<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
  <url>
    <loc>https://zerodayfeed.com/article/unm-health-sciences-cyberattack-byod-extortion-claim-october-2026</loc>
    <news:news>
      <news:publication>
        <news:name>ZeroDayFeed</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-27T15:21:11+00:00</news:publication_date>
      <news:title><![CDATA[Cyberattack Diverts Ambulances at University of New Mexico Health System as Extortion Group Claims Massive Data Theft]]></news:title>
      <news:genres>Blog</news:genres>
    </news:news>
  </url>
  <url>
    <loc>https://zerodayfeed.com/article/microsoft-kb5134133-out-of-band-emudhra-certificate-distrust-october-2026</loc>
    <news:news>
      <news:publication>
        <news:name>ZeroDayFeed</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-27T15:21:10+00:00</news:publication_date>
      <news:title><![CDATA[Microsoft Ships Out-of-Band KB5134133 to Push eMudhra Distrust to Windows Machines That Miss Certificate Updates]]></news:title>
      <news:genres>Blog</news:genres>
    </news:news>
  </url>
  <url>
    <loc>https://zerodayfeed.com/article/keystone-hardware-wallet-webauth-key-breach-18835-devices-destroyed-october-2026</loc>
    <news:news>
      <news:publication>
        <news:name>ZeroDayFeed</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-27T15:21:09+00:00</news:publication_date>
      <news:title><![CDATA[Keystone Will Destroy 18,835 Hardware Wallets After a Website Breach Exposed Its Device-Authentication Key]]></news:title>
      <news:genres>Blog</news:genres>
    </news:news>
  </url>
  <url>
    <loc>https://zerodayfeed.com/article/arctic-wolf-microsoft-teams-fake-it-support-mail-bombing-october-2026</loc>
    <news:news>
      <news:publication>
        <news:name>ZeroDayFeed</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-27T15:21:08+00:00</news:publication_date>
      <news:title><![CDATA[Spam Flood, Then a Friendly Teams Message: Arctic Wolf Tracks 400+ Fake IT Support Intrusions]]></news:title>
      <news:genres>Blog</news:genres>
    </news:news>
  </url>
  <url>
    <loc>https://zerodayfeed.com/article/microsoft-authenticator-android-token-flaw-cve-2026-80097-october-2026</loc>
    <news:news>
      <news:publication>
        <news:name>ZeroDayFeed</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-27T11:44:36+00:00</news:publication_date>
      <news:title><![CDATA[Microsoft Authenticator for Android Flaw Let Zero-Permission Apps Collect Work Account Tokens (CVE-2026-80097)]]></news:title>
      <news:genres>Blog</news:genres>
    </news:news>
  </url>
  <url>
    <loc>https://zerodayfeed.com/article/rapid7-q3-threat-report-unauthenticated-flaws-three-day-exploitation-october-2026</loc>
    <news:news>
      <news:publication>
        <news:name>ZeroDayFeed</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-27T11:44:36+00:00</news:publication_date>
      <news:title><![CDATA[Rapid7 Q3 Report: Half of Exploited Flaws Need No Login, and Attackers Move Within Three Days]]></news:title>
      <news:genres>Blog</news:genres>
    </news:news>
  </url>
  <url>
    <loc>https://zerodayfeed.com/article/cisa-kev-php2shell-cve-2026-109618-109619-exploited-october-2026</loc>
    <news:news>
      <news:publication>
        <news:name>ZeroDayFeed</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-27T11:44:35+00:00</news:publication_date>
      <news:title><![CDATA[CISA Adds Both PHP2Shell Flaws to KEV After Confirmed Honeypot RCE; Federal Deadline Is Oct. 29]]></news:title>
      <news:genres>Blog</news:genres>
    </news:news>
  </url>
  <url>
    <loc>https://zerodayfeed.com/article/cert-ua-dahua-cameras-hijacked-easy4ip-serial-numbers-october-2026</loc>
    <news:news>
      <news:publication>
        <news:name>ZeroDayFeed</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-27T11:44:34+00:00</news:publication_date>
      <news:title><![CDATA[Ukraine's CERT-UA Warns Dahua Cameras Are Being Hijacked Through Predictable Cloud Serial Numbers]]></news:title>
      <news:genres>Blog</news:genres>
    </news:news>
  </url>
  <url>
    <loc>https://zerodayfeed.com/article/asd-amadey-botnet-controller-180000-pcs-annual-cyber-threat-report-october-2026</loc>
    <news:news>
      <news:publication>
