<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"
        xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
  <url>
    <loc>https://www.hackerposts.org/en/blog/apex-accelerator-npm-ref8801-ai-agent-hijack</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-19T00:00:00.000Z</news:publication_date>
      <news:title>Fake &apos;Apex&apos; Web3 accelerator seeds npm malware, hijacks AI agents</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/ets-california-student-records-sftp-breach</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-19T00:00:00.000Z</news:publication_date>
      <news:title>Stolen login exposes California student records at ETS</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/fortinet-peerstitch-fortijump-telecom-implant</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-19T00:00:00.000Z</news:publication_date>
      <news:title>PeerStitch implant hid in FortiGate after FortiJump breach</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/ghostaction-font-stealer-94-github-repos</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-19T00:00:00.000Z</news:publication_date>
      <news:title>GhostAction hides a credential stealer in a fake font file</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/opencode-console-breach-provider-api-keys</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-19T00:00:00.000Z</news:publication_date>
      <news:title>OpenCode breach may have exposed users&apos; AI provider keys</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/plex2shell-cve-2026-96652-exploited-in-wild</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-19T00:00:00.000Z</news:publication_date>
      <news:title>Plex2Shell chain exploited within a day of public PoC</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/rank-math-pro-cve-2026-111862-backdoor</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-19T00:00:00.000Z</news:publication_date>
      <news:title>Rank Math PRO 3.0.123 shipped a self-restoring backdoor</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/siemens-software-center-cve-2026-110936-clickfix</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-19T00:00:00.000Z</news:publication_date>
      <news:title>Siemens Software Center flaw abused in ClickFix attacks</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/fr/blog/exchange-maj-octobre-2026-endpoint-lookup</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-10-19T00:00:00.000Z</news:publication_date>
      <news:title>Exchange déstabilisé par les mises à jour Windows du 13 octobre</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/fr/blog/f5-nginx-certfr-2026-avi-1341-multiples-cve</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-10-19T00:00:00.000Z</news:publication_date>
      <news:title>F5 corrige 11 failles dans NGINX, dont des RCE critiques</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/anne-arundel-county-rhysida-data-breach</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-18T00:00:00.000Z</news:publication_date>
      <news:title>Anne Arundel County confirms breach; Rhysida claims 2.6TB</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/projectdiscovery-open-weight-model-backdoor-trigger-phrase</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-18T00:00:00.000Z</news:publication_date>
      <news:title>Backdoored open-weight model exfiltrates secrets on a trigger</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/siteguard-server-edition-cve-2026-106931-command-injection</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-18T00:00:00.000Z</news:publication_date>
      <news:title>SiteGuard WAF command injection CVE-2026-106931 exploited for root</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.hackerposts.org/en/blog/uat-11985-taiwan-google-aitm-phishing</loc>
    <news:news>
      <news:publication>
        <news:name>Hacker Posts</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-18T00:00:00.000Z</news:publication_date>
      <news:title>UAT-11985 phishes Taiwan researchers with Google AitM kit</news:title>
    </news:news>
  </url>
</urlset>
