<?xml version="1.0" encoding="UTF-8"?>
<!--generator='jetpack-16.4-a.3'-->
<!--Jetpack_Sitemap_Buffer_News_XMLWriter-->
<?xml-stylesheet type="text/xsl" href="//sra.io/news-sitemap.xsl"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.sitemaps.org/schemas/sitemap/0.9 http://www.sitemaps.org/schemas/sitemap/0.9/sitemap.xsd">
 <url>
  <loc>https://unit42.paloaltonetworks.com/emudhra-certificate-compromise/#new_tab</loc>
  <lastmod>2026-10-23T20:05:59Z</lastmod>
  <news:news>
   <news:publication>
    <news:name>Security Risk Advisors</news:name>
    <news:language>en</news:language>
   </news:publication>
   <news:title>Eight eMudhra Intermediate CA Private Keys Compromised Through Insufficient Randomness</news:title>
   <news:publication_date>2026-10-23T20:05:59Z</news:publication_date>
   <news:genres>Blog</news:genres>
  </news:news>
 </url>
 <url>
  <loc>https://www.varonis.com/blog/stealc-returns#new_tab</loc>
  <lastmod>2026-10-23T20:04:52Z</lastmod>
  <news:news>
   <news:publication>
    <news:name>Security Risk Advisors</news:name>
    <news:language>en</news:language>
   </news:publication>
   <news:title>🚩 Stadia RAT Reuses StealC Code Four Months After Europol Takedown</news:title>
   <news:publication_date>2026-10-23T20:04:52Z</news:publication_date>
   <news:genres>Blog</news:genres>
  </news:news>
 </url>
 <url>
  <loc>https://thehackernews.com/2026/10/urgent-php-warns-of-another-unpatched.html#new_tab</loc>
  <lastmod>2026-10-23T20:03:50Z</lastmod>
  <news:news>
   <news:publication>
    <news:name>Security Risk Advisors</news:name>
    <news:language>en</news:language>
   </news:publication>
   <news:title>PHP Discloses Unpatched Code Execution Issue Days After Emergency PHP2Shell Fixes</news:title>
   <news:publication_date>2026-10-23T20:03:50Z</news:publication_date>
   <news:genres>Blog</news:genres>
  </news:news>
 </url>
 <url>
  <loc>https://sra.io/blog/help-desk-vishing-and-fake-passkey-enrollment-driving-mass-sharepoint-exfiltration/</loc>
  <lastmod>2026-10-23T17:19:30Z</lastmod>
  <news:news>
   <news:publication>
    <news:name>Security Risk Advisors</news:name>
    <news:language>en</news:language>
   </news:publication>
   <news:title>Help Desk Vishing and Fake Passkey Enrollment Driving Mass SharePoint Exfiltration</news:title>
   <news:publication_date>2026-10-23T16:42:05Z</news:publication_date>
   <news:genres>Blog</news:genres>
  </news:news>
 </url>
 <url>
  <loc>https://www.welivesecurity.com/en/eset-research/mythicratatoskr-yggdrasil-enabled-backdoor-deployed-uac0099-sandworm-collaboration/#new_tab</loc>
  <lastmod>2026-10-22T18:46:11Z</lastmod>
  <news:news>
   <news:publication>
    <news:name>Security Risk Advisors</news:name>
    <news:language>en</news:language>
   </news:publication>
   <news:title>ESET Uncovers MythicRatatoskr, a Yggdrasil-based Backdoor Deployed By Russia-Aligned UAC-0099 in an Intrusion that Culminated in a Destructive Sandworm Attack Against a Ukrainian Grain Logistics Company.</news:title>
   <news:publication_date>2026-10-22T18:46:11Z</news:publication_date>
   <news:genres>Blog</news:genres>
  </news:news>
 </url>
 <url>
  <loc>https://www.group-ib.com/blog/siriusqt-rat-hvnc-stealer/#new_tab</loc>
  <lastmod>2026-10-22T18:44:55Z</lastmod>
  <news:news>
   <news:publication>
    <news:name>Security Risk Advisors</news:name>
    <news:language>en</news:language>
   </news:publication>
   <news:title>Group-IB Identifies SiriusQT, a Windows RAT with Hidden Desktop Control, Credential Theft, and Persistence Capabilities used in Multiple Malicious Campaigns.</news:title>
   <news:publication_date>2026-10-22T18:44:55Z</news:publication_date>
   <news:genres>Blog</news:genres>
  </news:news>
 </url>
 <url>
  <loc>https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/#new_tab</loc>
