<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
  <url>
    <loc>https://vulnpocalypse.dev/advisories/node-red-cve-2026-58115/</loc>
    <news:news>
      <news:publication><news:name>Vulnpocalypse</news:name><news:language>en</news:language></news:publication>
      <news:publication_date>2026-11-03</news:publication_date>
      <news:title>Critical Node-RED flaw CVE-2026-58115 exploited in the wild to run code on exposed instances</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://vulnpocalypse.dev/advisories/gorbag-apt-winrar-exploit/</loc>
    <news:news>
      <news:publication><news:name>Vulnpocalypse</news:name><news:language>en</news:language></news:publication>
      <news:publication_date>2026-11-03</news:publication_date>
      <news:title>Russia-aligned Gorbag hackers exploit a WinRAR flaw to drop BeautyStealer on Ukrainian courts and city councils</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://vulnpocalypse.dev/advisories/stylesmuggler-magento-psk-rat/</loc>
    <news:news>
      <news:publication><news:name>Vulnpocalypse</news:name><news:language>en</news:language></news:publication>
      <news:publication_date>2026-11-02</news:publication_date>
      <news:title>StyleSmuggler attacks hit Magento and Adobe Commerce stores and drop the PSK Agent Go RAT</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://vulnpocalypse.dev/advisories/paprat-bitter-espionage-south-asia/</loc>
    <news:news>
      <news:publication><news:name>Vulnpocalypse</news:name><news:language>en</news:language></news:publication>
      <news:publication_date>2026-11-02</news:publication_date>
      <news:title>Bitter APT drops a new PapRAT backdoor on South Asian targets using malicious VHDX disk images</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://vulnpocalypse.dev/advisories/google-xcpe-android-botnet/</loc>
    <news:news>
      <news:publication><news:name>Vulnpocalypse</news:name><news:language>en</news:language></news:publication>
      <news:publication_date>2026-11-02</news:publication_date>
      <news:title>Google disrupts XCPE Android botnet of 1.3 million set-top boxes and bans TV box maker Videostrong</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://vulnpocalypse.dev/advisories/spandana-sphoorty-financial-india-about-rs-78-crore-moved-out-of-a/</loc>
    <news:news>
      <news:publication><news:name>Vulnpocalypse</news:name><news:language>en</news:language></news:publication>
      <news:publication_date>2026-11-01</news:publication_date>
      <news:title>Spandana Sphoorty Financial (India): about Rs 7.8 crore moved out of a company bank account</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://vulnpocalypse.dev/advisories/cholet-agglomeration-france-cyberattack-disrupted-municipal-telephone/</loc>
    <news:news>
      <news:publication><news:name>Vulnpocalypse</news:name><news:language>en</news:language></news:publication>
      <news:publication_date>2026-11-01</news:publication_date>
      <news:title>Cholet Agglomeration (France): cyberattack disrupted municipal telephone service</news:title>
    </news:news>
  </url>
</urlset>
