<?xml version="1.0" encoding="UTF-8"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9"><url><loc>https://sandboxdispatch.com/c/vulnerabilities/is-your-oracle-webcenter-sites-instance-exposed/</loc><news:news><news:publication><news:name>Sandbox Dispatch</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-22T05:15:27Z</news:publication_date><news:title>Is Your Oracle WebCenter Sites Instance Exposed to Unauthenticated Takeover?</news:title></news:news></url><url><loc>https://sandboxdispatch.com/c/vulnerabilities/do-unauthenticated-attackers-leverage-adk/</loc><news:news><news:publication><news:name>Sandbox Dispatch</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-22T03:15:32Z</news:publication_date><news:title>Do Unauthenticated Attackers Leverage ADK TypeScript Flaw to Read Files?</news:title></news:news></url><url><loc>https://sandboxdispatch.com/c/vulnerabilities/how-does-cve-2026-112712-in-fastify-middie-9-0-9/</loc><news:news><news:publication><news:name>Sandbox Dispatch</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-22T03:01:48Z</news:publication_date><news:title>How does CVE-2026-112712 in Fastify middie 9.0-9.3.5 silently skip auth checks?</news:title></news:news></url><url><loc>https://sandboxdispatch.com/c/threat-intel/how-lazarus-used-south-korean-banking-software-in/</loc><news:news><news:publication><news:name>Sandbox Dispatch</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-22T02:43:26Z</news:publication_date><news:title>How Lazarus Used South Korean Banking Software in Operation FlashHole</news:title></news:news></url><url><loc>https://sandboxdispatch.com/c/vulnerabilities/how-php2shell-flaws-threaten-php-servers-and/</loc><news:news><news:publication><news:name>Sandbox Dispatch</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-22T01:50:08Z</news:publication_date><news:title>How php2shell Flaws Threaten PHP Servers and Cloudflare’s Response</news:title></news:news></url><url><loc>https://sandboxdispatch.com/c/vulnerabilities/why-are-agencies-urging-immediate-isolation-of/</loc><news:news><news:publication><news:name>Sandbox Dispatch</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-22T01:34:45Z</news:publication_date><news:title>Why Are Agencies Urging Immediate Isolation of Unpatched PHP Sites?</news:title></news:news></url><url><loc>https://sandboxdispatch.com/c/vulnerabilities/how-do-users-protect-data-after-apache-pulsar/</loc><news:news><news:publication><news:name>Sandbox Dispatch</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T21:08:27Z</news:publication_date><news:title>How Do Users Protect Data After Apache Pulsar Manager Retirement Leaves Auth Bypass CVE-2026-105944 Unpatched?</news:title></news:news></url><url><loc>https://sandboxdispatch.com/c/vulnerabilities/does-cve-2026-76487-require-urgent-updates-for/</loc><news:news><news:publication><news:name>Sandbox Dispatch</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T19:55:03Z</news:publication_date><news:title>Does CVE-2026-76487 Require Urgent Updates for Cisco Unified CM Users?</news:title></news:news></url><url><loc>https://sandboxdispatch.com/c/vulnerabilities/signal-call-flaw-leaves-audio-active-after-hangup/</loc><news:news><news:publication><news:name>Sandbox Dispatch</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T19:15:41Z</news:publication_date><news:title>Signal Call Flaw Leaves Audio Active After Hangup</news:title></news:news></url><url><loc>https://sandboxdispatch.com/c/cyber-attacks/tax-firm-hacker-sentenced-for-identity-theft-and/</loc><news:news><news:publication><news:name>Sandbox Dispatch</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T08:05:11Z</news:publication_date><news:title>Tax Firm Hacker Sentenced for Identity Theft and Fraud Scheme</news:title></news:news></url></urlset>