<?xml version="1.0" encoding="UTF-8"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9"><url><loc>https://sandboxdispatch.com/c/cyber-attacks/how-are-uat-6275-and-tag-193-using-winrar-flaws/</loc><news:news><news:publication><news:name>Sandbox Dispatch</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-15T21:05:16Z</news:publication_date><news:title>How are UAT-6275 and TAG-193 using WinRAR flaws to target CIS governments?</news:title></news:news></url><url><loc>https://sandboxdispatch.com/c/vulnerabilities/how-can-atlassian-users-fix-cve-2026-21589-before/</loc><news:news><news:publication><news:name>Sandbox Dispatch</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-15T18:33:00Z</news:publication_date><news:title>How can Atlassian users fix CVE-2026-21589 before CISA&#x27;s Oct 18 deadline?</news:title></news:news></url><url><loc>https://sandboxdispatch.com/c/vulnerabilities/how-does-opnsense-cve-2026-57155-enable-root/</loc><news:news><news:publication><news:name>Sandbox Dispatch</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-15T15:40:53Z</news:publication_date><news:title>How Does OPNsense CVE-2026-57155 Enable Root Access via GeoIP Imports?</news:title></news:news></url><url><loc>https://sandboxdispatch.com/c/malware/how-peerstitch-implant-hides-in-fortigate-memory/</loc><news:news><news:publication><news:name>Sandbox Dispatch</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-15T13:37:13Z</news:publication_date><news:title>How PEERSTITCH Implant Hides in FortiGate Memory Without Files or Ports</news:title></news:news></url><url><loc>https://sandboxdispatch.com/c/malware/citizen-lab-shows-how-adfection-spyware-infects/</loc><news:news><news:publication><news:name>Sandbox Dispatch</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-15T11:04:46Z</news:publication_date><news:title>Citizen Lab Shows How AdFection Spyware Infects Devices via Ads</news:title></news:news></url><url><loc>https://sandboxdispatch.com/c/malware/how-android-banking-malware-hijacks-app-integrity/</loc><news:news><news:publication><news:name>Sandbox Dispatch</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-15T10:30:08Z</news:publication_date><news:title>How Android Banking Malware Hijacks App Integrity Checks to Steal Data</news:title></news:news></url><url><loc>https://sandboxdispatch.com/c/cyber-attacks/what-olvx-marketplace-sold-and-who-ran-it/</loc><news:news><news:publication><news:name>Sandbox Dispatch</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-15T08:02:46Z</news:publication_date><news:title>What OLVX marketplace sold and who ran it</news:title></news:news></url><url><loc>https://sandboxdispatch.com/c/vulnerabilities/will-active-bgp-monitoring-on-junos-os-let/</loc><news:news><news:publication><news:name>Sandbox Dispatch</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T17:58:58Z</news:publication_date><news:title>Will Active BGP Monitoring on Junos OS Let Attackers Run Root Commands via CVE-2026-33789?</news:title></news:news></url><url><loc>https://sandboxdispatch.com/c/vulnerabilities/why-did-microsofts-record-october-patch-drop/</loc><news:news><news:publication><news:name>Sandbox Dispatch</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T16:45:58Z</news:publication_date><news:title>Why did Microsoft&#x27;s record October patch drop tackle a Shell flaw already in the wild?</news:title></news:news></url><url><loc>https://sandboxdispatch.com/c/vulnerabilities/will-unauthenticated-http-3-deadlocks-exhaust/</loc><news:news><news:publication><news:name>Sandbox Dispatch</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T10:25:47Z</news:publication_date><news:title>Will unauthenticated HTTP/3 deadlocks exhaust resources in ASP.NET Core 8, 9, and 10 Kestrel servers?</news:title></news:news></url><url><loc>https://sandboxdispatch.com/c/vulnerabilities/how-does-cve-2026-96924-enable-remote-code/</loc><news:news><news:publication><news:name>Sandbox Dispatch</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T06:29:37Z</news:publication_date><news:title>How Does CVE-2026-96924 Enable Remote Code Execution in Windows OLE?</news:title></news:news></url><url><loc>https://sandboxdispatch.com/c/vulnerabilities/how-does-the-cvss-9-0-windows-schannel-flaw/</loc><news:news><news:publication><news:name>Sandbox Dispatch</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T06:11:28Z</news:publication_date><news:title>How does the CVSS 9.0 Windows Schannel flaw enable remote attackers to spoof network identities?</news:title></news:news></url><url><loc>https://sandboxdispatch.com/c/vulnerabilities/what-is-cve-2026-88102-and-why-does-its-9-8-cvss/</loc><news:news><news:publication><news:name>Sandbox Dispatch</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T01:43:35Z</news:publication_date><news:title>What Is CVE-2026-88102 And Why Does Its 9.8 CVSS Score Make Windows Failover Cluster So Vulnerable?</news:title></news:news></url><url><loc>https://sandboxdispatch.com/c/vulnerabilities/stored-xss-in-adobe-experience-manager-6-5-risks/</loc><news:news><news:publication><news:name>Sandbox Dispatch</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-13T23:45:47Z</news:publication_date><news:title>Stored XSS in Adobe Experience Manager 6.5 Risks Account Takeover</news:title></news:news></url></urlset>