  <lastmod>2026-10-22T18:43:39Z</lastmod>
  <news:news>
   <news:publication>
    <news:name>Security Risk Advisors</news:name>
    <news:language>en</news:language>
   </news:publication>
   <news:title>GitLab Releases Patches for CVSS 10.0 Unauthenticated Code Execution Flaw Affecting Self-Managed Instances Back to Version 7.0.</news:title>
   <news:publication_date>2026-10-22T18:43:39Z</news:publication_date>
   <news:genres>Blog</news:genres>
  </news:news>
 </url>
 <url>
  <loc>https://sra.io/webinar-registration-digital-workers-not-chatbots-a-live-look-at-scalr-ai-sras-free-soc-automation-platform/</loc>
  <lastmod>2026-10-23T13:49:25Z</lastmod>
  <news:news>
   <news:publication>
    <news:name>Security Risk Advisors</news:name>
    <news:language>en</news:language>
   </news:publication>
   <news:title>Webinar Registration: Digital Workers, Not Chatbots: A Live Look at SCALR AI, SRA&amp;#039;s Free SOC Automation Platform</news:title>
   <news:publication_date>2026-10-22T15:36:10Z</news:publication_date>
   <news:genres>Blog</news:genres>
  </news:news>
 </url>
 <url>
  <loc>https://sra.io/webinar-digital-workers-not-chatbots-a-live-look-at-scalr-ai-sras-free-soc-automation-platform/</loc>
  <lastmod>2026-10-22T15:25:27Z</lastmod>
  <news:news>
   <news:publication>
    <news:name>Security Risk Advisors</news:name>
    <news:language>en</news:language>
   </news:publication>
   <news:title>Webinar: Digital Workers, Not Chatbots: A Live Look at SCALR AI, SRA&amp;#039;s Free SOC Automation Platform</news:title>
   <news:publication_date>2026-10-22T15:25:11Z</news:publication_date>
   <news:genres>Blog</news:genres>
  </news:news>
 </url>
 <url>
  <loc>https://www.group-ib.com/blog/stray-cat-network-edge/#new_tab</loc>
  <lastmod>2026-10-21T20:10:32Z</lastmod>
  <news:news>
   <news:publication>
    <news:name>Security Risk Advisors</news:name>
    <news:language>en</news:language>
   </news:publication>
   <news:title>k0t Exploits Fortinet and Palo Alto Edge Devices to Steal Credentials and Establish Persistent Access</news:title>
   <news:publication_date>2026-10-21T20:10:32Z</news:publication_date>
   <news:genres>Blog</news:genres>
  </news:news>
 </url>
 <url>
  <loc>https://www.wiz.io/blog/php2shell-php-rce#new_tab</loc>
  <lastmod>2026-10-21T20:09:26Z</lastmod>
  <news:news>
   <news:publication>
    <news:name>Security Risk Advisors</news:name>
    <news:language>en</news:language>
   </news:publication>
   <news:title>Critical PHP2Shell Vulnerabilities Enable Unauthenticated Remote Code Execution and Memory Disclosure</news:title>
   <news:publication_date>2026-10-21T20:09:26Z</news:publication_date>
   <news:genres>Blog</news:genres>
  </news:news>
 </url>
 <url>
  <loc>https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/0R3XLJL6FuE/m/Kp1v6CPuAAAJ#new_tab</loc>
  <lastmod>2026-10-21T20:08:30Z</lastmod>
  <news:news>
   <news:publication>
    <news:name>Security Risk Advisors</news:name>
    <news:language>en</news:language>
   </news:publication>
   <news:title>Compromised eMudhra CA Keys Threaten HTTPS Certificate Trust Across Browsers and Applications</news:title>
   <news:publication_date>2026-10-21T20:08:30Z</news:publication_date>
   <news:genres>Blog</news:genres>
  </news:news>
 </url>
 <url>
  <loc>https://sra.io/wp-content/uploads/2026/10/TB20261021-PHP2Shell.pdf#new_tab</loc>
  <lastmod>2026-10-21T20:30:51Z</lastmod>
  <news:news>
   <news:publication>
    <news:name>Security Risk Advisors</news:name>
    <news:language>en</news:language>
   </news:publication>
   <news:title>TB20261021 - PHP2Shell</news:title>
   <news:publication_date>2026-10-21T20:02:04Z</news:publication_date>
   <news:genres>Blog</news:genres>
  </news:news>
 </url>
</urlset>
