<?xml version="1.0" encoding="UTF-8"?>
<!--generator='jetpack-16.4-a.5'-->
<!--Jetpack_Sitemap_Buffer_News_XMLWriter-->
<?xml-stylesheet type="text/xsl" href="//sra.io/news-sitemap.xsl"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.sitemaps.org/schemas/sitemap/0.9 http://www.sitemaps.org/schemas/sitemap/0.9/sitemap.xsd">
 <url>
  <loc>https://research.checkpoint.com/2026/tricks-from-the-past-deployed-via-signed-chatgpt-and-claude-binaries/#new_tab</loc>
  <lastmod>2026-10-27T20:30:05Z</lastmod>
  <news:news>
   <news:publication>
    <news:name>Security Risk Advisors</news:name>
    <news:language>en</news:language>
   </news:publication>
   <news:title>Check Point Research uncovers Yoba, a Malware Campaign using Fake ChatGPT and Claude Installers and DLL Sideloading to Establish Persistence and Deploy Cryptocurrency Miners on Windows Systems</news:title>
   <news:publication_date>2026-10-27T20:30:05Z</news:publication_date>
   <news:genres>Blog</news:genres>
  </news:news>
 </url>
 <url>
  <loc>https://any.run/cybersecurity-blog/skyw4lker-phishing-kit-analysis/#new_tab</loc>
  <lastmod>2026-10-27T20:29:11Z</lastmod>
  <news:news>
   <news:publication>
    <news:name>Security Risk Advisors</news:name>
    <news:language>en</news:language>
   </news:publication>
   <news:title>ANY.RUN identifies SkyW4lker, an Active Phishing Kit Targeting Microsoft 365 users through Device-code Authentication Abuse that can Enable Unauthorized Account Access despite MFA Protections</news:title>
   <news:publication_date>2026-10-27T20:29:11Z</news:publication_date>
   <news:genres>Blog</news:genres>
  </news:news>
 </url>
 <url>
  <loc>https://www.zscaler.com/blogs/security-research/seo-poisoning-campaign-delivers-new-armorsteal-malware#new_tab</loc>
  <lastmod>2026-10-27T20:28:19Z</lastmod>
  <news:news>
   <news:publication>
    <news:name>Security Risk Advisors</news:name>
    <news:language>en</news:language>
   </news:publication>
   <news:title>Zscaler Uncovers an SEO Poisoning Campaign Impersonating Chocolatey and Microsoft Activation Scripts to Distribute Armorsteal</news:title>
   <news:publication_date>2026-10-27T20:28:19Z</news:publication_date>
   <news:genres>Blog</news:genres>
  </news:news>
 </url>
 <url>
  <loc>https://www.wiz.io/blog/cve-2026-111497-brotli-rce-node-js#new_tab</loc>
  <lastmod>2026-10-26T19:41:09Z</lastmod>
  <news:news>
   <news:publication>
    <news:name>Security Risk Advisors</news:name>
    <news:language>en</news:language>
   </news:publication>
   <news:title>Critical Broccoli2Shell Vulnerability In The Brotli Decoder Exposes Node.js, Bun, Envoy, Istio, and Other Applications to Potential Unauthenticated Remote Code Execution.</news:title>
   <news:publication_date>2026-10-26T19:41:09Z</news:publication_date>
   <news:genres>Blog</news:genres>
  </news:news>
 </url>
 <url>
  <loc>https://sra.io/microsoft-workshop-mdf/</loc>
  <lastmod>2026-10-26T19:41:30Z</lastmod>
  <news:news>
   <news:publication>
    <news:name>Security Risk Advisors</news:name>
    <news:language>en</news:language>
   </news:publication>
   <news:title>Microsoft Workshop</news:title>
   <news:publication_date>2026-10-26T19:40:41Z</news:publication_date>
   <news:genres>Blog</news:genres>
  </news:news>
 </url>
 <url>
  <loc>https://research.checkpoint.com/2026/infostealer-riding-the-ai-train/#new_tab</loc>
  <lastmod>2026-10-26T19:40:11Z</lastmod>
  <news:news>
   <news:publication>
    <news:name>Security Risk Advisors</news:name>
    <news:language>en</news:language>
   </news:publication>
   <news:title>Check Point Research uncovers Aokigahara, an Infostealer Targeting AI Application Sessions, Developer Credentials, Cloud Authentication Data, and Traditional Browser Secrets.</news:title>
   <news:publication_date>2026-10-26T19:40:11Z</news:publication_date>
   <news:genres>Blog</news:genres>
  </news:news>
 </url>
 <url>
  <loc>https://www.bleepingcomputer.com/news/security/blackx-uefi-bootkit-exploits-baton-drop-flaw-to-bypass-secure-boot/#new_tab</loc>
  <lastmod>2026-10-26T19:39:06Z</lastmod>
  <news:news>
   <news:publication>
    <news:name>Security Risk Advisors</news:name>
    <news:language>en</news:language>
   </news:publication>
   <news:title>🚩 BlackX Bootkit Exploits Baton Drop Flaw to Bypass Secure Boot on Patched Systems</news:title>
   <news:publication_date>2026-10-26T19:39:06Z</news:publication_date>
   <news:genres>Blog</news:genres>
  </news:news>
 </url>
 <url>
  <loc>https://sra.io/form-submitted-microsoft-workshop-mdf/</loc>
  <lastmod>2026-10-26T13:17:35Z</lastmod>
  <news:news>
   <news:publication>
    <news:name>Security Risk Advisors</news:name>
    <news:language>en</news:language>
   </news:publication>
   <news:title>Form Submitted - Microsoft Workshop MDF</news:title>
   <news:publication_date>2026-10-26T13:17:27Z</news:publication_date>
   <news:genres>Blog</news:genres>
  </news:news>
 </url>
</urlset>
