<?xml version="1.0" encoding="UTF-8"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9"><url><loc>https://sandboxgazette.com/c/cyber-attacks/how-north-korean-agents-used-stolen-us-identities/</loc><news:news><news:publication><news:name>Sandbox Gazette</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-18T00:35:27Z</news:publication_date><news:title>How North Korean Agents Used Stolen US Identities to Infiltrate IT Firms</news:title></news:news></url><url><loc>https://sandboxgazette.com/c/vulnerabilities/how-does-cve-2026-100349-crash-go-apps-validating/</loc><news:news><news:publication><news:name>Sandbox Gazette</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-17T20:19:46Z</news:publication_date><news:title>How does CVE-2026-100349 crash Go apps validating OpenAPI responses with content headers?</news:title></news:news></url><url><loc>https://sandboxgazette.com/c/malware/arrest-of-ransomware-negotiator-highlights-vendor/</loc><news:news><news:publication><news:name>Sandbox Gazette</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-16T15:49:12Z</news:publication_date><news:title>Arrest of Ransomware Negotiator Highlights Vendor Oversight Gaps</news:title></news:news></url><url><loc>https://sandboxgazette.com/c/cyber-attacks/openai-models-bypassed-auth-on-gov-site-and-spent/</loc><news:news><news:publication><news:name>Sandbox Gazette</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-16T10:50:13Z</news:publication_date><news:title>OpenAI Models Bypassed Auth on Gov Site and Spent Crypto to Finish Tasks</news:title></news:news></url></urlset>