<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
<url><loc>https://www.threatwire.tech/news/telegram-rlottie-bug-can-run-code-from-a-malicious-file-zdi-warns</loc><news:news><news:publication><news:name>ThreatWire</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-28T18:25:00.000Z</news:publication_date><news:title>Telegram rlottie bug can run code from a malicious file, ZDI warns</news:title></news:news></url>
<url><loc>https://www.threatwire.tech/news/goahead-6-1-1-fixes-tls-flaws-that-let-revoked-certificates-back-in</loc><news:news><news:publication><news:name>ThreatWire</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-27T17:30:00.000Z</news:publication_date><news:title>GoAhead 6.1.1 fixes TLS flaws that let revoked certificates back in</news:title></news:news></url>
<url><loc>https://www.threatwire.tech/news/citrix-fixes-php2shell-in-netscaler-upgrade-to-14-1-73-49-or-13-1-64-32</loc><news:news><news:publication><news:name>ThreatWire</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-27T17:05:00.000Z</news:publication_date><news:title>Citrix fixes PHP2Shell in NetScaler: upgrade to 14.1-73.49 or 13.1-64.32</news:title></news:news></url>
<url><loc>https://www.threatwire.tech/news/emudhra-blames-script-error-for-ca-keys-that-anyone-can-recover</loc><news:news><news:publication><news:name>ThreatWire</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-27T16:50:00.000Z</news:publication_date><news:title>eMudhra blames a script error for CA keys that anyone can recover</news:title></news:news></url>
<url><loc>https://www.threatwire.tech/news/ad-cs-domain-admin-climb-gets-public-poc-patch-april-2025-updates</loc><news:news><news:publication><news:name>ThreatWire</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-27T11:10:00.000Z</news:publication_date><news:title>AD CS Domain Admin climb gets a public PoC, patch April 2025 updates</news:title></news:news></url>
<url><loc>https://www.threatwire.tech/threats/php2shell-cisa-kev-exploited-patch-by-29-october</loc><news:news><news:publication><news:name>ThreatWire</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-27T08:50:00.000Z</news:publication_date><news:title>CISA lists PHP2Shell as exploited and gives agencies until 29 October</news:title></news:news></url>
<url><loc>https://www.threatwire.tech/threats/beyondtrust-remote-support-zero-day-exploited-apply-bt26-05</loc><news:news><news:publication><news:name>ThreatWire</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-27T08:32:00.000Z</news:publication_date><news:title>Attackers exploited a BeyondTrust Remote Support zero-day: apply BT26-05</news:title></news:news></url>
<url><loc>https://www.threatwire.tech/threats/tomcat-cluster-encryption-bypass-lets-attackers-run-code-cisa-lists-it</loc><news:news><news:publication><news:name>ThreatWire</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-27T02:50:00.000Z</news:publication_date><news:title>Tomcat cluster encryption bypass lets attackers run code, CISA lists it</news:title></news:news></url>
</urlset>
