<?xml version="1.0" encoding="UTF-8"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9"><url><loc>https://secopsmonitor.com/c/vulnerabilities/can-authenticated-users-manipulate-ba-workflow/</loc><news:news><news:publication><news:name>SecOps Monitor</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T07:58:42Z</news:publication_date><news:title>Can Authenticated Users Manipulate BA-Workflow Databases via CVE-2026-113407?</news:title></news:news></url><url><loc>https://secopsmonitor.com/c/vulnerabilities/how-uniong-webitr-deserialization-flaw-enables/</loc><news:news><news:publication><news:name>SecOps Monitor</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T07:13:58Z</news:publication_date><news:title>How Uniong WebITR Deserialization Flaw Enables Remote Code Execution</news:title></news:news></url><url><loc>https://secopsmonitor.com/c/malware/how-do-negotiator-ties-to-shinyhunters-expose/</loc><news:news><news:publication><news:name>SecOps Monitor</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T06:59:55Z</news:publication_date><news:title>How do negotiator ties to ShinyHunters expose victim data earlier?</news:title></news:news></url><url><loc>https://secopsmonitor.com/c/cyber-attacks/did-claude-code-detect-hidden-xmrig-cryptominer/</loc><news:news><news:publication><news:name>SecOps Monitor</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T06:48:40Z</news:publication_date><news:title>Did Claude Code Detect Hidden XMRig Cryptominer on Mac?</news:title></news:news></url><url><loc>https://secopsmonitor.com/c/vulnerabilities/can-unauthenticated-attackers-execute-code-on-2/</loc><news:news><news:publication><news:name>SecOps Monitor</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T05:26:26Z</news:publication_date><news:title>Can Unauthenticated Attackers Execute Code on Eptura Archibus Servers?</news:title></news:news></url><url><loc>https://secopsmonitor.com/c/vulnerabilities/can-unauthenticated-jgroups-messages-trigger-rce/</loc><news:news><news:publication><news:name>SecOps Monitor</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T02:21:59Z</news:publication_date><news:title>Can Unauthenticated JGroups Messages Trigger RCE in Apache Camel?</news:title></news:news></url><url><loc>https://secopsmonitor.com/c/vulnerabilities/is-your-db-gpt-instance-allowing-unauthenticated/</loc><news:news><news:publication><news:name>SecOps Monitor</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T02:12:49Z</news:publication_date><news:title>Is Your DB-GPT Instance Allowing Unauthenticated Root Access?</news:title></news:news></url><url><loc>https://secopsmonitor.com/c/vulnerabilities/can-unauthenticated-rs-485-attacks-hijack-zephyr/</loc><news:news><news:publication><news:name>SecOps Monitor</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-19T21:23:04Z</news:publication_date><news:title>Can unauthenticated RS-485 attacks hijack Zephyr access control panels via CVE-2026-76788?</news:title></news:news></url><url><loc>https://secopsmonitor.com/c/vulnerabilities/how-do-case-sensitive-checks-fail-to-block-twig/</loc><news:news><news:publication><news:name>SecOps Monitor</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-19T20:23:03Z</news:publication_date><news:title>How Do Case-Sensitive Checks Fail to Block Twig Exploits in Craft CMS?</news:title></news:news></url><url><loc>https://secopsmonitor.com/c/vulnerabilities/can-federated-users-hijack-local-accounts-in-wso2/</loc><news:news><news:publication><news:name>SecOps Monitor</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-19T17:49:30Z</news:publication_date><news:title>Can Federated Users Hijack Local Accounts in WSO2 Identity Server?</news:title></news:news></url><url><loc>https://secopsmonitor.com/c/cyber-attacks/why-are-attackers-surging-against-microsoft-with/</loc><news:news><news:publication><news:name>SecOps Monitor</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-19T09:59:52Z</news:publication_date><news:title>Why are attackers surging against Microsoft with 33% of Q3 2026 brand impersonation attempts?</news:title></news:news></url><url><loc>https://secopsmonitor.com/c/vulnerabilities/are-attackers-using-plex2shell-to-install/</loc><news:news><news:publication><news:name>SecOps Monitor</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-19T04:39:54Z</news:publication_date><news:title>Are Attackers Using Plex2Shell to Install Cryptominers on Media Servers?</news:title></news:news></url><url><loc>https://secopsmonitor.com/c/vulnerabilities/how-does-a-critical-flaw-in-google-agent-mesh/</loc><news:news><news:publication><news:name>SecOps Monitor</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-19T03:01:28Z</news:publication_date><news:title>How does a critical flaw in Google Agent Mesh expose inference endpoints to remote peers without valid tokens?</news:title></news:news></url></urlset>