<?xml version="1.0" encoding="UTF-8"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9"><url><loc>https://sandboxdispatch.com/c/malware/citizen-lab-shows-how-adfection-spyware-infects/</loc><news:news><news:publication><news:name>Sandbox Dispatch</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-15T11:04:46Z</news:publication_date><news:title>Citizen Lab Shows How AdFection Spyware Infects Devices via Ads</news:title></news:news></url><url><loc>https://sandboxdispatch.com/c/malware/how-android-banking-malware-hijacks-app-integrity/</loc><news:news><news:publication><news:name>Sandbox Dispatch</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-15T10:30:08Z</news:publication_date><news:title>How Android Banking Malware Hijacks App Integrity Checks to Steal Data</news:title></news:news></url><url><loc>https://sandboxdispatch.com/c/cyber-attacks/what-olvx-marketplace-sold-and-who-ran-it/</loc><news:news><news:publication><news:name>Sandbox Dispatch</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-15T08:02:46Z</news:publication_date><news:title>What OLVX marketplace sold and who ran it</news:title></news:news></url><url><loc>https://sandboxdispatch.com/c/vulnerabilities/will-active-bgp-monitoring-on-junos-os-let/</loc><news:news><news:publication><news:name>Sandbox Dispatch</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T17:58:58Z</news:publication_date><news:title>Will Active BGP Monitoring on Junos OS Let Attackers Run Root Commands via CVE-2026-33789?</news:title></news:news></url><url><loc>https://sandboxdispatch.com/c/vulnerabilities/why-did-microsofts-record-october-patch-drop/</loc><news:news><news:publication><news:name>Sandbox Dispatch</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T16:45:58Z</news:publication_date><news:title>Why did Microsoft&#x27;s record October patch drop tackle a Shell flaw already in the wild?</news:title></news:news></url><url><loc>https://sandboxdispatch.com/c/vulnerabilities/will-unauthenticated-http-3-deadlocks-exhaust/</loc><news:news><news:publication><news:name>Sandbox Dispatch</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T10:25:47Z</news:publication_date><news:title>Will unauthenticated HTTP/3 deadlocks exhaust resources in ASP.NET Core 8, 9, and 10 Kestrel servers?</news:title></news:news></url><url><loc>https://sandboxdispatch.com/c/vulnerabilities/how-does-cve-2026-96924-enable-remote-code/</loc><news:news><news:publication><news:name>Sandbox Dispatch</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T06:29:37Z</news:publication_date><news:title>How Does CVE-2026-96924 Enable Remote Code Execution in Windows OLE?</news:title></news:news></url><url><loc>https://sandboxdispatch.com/c/vulnerabilities/how-does-the-cvss-9-0-windows-schannel-flaw/</loc><news:news><news:publication><news:name>Sandbox Dispatch</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T06:11:28Z</news:publication_date><news:title>How does the CVSS 9.0 Windows Schannel flaw enable remote attackers to spoof network identities?</news:title></news:news></url><url><loc>https://sandboxdispatch.com/c/vulnerabilities/what-is-cve-2026-88102-and-why-does-its-9-8-cvss/</loc><news:news><news:publication><news:name>Sandbox Dispatch</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T01:43:35Z</news:publication_date><news:title>What Is CVE-2026-88102 And Why Does Its 9.8 CVSS Score Make Windows Failover Cluster So Vulnerable?</news:title></news:news></url><url><loc>https://sandboxdispatch.com/c/vulnerabilities/stored-xss-in-adobe-experience-manager-6-5-risks/</loc><news:news><news:publication><news:name>Sandbox Dispatch</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-13T23:45:47Z</news:publication_date><news:title>Stored XSS in Adobe Experience Manager 6.5 Risks Account Takeover</news:title></news:news></url><url><loc>https://sandboxdispatch.com/c/vulnerabilities/how-does-cve-2026-106621-threaten-coldfusion-2023/</loc><news:news><news:publication><news:name>Sandbox Dispatch</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-13T23:05:11Z</news:publication_date><news:title>How Does CVE-2026-106621 Threaten ColdFusion 2023 And 2025 Users With Remote Code Execution?</news:title></news:news></url><url><loc>https://sandboxdispatch.com/c/vulnerabilities/argo-cd-postdelete-hook-flaw-bypasses-auth-checks/</loc><news:news><news:publication><news:name>Sandbox Dispatch</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-13T17:56:21Z</news:publication_date><news:title>Argo CD PostDelete Hook Flaw Bypasses Auth Checks</news:title></news:news></url><url><loc>https://sandboxdispatch.com/c/vulnerabilities/how-does-swupdate-cve-2026-109399-bypass/</loc><news:news><news:publication><news:name>Sandbox Dispatch</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-13T12:43:09Z</news:publication_date><news:title>How Does SWUpdate CVE-2026-109399 Bypass Certificate Checks?</news:title></news:news></url><url><loc>https://sandboxdispatch.com/c/vulnerabilities/why-do-specific-tls-settings-disable-haproxy-data/</loc><news:news><news:publication><news:name>Sandbox Dispatch</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-13T12:13:33Z</news:publication_date><news:title>Why do specific TLS settings disable HAProxy Data Plane API authentication for critical CVE-2026-109575?</news:title></news:news></url><url><loc>https://sandboxdispatch.com/c/vulnerabilities/how-a-leaked-flask-secret-enabled-remote-code/</loc><news:news><news:publication><news:name>Sandbox Dispatch</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-13T12:11:50Z</news:publication_date><news:title>How a Leaked Flask Secret Enabled Remote Code Execution on Google Dev Sites</news:title></news:news></url><url><loc>https://sandboxdispatch.com/c/cyber-attacks/how-ghostprofile-evades-screen-mirroring-by/</loc><news:news><news:publication><news:name>Sandbox Dispatch</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-13T12:11:48Z</news:publication_date><news:title>How GhostProfile Evades Screen Mirroring by Cloning Browser Profiles for Remote Control?</news:title></news:news></url><url><loc>https://sandboxdispatch.com/c/vulnerabilities/does-d-link-dcs-930l-firmware-recovery-flaw/</loc><news:news><news:publication><news:name>Sandbox Dispatch</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-13T12:08:49Z</news:publication_date><news:title>Does D-Link DCS-930L Firmware Recovery Flaw Require Immediate Network Action?</news:title></news:news></url><url><loc>https://sandboxdispatch.com/c/vulnerabilities/does-wavlink-wl-wn530be1-a-firmware-have-a/</loc><news:news><news:publication><news:name>Sandbox Dispatch</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-13T12:08:49Z</news:publication_date><news:title>Does Wavlink WL-WN530BE1-A Firmware Have a Critical Remote Command Injection Flaw?</news:title></news:news></url></urlset>