<?xml version="1.0" encoding="UTF-8"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9"><url><loc>https://malwarechronicle.com/category/threat-intel/verify-government-email-sources-as-tag-193/</loc><news:news><news:publication><news:name>Malware Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-15T03:12:47Z</news:publication_date><news:title>Verify Government Email Sources as TAG-193 Targets CIS Agencies</news:title></news:news></url><url><loc>https://malwarechronicle.com/category/vulnerabilities/patch-hitachi-remote-ops-agent-to-2-0-to-stop/</loc><news:news><news:publication><news:name>Malware Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-15T00:40:30Z</news:publication_date><news:title>Patch Hitachi Remote Ops Agent to 2.0 to Stop Critical Account Hijack via Unrestricted Reset Codes</news:title></news:news></url><url><loc>https://malwarechronicle.com/category/vulnerabilities/patch-better-auth-to-1-7-7-to-stop-oauth-account/</loc><news:news><news:publication><news:name>Malware Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-15T00:30:46Z</news:publication_date><news:title>Patch Better Auth to 1.7.7 to Stop OAuth Account Takeover</news:title></news:news></url><url><loc>https://malwarechronicle.com/category/vulnerabilities/patch-wegia-sqli-flaw-critical-cve-2026-55683/</loc><news:news><news:publication><news:name>Malware Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T20:02:03Z</news:publication_date><news:title>Patch WeGIA SQLi Flaw: Critical CVE-2026-55683 Threatens Billing Data in Versions Before 3.8.6</news:title></news:news></url><url><loc>https://malwarechronicle.com/category/vulnerabilities/patch-nodejs-whisper-to-block-os-command/</loc><news:news><news:publication><news:name>Malware Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T15:46:32Z</news:publication_date><news:title>Patch nodejs-whisper to Block OS Command Injection in Audio Processing</news:title></news:news></url><url><loc>https://malwarechronicle.com/category/vulnerabilities/patch-net-core-8-11-to-fix-high-severity-dos-in/</loc><news:news><news:publication><news:name>Malware Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T14:21:01Z</news:publication_date><news:title>Patch .NET Core 8-11 to Fix High-Severity DoS in DateTime Parsing</news:title></news:news></url><url><loc>https://malwarechronicle.com/category/vulnerabilities/patch-net-8-11-on-unix-to-stop-local-symlink/</loc><news:news><news:publication><news:name>Malware Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T14:21:01Z</news:publication_date><news:title>Patch .NET 8-11 on Unix to stop local symlink attacks from elevating privileges</news:title></news:news></url><url><loc>https://malwarechronicle.com/category/vulnerabilities/update-asp-net-core-8-11-to-block-unauthenticated/</loc><news:news><news:publication><news:name>Malware Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T11:38:25Z</news:publication_date><news:title>Update ASP.NET Core 8-11 to Block Unauthenticated DoS via Synthetic Culture Names in Localization Logic</news:title></news:news></url><url><loc>https://malwarechronicle.com/category/threat-intel/screen-remote-devs-14-indicted-in-nk-scheme-using/</loc><news:news><news:publication><news:name>Malware Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T11:22:20Z</news:publication_date><news:title>Screen Remote Devs: 14 Indicted in NK Scheme Using Stolen IDs to Infiltrate 70 US Firms</news:title></news:news></url><url><loc>https://malwarechronicle.com/category/vulnerabilities/upgrade-net-8-9-10-negotiate-auth-to-8-0-32-9-0/</loc><news:news><news:publication><news:name>Malware Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T10:07:10Z</news:publication_date><news:title>Upgrade .NET 8, 9, 10 Negotiate Auth to 8.0.32, 9.0.21, 10.0.13 to Stop LDAP Spoofing</news:title></news:news></url><url><loc>https://malwarechronicle.com/category/vulnerabilities/defend-windows-lsass-from-cve-2026-96219-critical/</loc><news:news><news:publication><news:name>Malware Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T01:21:27Z</news:publication_date><news:title>Defend Windows LSASS from CVE-2026-96219: Critical Unauthenticated RCE Flaw Demands Immediate Action</news:title></news:news></url><url><loc>https://malwarechronicle.com/category/vulnerabilities/patch-aem-6-5-now-to-block-critical-stored-xss/</loc><news:news><news:publication><news:name>Malware Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-13T23:45:47Z</news:publication_date><news:title>Patch AEM 6.5 Now to Block Critical Stored XSS Flaw CVE-2026-106629</news:title></news:news></url><url><loc>https://malwarechronicle.com/category/vulnerabilities/block-crafted-links-targeting-adobe-aem-xss-flaw/</loc><news:news><news:publication><news:name>Malware Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-13T23:45:47Z</news:publication_date><news:title>Block Crafted Links Targeting Adobe AEM XSS Flaw CVE-2026-83662</news:title></news:news></url><url><loc>https://malwarechronicle.com/category/vulnerabilities/update-adobe-commerce-and-magento-open-source-now/</loc><news:news><news:publication><news:name>Malware Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-13T19:40:18Z</news:publication_date><news:title>Update Adobe Commerce and Magento Open Source Now to Fix Critical Zero-Click RCE Vulnerability</news:title></news:news></url><url><loc>https://malwarechronicle.com/category/vulnerabilities/block-fork-triggered-ci-builds-to-stop-saltstack/</loc><news:news><news:publication><news:name>Malware Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-13T17:56:48Z</news:publication_date><news:title>Block Fork-Triggered CI Builds to Stop SaltStack Docs Secret Theft</news:title></news:news></url><url><loc>https://malwarechronicle.com/category/vulnerabilities/patch-otrs-7-0-2025-to-invalidate-jwts/</loc><news:news><news:publication><news:name>Malware Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-13T12:55:48Z</news:publication_date><news:title>Patch OTRS 7.0-2025 to invalidate JWTs immediately after disabling accounts or changing passwords</news:title></news:news></url><url><loc>https://malwarechronicle.com/category/cyber-attacks/protect-wealth-ai-powered-fraud-hits-442b/</loc><news:news><news:publication><news:name>Malware Chronicle</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-13T03:31:25Z</news:publication_date><news:title>Protect Wealth: AI-Powered Fraud Hits $442B, Surpassing Cocaine Trade</news:title></news:news></url></urlset>