<?xml version="1.0" encoding="UTF-8"?>
<!--generator='jetpack-15.9-a.3'-->
<!--Jetpack_Sitemap_Buffer_News_XMLWriter-->
<?xml-stylesheet type="text/xsl" href="//sra.io/news-sitemap.xsl"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.sitemaps.org/schemas/sitemap/0.9 http://www.sitemaps.org/schemas/sitemap/0.9/sitemap.xsd">
 <url>
  <loc>https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fsocket.dev%2Fblog%2Flaravel-lang-compromise&amp;#038;data=05%7C02%7Ckimberly.kaleta%40sra.io%7C04c3af8c56324a26510908debb516e5b%7C9bdee6ea21c54c1ca6c941dc3d08c310%7C0%7C0%7C639154155569178638%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&amp;#038;sdata=9ccqAkIuBU6GV6BK9K8vEjfuAeH1jcQSwqMKTXUfBE8%3D&amp;#038;reserved=0#new_tab</loc>
  <lastmod>2026-05-26T18:32:12Z</lastmod>
  <news:news>
   <news:publication>
    <news:name>Security Risk Advisors</news:name>
    <news:language>en</news:language>
   </news:publication>
   <news:title>🚩 Laravel-Lang supply chain compromise rewrites 700+ package versions to silently deliver RCE and mass credential theft.</news:title>
   <news:publication_date>2026-05-26T18:32:12Z</news:publication_date>
   <news:genres>Blog</news:genres>
  </news:news>
 </url>
 <url>
  <loc>https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Ffalconfeeds.io%2Fblogs%2Fgithub-under-siege-teampcp-lapsus-lazarus-developer-ecosystem-abuse%2F&amp;#038;data=05%7C02%7Ckimberly.kaleta%40sra.io%7C2f873f15510044745e1608debb516d40%7C9bdee6ea21c54c1ca6c941dc3d08c310%7C0%7C0%7C639154155551399392%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&amp;#038;sdata=iDDjMJDgR%2BdsvQZdOOQyQNkD09m%2BZfrnQ04FQn7WG0M%3D&amp;#038;reserved=0#new_tab</loc>
  <lastmod>2026-05-26T18:31:09Z</lastmod>
  <news:news>
   <news:publication>
    <news:name>Security Risk Advisors</news:name>
    <news:language>en</news:language>
   </news:publication>
   <news:title>🚩 TeamPCP and LAPSUS$ weaponize VS Code extensions to breach GitHub and steal thousands of internal repositories.</news:title>
   <news:publication_date>2026-05-26T18:31:09Z</news:publication_date>
   <news:genres>Blog</news:genres>
  </news:news>
 </url>
 <url>
  <loc>https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.sentinelone.com%2Fvulnerability-database%2Fcve-2026-26980%2F&amp;#038;data=05%7C02%7Ckimberly.kaleta%40sra.io%7C2bcb72536ea8499e350308debb516c2b%7C9bdee6ea21c54c1ca6c941dc3d08c310%7C0%7C0%7C639154155552046634%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&amp;#038;sdata=rSpGxUbmJDLgzfhIPLTYrC94qUTLuDGcWe%2BI6Mu%2BC%2Fw%3D&amp;#038;reserved=0#new_tab</loc>
  <lastmod>2026-05-26T18:29:37Z</lastmod>
  <news:news>
   <news:publication>
    <news:name>Security Risk Advisors</news:name>
    <news:language>en</news:language>
   </news:publication>
   <news:title>🚩 Ghost CMS vulnerability fuels mass ClickFix campaign compromising 700+ websites with fake Cloudflare verification lures.</news:title>
   <news:publication_date>2026-05-26T18:29:37Z</news:publication_date>
   <news:genres>Blog</news:genres>
  </news:news>
 </url>
</urlset>
