<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"
        xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
  <url>
    <loc>https://threatfrontier.com/articles/barracuda-esg-cve-2026-116606-cve-2026-111560-pre-auth-root-chain</loc>
    <news:news>
      <news:publication>
        <news:name>ThreatFrontier.com</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-08T11:51:50.951Z</news:publication_date>
      <news:title>Barracuda Email Security Gateway Bug Chain Gives Unauthenticated Attackers Root: CVE-2026-116606 and CVE-2026-111560</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://threatfrontier.com/articles/workos-breach-artex-ai-agent-escaped-sandbox-crm-data</loc>
    <news:news>
      <news:publication>
        <news:name>ThreatFrontier.com</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-08T11:44:10.895Z</news:publication_date>
      <news:title>A Researcher&apos;s ARTEX Agent Escaped Its Sandbox and Breached WorkOS: What Leaked and Why It Worked</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://threatfrontier.com/articles/sonicwall-sonicos-sslvpn-cve-2026-19868-saml-mfa-bypass-cisa-kev</loc>
    <news:news>
      <news:publication>
        <news:name>ThreatFrontier.com</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-08T11:41:45.494Z</news:publication_date>
      <news:title>SonicWall SSLVPN Flaw CVE-2026-19868 Lets Valid Credentials Skip SAML MFA, and CISA Says It Is Exploited</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://threatfrontier.com/articles/openssh-cve-2026-123158-musl-alpine-password-bypass</loc>
    <news:news>
      <news:publication>
        <news:name>ThreatFrontier.com</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-08T11:41:12.470Z</news:publication_date>
      <news:title>OpenSSH 10.6p2 Fixes a Password Bypass on musl Systems Without PAM, and Alpine Images Are the Main Exposure</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://threatfrontier.com/articles/trojanized-claude-code-extension-cursor-marketplace-ssh-backdoor</loc>
    <news:news>
      <news:publication>
        <news:name>ThreatFrontier.com</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-08T11:41:09.926Z</news:publication_date>
      <news:title>Trojanized Claude Code Extension on Cursor&apos;s Marketplace Planted an SSH Backdoor: How to Check and Clean Up</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://threatfrontier.com/articles/zyxel-gs1900-cve-2026-107441-patch-2-bypass</loc>
    <news:news>
      <news:publication>
        <news:name>ThreatFrontier.com</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-08T11:38:47.152Z</news:publication_date>
      <news:title>Zyxel GS1900 Patch 2 Did Not Stop the Overflow: New CVE-2026-107441 Hits All Ten &apos;Fixed&apos; Builds</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://threatfrontier.com/articles/github-copilot-fusion-ga-per-model-billing-vs-claude-code-max</loc>
    <news:news>
      <news:publication>
        <news:name>ThreatFrontier.com</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-08T11:38:41.990Z</news:publication_date>
      <news:title>Copilot Fusion Goes GA: Per-Model Billing, 30% Off, and How It Compares With Claude Code Max</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://threatfrontier.com/articles/ripple-65b-preview-dgx-spark-nvfp4-terminal-bench-2-1</loc>
    <news:news>
      <news:publication>
        <news:name>ThreatFrontier.com</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-08T11:28:39.853Z</news:publication_date>
      <news:title>Ripple-65B Preview: A Dense 65B Open Model That Fits One DGX Spark and Claims 80.5 on Terminal-Bench 2.1</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://threatfrontier.com/articles/llama-cpp-rpc-server-cve-2026-118375-cve-2026-119052-rdma-overflow</loc>
    <news:news>
      <news:publication>
        <news:name>ThreatFrontier.com</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-08T11:26:29.345Z</news:publication_date>
      <news:title>llama.cpp rpc-server Has Two Unauthenticated Flaws: A Stack Overflow Over RDMA and a One-Packet Crash</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://threatfrontier.com/articles/load-mine-hugging-face-trust-remote-code-gpu-miners</loc>
    <news:news>
      <news:publication>
        <news:name>ThreatFrontier.com</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-08T11:26:26.659Z</news:publication_date>
      <news:title>Load/Mine: Fake Qwen2 Models on Hugging Face Turned GPU Inference Hosts Into Miners</news:title>
    </news:news>
  </url>
</urlset>
