<?xml version="1.0" encoding="UTF-8"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9"><url><loc>https://appsecscoop.com/c/cyber-attacks/major-ai-firms-face-containment-failures-as/</loc><news:news><news:publication><news:name>AppSec Scoop</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T18:58:42Z</news:publication_date><news:title>Major AI firms face containment failures as models breach external systems due to missing security controls</news:title></news:news></url><url><loc>https://appsecscoop.com/c/vulnerabilities/stills-media-processor-patch-urgent-for-versions/</loc><news:news><news:publication><news:name>AppSec Scoop</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T18:29:09Z</news:publication_date><news:title>Stills Media Processor Patch Urgent for Versions Before 25.24.2</news:title></news:news></url><url><loc>https://appsecscoop.com/c/vulnerabilities/juniper-junos-os-j-web-flaw-grants/</loc><news:news><news:publication><news:name>AppSec Scoop</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T18:11:30Z</news:publication_date><news:title>Juniper Junos OS J-Web flaw grants unauthenticated remote code execution</news:title></news:news></url><url><loc>https://appsecscoop.com/c/vulnerabilities/orgs-at-risk-juniper-bgp-flaw-allows/</loc><news:news><news:publication><news:name>AppSec Scoop</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T18:07:34Z</news:publication_date><news:title>Orgs at risk: Juniper BGP flaw allows unauthenticated root access if monitoring is active</news:title></news:news></url><url><loc>https://appsecscoop.com/c/vulnerabilities/microsoft-fixes-high-severity-net-wpf/</loc><news:news><news:publication><news:name>AppSec Scoop</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T12:55:36Z</news:publication_date><news:title>Microsoft Fixes High-Severity .NET WPF Deserialization Flaw in Versions 8 to 11</news:title></news:news></url><url><loc>https://appsecscoop.com/c/cyber-attacks/openai-no-model-weights-or-source-code/</loc><news:news><news:publication><news:name>AppSec Scoop</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T12:27:08Z</news:publication_date><news:title>OpenAI: No Model Weights or Source Code Compromised by Engineer&#x27;s Hidden USB Recorder</news:title></news:news></url><url><loc>https://appsecscoop.com/c/vulnerabilities/critical-iis-flaw-lets-attackers-run-code/</loc><news:news><news:publication><news:name>AppSec Scoop</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T05:18:17Z</news:publication_date><news:title>Critical IIS Flaw Lets Attackers Run Code Remotely, Urging Organizations to Patch Now</news:title></news:news></url><url><loc>https://appsecscoop.com/c/vulnerabilities/critical-windows-heap-overflow-enables-remote/</loc><news:news><news:publication><news:name>AppSec Scoop</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T04:38:28Z</news:publication_date><news:title>Critical Windows Heap Overflow Enables Remote Code Execution, Urging Immediate Patching for Enterprises</news:title></news:news></url><url><loc>https://appsecscoop.com/c/vulnerabilities/wordpress-plugin-flaw-allows-low-level-users-to/</loc><news:news><news:publication><news:name>AppSec Scoop</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T04:02:36Z</news:publication_date><news:title>WordPress plugin flaw allows low-level users to execute remote code</news:title></news:news></url><url><loc>https://appsecscoop.com/c/vulnerabilities/critical-windows-dns-flaw-lets-attackers-run-code/</loc><news:news><news:publication><news:name>AppSec Scoop</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T03:00:45Z</news:publication_date><news:title>Critical Windows DNS Flaw Lets Attackers Run Code Remotely Without Login</news:title></news:news></url><url><loc>https://appsecscoop.com/c/vulnerabilities/microsoft-rpc-flaw-allows-remote-code-execution/</loc><news:news><news:publication><news:name>AppSec Scoop</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T02:26:14Z</news:publication_date><news:title>Microsoft RPC flaw allows remote code execution on exposed systems</news:title></news:news></url><url><loc>https://appsecscoop.com/c/vulnerabilities/windows-schannel-flaw-cve-2026-85818-needs-urgent/</loc><news:news><news:publication><news:name>AppSec Scoop</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T01:38:50Z</news:publication_date><news:title>Windows Schannel flaw CVE-2026-85818 needs urgent patching attention</news:title></news:news></url><url><loc>https://appsecscoop.com/c/vulnerabilities/critical-windows-vm-driver-flaw-enables-remote/</loc><news:news><news:publication><news:name>AppSec Scoop</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T01:38:50Z</news:publication_date><news:title>Critical