<?xml version="1.0" encoding="UTF-8"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9"><url><loc>https://netsectribune.com/category/vulnerabilities/jpom-authorization-flaw-lets-users-steal-files/</loc><news:news><news:publication><news:name>NetSec Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-17T20:07:28Z</news:publication_date><news:title>Jpom Authorization Flaw Lets Users Steal Files Across Workspaces</news:title></news:news></url><url><loc>https://netsectribune.com/category/malware/forescout-romulus-clickfix-backend-distributes/</loc><news:news><news:publication><news:name>NetSec Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-17T18:43:41Z</news:publication_date><news:title>Forescout: ROMULUS ClickFix Backend Distributes LegionLoader via Six Servers</news:title></news:news></url><url><loc>https://netsectribune.com/category/vulnerabilities/freertos-kernel-flaw-lets-unprivileged-tasks/</loc><news:news><news:publication><news:name>NetSec Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-16T17:40:38Z</news:publication_date><news:title>FreeRTOS Kernel flaw lets unprivileged tasks access privileged memory on Cortex-R82</news:title></news:news></url><url><loc>https://netsectribune.com/category/cyber-attacks/energize-lab-eiliko-robots-exposed-to-remote/</loc><news:news><news:publication><news:name>NetSec Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-16T14:45:55Z</news:publication_date><news:title>Energize Lab Eiliko robots exposed to remote hijacking and data leakage</news:title></news:news></url><url><loc>https://netsectribune.com/category/cyber-attacks/barracuda-data-shows-captcha-abuse-now-central-to/</loc><news:news><news:publication><news:name>NetSec Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-16T02:43:35Z</news:publication_date><news:title>Barracuda data shows CAPTCHA abuse now central to malware and phishing campaigns</news:title></news:news></url><url><loc>https://netsectribune.com/category/vulnerabilities/gitpython-argument-injection-flaw-lets-attackers/</loc><news:news><news:publication><news:name>NetSec Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-16T01:58:14Z</news:publication_date><news:title>GitPython Argument Injection Flaw Lets Attackers Read Files via Branch Names</news:title></news:news></url><url><loc>https://netsectribune.com/category/vulnerabilities/slican-patches-cve-2026-35088-in-ipx-v6-62-0100/</loc><news:news><news:publication><news:name>NetSec Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-15T22:22:53Z</news:publication_date><news:title>Slican patches CVE-2026-35088 in IPx v6.62.0100; legacy models require hardware upgrades to fix</news:title></news:news></url></urlset>