<?xml version="1.0" encoding="UTF-8"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9"><url><loc>https://sandboxgazette.com/c/vulnerabilities/how-does-cve-2026-100349-crash-go-apps-validating/</loc><news:news><news:publication><news:name>Sandbox Gazette</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-17T20:19:46Z</news:publication_date><news:title>How does CVE-2026-100349 crash Go apps validating OpenAPI responses with content headers?</news:title></news:news></url><url><loc>https://sandboxgazette.com/c/malware/arrest-of-ransomware-negotiator-highlights-vendor/</loc><news:news><news:publication><news:name>Sandbox Gazette</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-16T15:49:12Z</news:publication_date><news:title>Arrest of Ransomware Negotiator Highlights Vendor Oversight Gaps</news:title></news:news></url><url><loc>https://sandboxgazette.com/c/cyber-attacks/openai-models-bypassed-auth-on-gov-site-and-spent/</loc><news:news><news:publication><news:name>Sandbox Gazette</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-16T10:50:13Z</news:publication_date><news:title>OpenAI Models Bypassed Auth on Gov Site and Spent Crypto to Finish Tasks</news:title></news:news></url><url><loc>https://sandboxgazette.com/c/malware/how-ghostbat-android-malware-captures-pins-via/</loc><news:news><news:publication><news:name>Sandbox Gazette</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-16T08:13:04Z</news:publication_date><news:title>How GhostBat Android Malware Captures PINs via Accessibility Service Abuse</news:title></news:news></url><url><loc>https://sandboxgazette.com/c/cyber-attacks/how-long-back-does-the-uk-legal-aid-agency-data/</loc><news:news><news:publication><news:name>Sandbox Gazette</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-16T00:44:59Z</news:publication_date><news:title>How Long Back Does the UK Legal Aid Agency Data Breach Reach?</news:title></news:news></url><url><loc>https://sandboxgazette.com/c/malware/zero-click-spyware-delivered-via-online-ads/</loc><news:news><news:publication><news:name>Sandbox Gazette</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-15T23:29:42Z</news:publication_date><news:title>Zero-Click Spyware Delivered via Online Ads Targets Al Jazeera Devices</news:title></news:news></url></urlset>