<?xml version="1.0" encoding="UTF-8"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9"><url><loc>https://malwarechronicle.com/category/cyber-attacks/verify-ai-model-integrity-after-hugging-face-hack/</loc><news:news><news:publication><news:name>Malware Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-15T15:39:55Z</news:publication_date><news:title>Verify AI Model Integrity After Hugging Face Hack</news:title></news:news></url><url><loc>https://malwarechronicle.com/category/vulnerabilities/update-wavlink-wl-wn530be2-a-firmware-to-block/</loc><news:news><news:publication><news:name>Malware Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-15T15:19:06Z</news:publication_date><news:title>Update Wavlink WL-WN530BE2-A Firmware to Block CVE-2026-110957 Login Handler RCE</news:title></news:news></url><url><loc>https://malwarechronicle.com/category/cyber-attacks/prompt-injection-flaw-in-eval-sandbox-led-to-api/</loc><news:news><news:publication><news:name>Malware Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-15T07:10:29Z</news:publication_date><news:title>Prompt Injection Flaw in Eval Sandbox Led to API Key Theft and Attacks on 30 Labs</news:title></news:news></url><url><loc>https://malwarechronicle.com/category/vulnerabilities/upgrade-s2n-tls-to-v1-7-6-to-patch-cve-2026-16317/</loc><news:news><news:publication><news:name>Malware Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-15T04:55:58Z</news:publication_date><news:title>Upgrade s2n-tls to v1.7.6 to patch CVE-2026-16317/18 QUIC memory exhaustion and TLS 1.3 record drop flaws</news:title></news:news></url><url><loc>https://malwarechronicle.com/category/vulnerabilities/upgrade-fearlesscms-to-0-1-3b-to-stop-unverified/</loc><news:news><news:publication><news:name>Malware Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-15T03:46:41Z</news:publication_date><news:title>Upgrade FearlessCMS to 0.1.3b to stop unverified Git repos from executing arbitrary PHP code</news:title></news:news></url><url><loc>https://malwarechronicle.com/category/threat-intel/verify-government-email-sources-as-tag-193/</loc><news:news><news:publication><news:name>Malware Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-15T03:12:47Z</news:publication_date><news:title>Verify Government Email Sources as TAG-193 Targets CIS Agencies</news:title></news:news></url><url><loc>https://malwarechronicle.com/category/vulnerabilities/patch-hitachi-remote-ops-agent-to-2-0-to-stop/</loc><news:news><news:publication><news:name>Malware Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-15T00:40:30Z</news:publication_date><news:title>Patch Hitachi Remote Ops Agent to 2.0 to Stop Critical Account Hijack via Unrestricted Reset Codes</news:title></news:news></url><url><loc>https://malwarechronicle.com/category/vulnerabilities/patch-better-auth-to-1-7-7-to-stop-oauth-account/</loc><news:news><news:publication><news:name>Malware Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-15T00:30:46Z</news:publication_date><news:title>Patch Better Auth to 1.7.7 to Stop OAuth Account Takeover</news:title></news:news></url><url><loc>https://malwarechronicle.com/category/vulnerabilities/patch-wegia-sqli-flaw-critical-cve-2026-55683/</loc><news:news><news:publication><news:name>Malware Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T20:02:03Z</news:publication_date><news:title>Patch WeGIA SQLi Flaw: Critical CVE-2026-55683 Threatens Billing Data in Versions Before 3.8.6</news:title></news:news></url><url><loc>https://malwarechronicle.com/category/vulnerabilities/patch-nodejs-whisper-to-block-os-command/</loc><news:news><news:publication><news:name>Malware Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T15:46:32Z</news:publication_date><news:title>Patch nodejs-whisper to Block OS Command Injection in Audio Processing</news:title></news:news></url><url><loc>https://malwarechronicle.com/category/vulnerabilities/patch-net-core-8-11-to-fix-high-severity-dos-in/</loc><news:news><news:publication><news:name>Malware Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T14:21:01Z</news:publication_date><news:title>Patch .NET Core 8-11 to Fix High-Severity DoS in DateTime Parsing</news:title></news:news></url><url><loc>https://malwarechronicle.com/category/vulnerabilities/patch-net-8-11-on-unix-to-stop-local-symlink/</loc><news:news><news:publication><news:name>Malware Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T14:21:01Z</news:publication_date><news:title>Patch .NET 8-11 on Unix to stop local symlink attacks from elevating privileges</news:title></news:news></url><url><loc>https://malwarechronicle.com/category/vulnerabilities/update-asp-net-core-8-11-to-block-unauthenticated/</loc><news:news><news:publication><news:name>Malware Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T11:38:25Z</news:publication_date><news:title>Update ASP.NET Core 8-11 to Block Unauthenticated DoS via Synthetic Culture Names in Localization Logic</news:title></news:news></url><url><loc>https://malwarechronicle.com/category/threat-intel/screen-remote-devs-14-indicted-in-nk-scheme-using/</loc><news:news><news:publication><news:name>Malware Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T11:22:20Z</news:publication_date><news:title>Screen Remote Devs: 14 Indicted in NK Scheme Using Stolen IDs to Infiltrate 70 US Firms</news:title></news:news></url><url><loc>https://malwarechronicle.com/category/vulnerabilities/upgrade-net-8-9-10-negotiate-auth-to-8-0-32-9-0/</loc><news:news><news:publication><news:name>Malware Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T10:07:10Z</news:publication_date><news:title>Upgrade .NET 8, 9, 10 Negotiate Auth to 8.0.32, 9.0.21, 10.0.13 to Stop LDAP Spoofing</news:title></news:news></url><url><loc>https://malwarechronicle.com/category/vulnerabilities/defend-windows-lsass-from-cve-2026-96219-critical/</loc><news:news><news:publication><news:name>Malware Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T01:21:27Z</news:publication_date><news:title>Defend Windows LSASS from CVE-2026-96219: Critical Unauthenticated RCE Flaw Demands Immediate Action</news:title></news:news></url><url><loc>https://malwarechronicle.com/category/vulnerabilities/patch-aem-6-5-now-to-block-critical-stored-xss/</loc><news:news><news:publication><news:name>Malware Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-13T23:45:47Z</news:publication_date><news:title>Patch AEM 6.5 Now to Block Critical Stored XSS Flaw CVE-2026-106629</news:title></news:news></url><url><loc>https://malwarechronicle.com/category/vulnerabilities/block-crafted-links-targeting-adobe-aem-xss-flaw/</loc><news:news><news:publication><news:name>Malware Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-13T23:45:47Z</news:publication_date><news:title>Block Crafted Links Targeting Adobe AEM XSS Flaw CVE-2026-83662</news:title></news:news></url></urlset>