixes 1,411 flaws, one exploited</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/midnight-mimosa-android-preinstalled-malware</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-13T00:00:00.000Z</news:publication_date>
      <news:title>Midnight Mimosa: preinstalled malware on cheap Android phones, 150+ countries</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/sap-cloud-sdk-python-cve-2026-89111-oauth2-ssrf</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-13T00:00:00.000Z</news:publication_date>
      <news:title>SAP Cloud SDK for Python OAuth2 SSRF (CVE-2026-89111, CVSS 10.0)</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/xandr-microsoft-norway-grindr-92m-nok-fine</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-13T00:00:00.000Z</news:publication_date>
      <news:title>Norway fines Microsoft&apos;s Xandr 92M NOK over Grindr RTB data</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/fr/blog/anthropic-ia-auto-replication-botnets-iot</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-10-13T00:00:00.000Z</news:publication_date>
      <news:title>Anthropic teste l&apos;auto-réplication de modèles d&apos;IA sur l&apos;IoT</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/fr/blog/mongodb-certfr-2026-avi-1293-pilotes</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-10-13T00:00:00.000Z</news:publication_date>
      <news:title>MongoDB : 35 CVE dans les pilotes, le CERT-FR publie l&apos;AVI-1293</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/fr/blog/netapp-storagegrid-cve-2026-22056-certfr-avi-1295</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-10-13T00:00:00.000Z</news:publication_date>
      <news:title>NetApp StorageGRID : déni de service (CVE-2026-22056), CERT-FR AVI-1295</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/fr/blog/vacaf-revendication-fuite-aides-vacances-mineurs</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-10-13T00:00:00.000Z</news:publication_date>
      <news:title>VACAF : un vendeur revendique 1,2 million de dossiers d&apos;aides</news:title>
    </news:news>
  </url>
</urlset>
