<?xml version="1.0" encoding="UTF-8"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9"><url><loc>https://sandboxgazette.com/c/vulnerabilities/how-can-organizations-mitigate-phps-critical-cve/</loc><news:news><news:publication><news:name>Sandbox Gazette</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T21:26:20Z</news:publication_date><news:title>How can organizations mitigate PHP&#x27;s critical CVE-2026-109618 and 109619 remote code execution vulnerabilities?</news:title></news:news></url><url><loc>https://sandboxgazette.com/c/vulnerabilities/does-public-exploit-code-for-tenda-be3l-pros/</loc><news:news><news:publication><news:name>Sandbox Gazette</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T20:49:22Z</news:publication_date><news:title>Does Public Exploit Code for Tenda BE3L Pro&#x27;s Critical 9.4 CVSS Flaw Threaten 5GHz Security?</news:title></news:news></url><url><loc>https://sandboxgazette.com/c/vulnerabilities/can-a-malicious-site-hijack-your-storybook-dev/</loc><news:news><news:publication><news:name>Sandbox Gazette</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T19:55:03Z</news:publication_date><news:title>Can a malicious site hijack your Storybook dev server to run code?</news:title></news:news></url><url><loc>https://sandboxgazette.com/c/vulnerabilities/how-do-internally-discovered-cvss-9-8-flaws-in/</loc><news:news><news:publication><news:name>Sandbox Gazette</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T19:55:03Z</news:publication_date><news:title>How do internally discovered CVSS 9.8 flaws in Cisco Collab v14 impact security?</news:title></news:news></url><url><loc>https://sandboxgazette.com/c/cyber-attacks/did-comma-ai-ip-trigger-iq-lvbs-novaspark-attacks/</loc><news:news><news:publication><news:name>Sandbox Gazette</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T04:54:25Z</news:publication_date><news:title>Did Comma.ai IP trigger IQ.Lvbs NovaSpark attacks and Discord bans?</news:title></news:news></url><url><loc>https://sandboxgazette.com/c/malware/how-does-romulus-use-clickfix-to-install/</loc><news:news><news:publication><news:name>Sandbox Gazette</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T05:04:55Z</news:publication_date><news:title>How does ROMULUS use ClickFix to install LegionLoader via fake pages?</news:title></news:news></url></urlset>