        <news:name>ZeroDayFeed</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-27T11:44:33+00:00</news:publication_date>
      <news:title><![CDATA[Australia's Signals Directorate Reveals It Hijacked an Amadey Botnet Controller, Cutting Off 180,000 Infected PCs]]></news:title>
      <news:genres>Blog</news:genres>
    </news:news>
  </url>
  <url>
    <loc>https://zerodayfeed.com/article/wasmtime-cranelift-sandbox-escape-cve-2026-115889-cve-2026-115893-october-2026</loc>
    <news:news>
      <news:publication>
        <news:name>ZeroDayFeed</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-26T14:17:42+00:00</news:publication_date>
      <news:title><![CDATA[Wasmtime Patches Two CVSS 9.9 Cranelift Flaws That Let Wasm Modules Escape the Sandbox]]></news:title>
      <news:genres>Blog</news:genres>
    </news:news>
  </url>
  <url>
    <loc>https://zerodayfeed.com/article/state-bank-of-india-dark-web-customer-data-leak-october-2026</loc>
    <news:news>
      <news:publication>
        <news:name>ZeroDayFeed</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-26T14:17:41+00:00</news:publication_date>
      <news:title><![CDATA[State Bank of India Confirms 3,897 Customer Records With Personal Data Among 375,000 Found on the Dark Web]]></news:title>
      <news:genres>Blog</news:genres>
    </news:news>
  </url>
  <url>
    <loc>https://zerodayfeed.com/article/huntress-microsoft-365-token-replay-campaign-79-organizations-october-2026</loc>
    <news:news>
      <news:publication>
        <news:name>ZeroDayFeed</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-26T14:17:40+00:00</news:publication_date>
      <news:title><![CDATA[Stolen Microsoft 365 Sessions Replayed at 79 Organizations, Huntress Says. MFA Didn't Stop It.]]></news:title>
      <news:genres>Blog</news:genres>
    </news:news>
  </url>
  <url>
    <loc>https://zerodayfeed.com/article/cisa-2030-strategy-defend-harden-prevail-october-2026</loc>
    <news:news>
      <news:publication>
        <news:name>ZeroDayFeed</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-26T14:17:38+00:00</news:publication_date>
      <news:title><![CDATA[CISA 2030: The Agency's New Four-Year Strategy Bets on Resilience Over Prevention]]></news:title>
      <news:genres>Blog</news:genres>
    </news:news>
  </url>
  <url>
    <loc>https://zerodayfeed.com/article/ruby-onigmo-regex-fixes-gitlab-rce-cves-october-2026</loc>
    <news:news>
      <news:publication>
        <news:name>ZeroDayFeed</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-25T19:44:42+00:00</news:publication_date>
      <news:title><![CDATA[Ruby Patches Three Onigmo Regex Bugs Behind Four Critical GitLab RCE Flaws]]></news:title>
      <news:genres>Blog</news:genres>
    </news:news>
  </url>
  <url>
    <loc>https://zerodayfeed.com/article/kaspersky-blackx-uefi-bootkit-baton-drop-apt41-central-asia-october-2026</loc>
    <news:news>
      <news:publication>
        <news:name>ZeroDayFeed</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-25T19:44:40+00:00</news:publication_date>
      <news:title><![CDATA[Kaspersky: BlackX Bootkit Reuses BlackLotus's Baton Drop Trick Against Fully Patched Windows in Central Asia]]></news:title>
      <news:genres>Blog</news:genres>
    </news:news>
  </url>
  <url>
    <loc>https://zerodayfeed.com/article/k0t-fortigate-fortiweb-globalprotect-edge-campaign-qilin-gentlemen-october-2026</loc>
    <news:news>
      <news:publication>
        <news:name>ZeroDayFeed</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-25T19:44:38+00:00</news:publication_date>
      <news:title><![CDATA[Group-IB: 'k0t' Hit FortiGate, FortiWeb and GlobalProtect Edge Devices, With Victims Later Listed by Qilin and The Gentlemen]]></news:title>
      <news:genres>Blog</news:genres>
    </news:news>
  </url>
  <url>
    <loc>https://zerodayfeed.com/article/fcc-first-chip-level-enforcement-huawei-hisilicon-dash-cam-october-2026</loc>
    <news:news>
      <news:publication>
        <news:name>ZeroDayFeed</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-25T19:44:36+00:00</news:publication_date>
      <news:title><![CDATA[FCC Makes First Enforcement Under Chip-Level Rule, Blocking a Dash Cam and Video Transmitter With Huawei HiSilicon Silicon]]></news:title>
      <news:genres>Blog</news:genres>
    </news:news>
  </url>
</urlset>