<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
<url>
<loc>https://cyber-threat.net/patch-now-apple-kev-mlflow-aruba/</loc>
<news:news>
<news:publication>
<news:name>Cyber-Threat.net</news:name>
<news:language>en</news:language>
</news:publication>
<news:publication_date>2026-10-28T09:17:21+00:00</news:publication_date>
<news:title>Patch now: Apple KEV flaw, MLflow RCE, eight Aruba 10.0s</news:title>
</news:news>
</url>
<url>
<loc>https://cyber-threat.net/peoplesoft-cve-2026-35273-ssrf-rce-mass-exploited/</loc>
<news:news>
<news:publication>
<news:name>Cyber-Threat.net</news:name>
<news:language>en</news:language>
</news:publication>
<news:publication_date>2026-10-28T09:08:07+00:00</news:publication_date>
<news:title>PeopleSoft CVE-2026-35273: SSRF to RCE, still mass-exploited</news:title>
</news:news>
</url>
<url>
<loc>https://cyber-threat.net/hunt-magento-polyshell-cms-loader-domains/</loc>
<news:news>
<news:publication>
<news:name>Cyber-Threat.net</news:name>
<news:language>en</news:language>
</news:publication>
<news:publication_date>2026-10-28T00:12:29+00:00</news:publication_date>
<news:title>Hunt: Magento PolyShell CMS loader domains</news:title>
</news:news>
</url>
<url>
<loc>https://cyber-threat.net/adobe-commerce-magento-cve-2026-48356-polyshell-exploited/</loc>
<news:news>
<news:publication>
<news:name>Cyber-Threat.net</news:name>
<news:language>en</news:language>
</news:publication>
<news:publication_date>2026-10-28T00:11:33+00:00</news:publication_date>
<news:title>Magento PolyShell CVE-2026-48356: KEV and webshell hunt</news:title>
</news:news>
</url>
<url>
<loc>https://cyber-threat.net/testmetest-npm-worm-github-init-js-hooks/</loc>
<news:news>
<news:publication>
<news:name>Cyber-Threat.net</news:name>
<news:language>en</news:language>
</news:publication>
<news:publication_date>2026-10-27T10:06:37+00:00</news:publication_date>
<news:title>testmetest npm worm: check for .github/init.js and AI-assistant hooks, and remove persistence before you revoke tokens</news:title>
</news:news>
</url>
<url>
<loc>https://cyber-threat.net/patch-wave-has-arrived/</loc>
<news:news>
<news:publication>
<news:name>Cyber-Threat.net</news:name>
<news:language>en</news:language>
</news:publication>
<news:publication_date>2026-10-27T07:30:00+00:00</news:publication_date>
<news:title>The patch wave has arrived: what the NCSC told you to do in May</news:title>
</news:news>
</url>
<url>
<loc>https://cyber-threat.net/node2shell-brotli-cve-2026-111497/</loc>
<news:news>
<news:publication>
<news:name>Cyber-Threat.net</news:name>
<news:language>en</news:language>
</news:publication>
<news:publication_date>2026-10-26T13:24:50+00:00</news:publication_date>
<news:title>Node2Shell (CVE-2026-111497): patch Node.js, .NET and anything else that decodes Brotli</news:title>
</news:news>
</url>
</urlset>
