<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"
        xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
  <url>
    <loc>https://www.hackerposts.org/en/blog/adobe-commerce-magento-cve-2026-103849-template-rce</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-16T00:00:00.000Z</news:publication_date>
      <news:title>Adobe patches CVSS 10 Magento RCE (CVE-2026-103849)</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/aomei-backupper-update-server-supply-chain-unc7017</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-16T00:00:00.000Z</news:publication_date>
      <news:title>AOMEI Backupper update servers hijacked to push a backdoor</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/bae-systems-bnc-bankruptcy-court-notices-incident</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-16T00:00:00.000Z</news:publication_date>
      <news:title>BAE security incident halts US bankruptcy court notices</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/beyondtrust-remote-support-cve-2026-102764-china-zero-day</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-16T00:00:00.000Z</news:publication_date>
      <news:title>BeyondTrust patches Remote Support zero-day exploited since August</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/proxyware-dlink-ubiquiti-sap-greynoise</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-16T00:00:00.000Z</news:publication_date>
      <news:title>Proxyware crew hijacks D-Link, Ubiquiti, SAP via old CVEs</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/uk-legal-aid-agency-breach-records-1978</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-16T00:00:00.000Z</news:publication_date>
      <news:title>UK Legal Aid breach wider than first said, records to 1978</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/fr/blog/cnil-reconstitution-adresses-email-professionnelles</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-10-16T00:00:00.000Z</news:publication_date>
      <news:title>La CNIL encadre la reconstitution d&apos;adresses email professionnelles</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/fr/blog/juniper-junos-certfr-2026-avi-1322</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-10-16T00:00:00.000Z</news:publication_date>
      <news:title>Juniper : RCE sur SRX en ADVPN et injection de commandes sur MX</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/fr/blog/les-republicains-defacement-site-17-octobre</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-10-16T00:00:00.000Z</news:publication_date>
      <news:title>Le site des Républicains défacé à la veille du 17 octobre</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/fr/blog/moodle-certfr-2026-avi-1318</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-10-16T00:00:00.000Z</news:publication_date>
      <news:title>Moodle corrige trois failles : contournement et XSS</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/fr/blog/symfony-certfr-2026-avi-1324</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-10-16T00:00:00.000Z</news:publication_date>
      <news:title>Symfony corrige trois CVE de déni de service à distance</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/arch-aur-typosquat-yay-paru-root-malware</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-15T00:00:00.000Z</news:publication_date>
      <news:title>Fake Arch AUR packages impersonate yay and paru, run as root</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/candiru-adfection-al-jazeera-zero-click-ads</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-15T00:00:00.000Z</news:publication_date>
      <news:title>Candiru spyware reached Al Jazeera through zero-click ads</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/centerpoint-energy-breach-1m-texans</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-15T00:00:00.000Z</news:publication_date>
      <news:title>CenterPoint Energy breach hits 1M+ Texans, utility confirms</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/drupal-cve-2026-108097-field-ui-rce</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-15T00:00:00.000Z</news:publication_date>
      <news:title>Drupal patches critical Field UI RCE reachable via modules</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/langflow-cve-2026-105740-mcp-stdio-rce</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-15T00:00:00.000Z</news:publication_date>
      <news:title>Langflow MCP stdio RCE exploited in the wild, fix in 1.9.0</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/nextjs-cve-2026-96889-use-cache-svg-rce</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-15T00:00:00.000Z</news:publication_date>
      <news:title>Next.js ships out-of-band fix for two critical RCE flaws</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/nginx-cve-2026-97629-tls-session-five-flaws</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-15T00:00:00.000Z</news:publication_date>
      <news:title>NGINX fixes five flaws, including a TLS client-cert bypass</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/olvx-marketplace-north-macedonia-charged</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-15T00:00:00.000Z</news:publication_date>
      <news:title>OLVX marketplace admin charged in North Macedonia</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/palo-alto-pan-os-cve-2026-0322-management-rce</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-15T00:00:00.000Z</news:publication_date>
      <news:title>Palo Alto patches exploited PAN-OS RCE CVE-2026-0322</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/uat-6275-winrar-cve-2025-8088-cis-government</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-15T00:00:00.000Z</news:publication_date>
      <news:title>UAT-6275 weaponizes WinRAR CVE-2025-8088 against CIS governments</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/fr/blog/candiru-adfection-al-jazeera-zero-click-ads</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-10-15T00:00:00.000Z</news:publication_date>
      <news:title>Candiru : un espiogiciel zéro-clic livré par la publicité ciblée</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/fr/blog/microsoft-dcu-storm-2990-phishing-takedown</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-10-15T00:00:00.000Z</news:publication_date>
      <news:title>Microsoft et Proofpoint perturbent un écosystème de phishing chinois</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/fr/blog/palo-alto-pan-os-cve-2026-0322-management-rce</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-10-15T00:00:00.000Z</news:publication_date>
      <news:title>Palo Alto : RCE PAN-OS CVE-2026-0322 activement exploitée</news:title>
    </news:news>
  </url>
</urlset>
