<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
<url>
<loc>https://cyber-threat.net/ivanti-connect-secure-cve-2026-104935-auth-bypass/</loc>
<news:news>
<news:publication>
<news:name>Cyber-Threat.net</news:name>
<news:language>en</news:language>
</news:publication>
<news:publication_date>2026-10-28T13:35:21+00:00</news:publication_date>
<news:title>Ivanti Connect Secure CVE-2026-104935: auth bypass to RCE</news:title>
</news:news>
</url>
<url>
<loc>https://cyber-threat.net/beyondtrust-remote-support-cve-2026-102764-armory-castle/</loc>
<news:news>
<news:publication>
<news:name>Cyber-Threat.net</news:name>
<news:language>en</news:language>
</news:publication>
<news:publication_date>2026-10-28T13:35:08+00:00</news:publication_date>
<news:title>BeyondTrust RS CVE-2026-102764: ARMORY CASTLE zero-day</news:title>
</news:news>
</url>
<url>
<loc>https://cyber-threat.net/japan-active-cyber-defence-1-october-2026/</loc>
<news:news>
<news:publication>
<news:name>Cyber-Threat.net</news:name>
<news:language>en</news:language>
</news:publication>
<news:publication_date>2026-10-28T13:22:15+00:00</news:publication_date>
<news:title>Japan’s active cyber defence: live since 1 October</news:title>
</news:news>
</url>
<url>
<loc>https://cyber-threat.net/oracle-ebs-cve-2026-101767-probes-sqli-rce/</loc>
<news:news>
<news:publication>
<news:name>Cyber-Threat.net</news:name>
<news:language>en</news:language>
</news:publication>
<news:publication_date>2026-10-28T12:19:35+00:00</news:publication_date>
<news:title>Oracle EBS CVE-2026-101767: probes hit SQLi-to-RCE</news:title>
</news:news>
</url>
<url>
<loc>https://cyber-threat.net/patch-now-apple-kev-mlflow-aruba/</loc>
<news:news>
<news:publication>
<news:name>Cyber-Threat.net</news:name>
<news:language>en</news:language>
</news:publication>
<news:publication_date>2026-10-28T09:17:21+00:00</news:publication_date>
<news:title>Patch now: Apple KEV flaw, MLflow RCE, eight Aruba 10.0s</news:title>
</news:news>
</url>
<url>
<loc>https://cyber-threat.net/peoplesoft-cve-2026-35273-ssrf-rce-mass-exploited/</loc>
<news:news>
<news:publication>
<news:name>Cyber-Threat.net</news:name>
<news:language>en</news:language>
</news:publication>
<news:publication_date>2026-10-28T09:08:07+00:00</news:publication_date>
<news:title>PeopleSoft CVE-2026-35273: SSRF to RCE, still mass-exploited</news:title>
</news:news>
</url>
<url>
<loc>https://cyber-threat.net/hunt-magento-polyshell-cms-loader-domains/</loc>
<news:news>
<news:publication>
<news:name>Cyber-Threat.net</news:name>
<news:language>en</news:language>
</news:publication>
<news:publication_date>2026-10-28T00:12:29+00:00</news:publication_date>
<news:title>Hunt: Magento PolyShell CMS loader domains</news:title>
</news:news>
</url>
<url>
<loc>https://cyber-threat.net/adobe-commerce-magento-cve-2026-48356-polyshell-exploited/</loc>
<news:news>
<news:publication>
<news:name>Cyber-Threat.net</news:name>
<news:language>en</news:language>
</news:publication>
<news:publication_date>2026-10-28T00:11:33+00:00</news:publication_date>
<news:title>Magento PolyShell CVE-2026-48356: KEV and webshell hunt</news:title>
</news:news>
</url>
<url>
<loc>https://cyber-threat.net/testmetest-npm-worm-github-init-js-hooks/</loc>
<news:news>
<news:publication>
<news:name>Cyber-Threat.net</news:name>
<news:language>en</news:language>
</news:publication>
<news:publication_date>2026-10-27T10:06:37+00:00</news:publication_date>
<news:title>testmetest npm worm: check for .github/init.js and AI-assistant hooks, and remove persistence before you revoke tokens</news:title>
</news:news>
</url>
<url>
<loc>https://cyber-threat.net/patch-wave-has-arrived/</loc>
<news:news>
<news:publication>
<news:name>Cyber-Threat.net</news:name>
<news:language>en</news:language>
</news:publication>
<news:publication_date>2026-10-27T07:30:00+00:00</news:publication_date>
<news:title>The patch wave has arrived: what the NCSC told you to do in May</news:title>
</news:news>
</url>
</urlset>
