<?xml version="1.0" encoding="UTF-8"?>
<!--generator='jetpack-16.4-a.3'-->
<!--Jetpack_Sitemap_Buffer_News_XMLWriter-->
<?xml-stylesheet type="text/xsl" href="//sra.io/news-sitemap.xsl"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.sitemaps.org/schemas/sitemap/0.9 http://www.sitemaps.org/schemas/sitemap/0.9/sitemap.xsd">
 <url>
  <loc>https://www.group-ib.com/blog/stray-cat-network-edge/#new_tab</loc>
  <lastmod>2026-10-21T20:10:32Z</lastmod>
  <news:news>
   <news:publication>
    <news:name>Security Risk Advisors</news:name>
    <news:language>en</news:language>
   </news:publication>
   <news:title>k0t Exploits Fortinet and Palo Alto Edge Devices to Steal Credentials and Establish Persistent Access</news:title>
   <news:publication_date>2026-10-21T20:10:32Z</news:publication_date>
   <news:genres>Blog</news:genres>
  </news:news>
 </url>
 <url>
  <loc>https://www.wiz.io/blog/php2shell-php-rce#new_tab</loc>
  <lastmod>2026-10-21T20:09:26Z</lastmod>
  <news:news>
   <news:publication>
    <news:name>Security Risk Advisors</news:name>
    <news:language>en</news:language>
   </news:publication>
   <news:title>Critical PHP2Shell Vulnerabilities Enable Unauthenticated Remote Code Execution and Memory Disclosure</news:title>
   <news:publication_date>2026-10-21T20:09:26Z</news:publication_date>
   <news:genres>Blog</news:genres>
  </news:news>
 </url>
 <url>
  <loc>https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/0R3XLJL6FuE/m/Kp1v6CPuAAAJ#new_tab</loc>
  <lastmod>2026-10-21T20:08:30Z</lastmod>
  <news:news>
   <news:publication>
    <news:name>Security Risk Advisors</news:name>
    <news:language>en</news:language>
   </news:publication>
   <news:title>Compromised eMudhra CA Keys Threaten HTTPS Certificate Trust Across Browsers and Applications</news:title>
   <news:publication_date>2026-10-21T20:08:30Z</news:publication_date>
   <news:genres>Blog</news:genres>
  </news:news>
 </url>
 <url>
  <loc>https://sra.io/wp-content/uploads/2026/10/TB20261021-PHP2Shell.pdf#new_tab</loc>
  <lastmod>2026-10-21T20:02:04Z</lastmod>
  <news:news>
   <news:publication>
    <news:name>Security Risk Advisors</news:name>
    <news:language>en</news:language>
   </news:publication>
   <news:title>TB20261021 - PHP2Shell</news:title>
   <news:publication_date>2026-10-21T20:02:04Z</news:publication_date>
   <news:genres>Blog</news:genres>
  </news:news>
 </url>
 <url>
  <loc>https://thehackernews.com/2026/10/romulus-clickfix-platform-tricks-users.html#new_tab</loc>
  <lastmod>2026-10-20T19:33:05Z</lastmod>
  <news:news>
   <news:publication>
    <news:name>Security Risk Advisors</news:name>
    <news:language>en</news:language>
   </news:publication>
   <news:title>ROMULUS ClickFix Platform Delivers LegionLoader Through Obfuscated PowerShell and Malicious Installers</news:title>
   <news:publication_date>2026-10-20T19:33:05Z</news:publication_date>
   <news:genres>Blog</news:genres>
  </news:news>
 </url>
 <url>
  <loc>https://www.group-ib.com/blog/kgb-rat-windows-fud-trojan/#new_tab</loc>
  <lastmod>2026-10-20T19:32:01Z</lastmod>
  <news:news>
   <news:publication>
    <news:name>Security Risk Advisors</news:name>
    <news:language>en</news:language>
   </news:publication>
   <news:title>🚩 KGB RAT Combines Credential Theft, Remote Access, and Ransomware Capabilities</news:title>
   <news:publication_date>2026-10-20T19:32:01Z</news:publication_date>
   <news:genres>Blog</news:genres>
  </news:news>
 </url>
 <url>
  <loc>https://productcert.siemens.com/productcert/html/ssa-580366.html#new_tab</loc>
  <lastmod>2026-10-20T19:31:12Z</lastmod>
  <news:news>
   <news:publication>
    <news:name>Security Risk Advisors</news:name>
    <news:language>en</news:language>
   </news:publication>
   <news:title>🚩 Siemens Software Center DLL sideloading vulnerability is being actively exploited in ClickFix campaigns to deploy remote access trojans.</news:title>
   <news:publication_date>2026-10-20T19:31:12Z</news:publication_date>
   <news:genres>Blog</news:genres>
  </news:news>
 </url>
 <url>
  <loc>https://sra.io/blog/building-an-ot-aware-soc-how-ai-will-help/</loc>
  <lastmod>2026-10-20T18:51:03Z</lastmod>
  <news:news>
   <news:publication>
    <news:name>Security Risk Advisors</news:name>
    <news:language>en</news:language>
   </news:publication>
   <news:title>Building an OT-Aware SOC: How AI Will Help</news:title>
   <news:publication_date>2026-10-20T18:50:52Z</news:publication_date>
   <news:genres>Blog</news:genres>
  </news:news>
 </url>
 <url>
  <loc>https://unit42.paloaltonetworks.com/top-5-initial-access-vectors-september-2026/#new_tab</loc>
  <lastmod>2026-10-19T20:51:35Z</lastmod>
  <news:news>
   <news:publication>
    <news:name>Security Risk Advisors</news:name>
    <news:language>en</news:language>
   </news:publication>
   <news:title>Public-Facing Application Exploitation and Credential Abuse Lead Unit 42’s September Initial Access Observations</news:title>
   <news:publication_date>2026-10-19T20:51:35Z</news:publication_date>
   <news:genres>Blog</news:genres>
  </news:news>
 </url>
 <url>
  <loc>https://zmain.info/blog/plex2shell#new_tab</loc>
  <lastmod>2026-10-19T20:50:41Z</lastmod>
  <news:news>
   <news:publication>
    <news:name>Security Risk Advisors</news:name>
    <news:language>en</news:language>
   </news:publication>
   <news:title>Plex2Shell Vulnerability Chain Actively Exploited to Compromise Internet-Facing Plex Servers</news:title>
   <news:publication_date>2026-10-19T20:50:41Z</news:publication_date>
   <news:genres>Blog</news:genres>
  </news:news>
 </url>
 <url>
  <loc>https://cloud.google.com/blog/topics/threat-intelligence/armory-castle-exploits-beyondtrust/#new_tab</loc>
  <lastmod>2026-10-19T20:49:49Z</lastmod>
  <news:news>
   <news:publication>
    <news:name>Security Risk Advisors</news:name>
    <news:language>en</news:language>
   </news:publication>
   <news:title>🚩ARMORY CASTLE Exploits BeyondTrust Remote Support Zero-Day to Establish Persistent Access</news:title>
   <news:publication_date>2026-10-19T20:49:49Z</news:publication_date>
   <news:genres>Blog</news:genres>
  </news:news>
 </url>
</urlset>