Windows VM Driver Flaw Enables Remote Code Execution, NVD Rates Severity 9.8</news:title></news:news></url><url><loc>https://appsecscoop.com/c/vulnerabilities/adobe-aem-6-5-stored-xss-flaw-cve-2026-106629/</loc><news:news><news:publication><news:name>AppSec Scoop</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T00:37:45Z</news:publication_date><news:title>Adobe AEM 6.5 Stored XSS Flaw CVE-2026-106629 Risks Session Hijacking</news:title></news:news></url><url><loc>https://appsecscoop.com/c/vulnerabilities/aem-users-urged-to-patch-critical-cve-2026-48383/</loc><news:news><news:publication><news:name>AppSec Scoop</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-13T23:59:27Z</news:publication_date><news:title>AEM Users Urged to Patch Critical CVE-2026-48383 for Zero-Interaction Remote Code Execution</news:title></news:news></url><url><loc>https://appsecscoop.com/c/vulnerabilities/orgs-at-risk-unpatched-salty-docs-workflows/</loc><news:news><news:publication><news:name>AppSec Scoop</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-13T18:09:57Z</news:publication_date><news:title>Orgs at Risk: Unpatched Salty Docs Workflows Execute Fork Code, Exposing High-Value Tokens via CVE-2026-55675</news:title></news:news></url><url><loc>https://appsecscoop.com/c/cloud-security/yandex-cloud-services-disrupted-after-drone/</loc><news:news><news:publication><news:name>AppSec Scoop</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-13T18:09:57Z</news:publication_date><news:title>Yandex Cloud services disrupted after drone strikes hit three Russian data centres</news:title></news:news></url><url><loc>https://appsecscoop.com/c/vulnerabilities/risesoft-y9-users-face-unauthenticated-file-write/</loc><news:news><news:publication><news:name>AppSec Scoop</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-13T18:09:57Z</news:publication_date><news:title>Risesoft-y9 users face unauthenticated file write risk in versions up to 9.6.11</news:title></news:news></url><url><loc>https://appsecscoop.com/c/vulnerabilities/organizations-face-supply-chain-risks-as-docker/</loc><news:news><news:publication><news:name>AppSec Scoop</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-13T18:03:54Z</news:publication_date><news:title>Organizations Face Supply Chain Risks as Docker Patches Critical Token Reassignment Flaw CVE-2026-105445</news:title></news:news></url><url><loc>https://appsecscoop.com/c/ai/anthropic-warns-ai-worms-could-replicate-across/</loc><news:news><news:publication><news:name>AppSec Scoop</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-13T12:26:11Z</news:publication_date><news:title>Anthropic warns AI worms could replicate across insecure IoT hardware</news:title></news:news></url><url><loc>https://appsecscoop.com/c/cyber-attacks/orgs-hit-by-4-hour-canonical-outage-dev-tools-and/</loc><news:news><news:publication><news:name>AppSec Scoop</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-13T12:23:34Z</news:publication_date><news:title>Orgs hit by 4-hour Canonical outage; dev tools and repos remained safe during Oct DDoS</news:title></news:news></url><url><loc>https://appsecscoop.com/c/ai/hyperscalers-gain-liquid-cooled-102-4tbps-fabric/</loc><news:news><news:publication><news:name>AppSec Scoop</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-13T03:15:30Z</news:publication_date><news:title>Hyperscalers gain liquid-cooled 102.4Tbps fabric to unify distributed AI clusters</news:title></news:news></url><url><loc>https://appsecscoop.com/c/ai/microsoft-chief-cites-uks-superior-ai-oversight/</loc><news:news><news:publication><news:name>AppSec Scoop</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-13T02:44:13Z</news:publication_date><news:title>Microsoft chief cites UK&#x27;s superior AI oversight as model for urgent global safety rules</news:title></news:news></url><url><loc>https://appsecscoop.com/c/ai/dispute-over-jev-architecture-origins-complicates/</loc><news:news><news:publication><news:name>AppSec Scoop</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-13T02:18:44Z</news:publication_date><news:title>Dispute over Jev architecture origins complicates AI decision model adoption</news:title></news:news></url><url><loc>https://appsecscoop.com/c/ai/omron-acquires-onlogic-for-675m-to-expand/</loc><news:news><news:publication><news:name>AppSec Scoop</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-13T01:58:43Z</news:publication_date><news:title>Omron acquires OnLogic for $675m to expand physical AI capabilities</news:title></news:news></url><url><loc>https://appsecscoop.com/c/vulnerabilities/critical-sap-netweaver-flaw-lets-low-privilege/</loc><news:news><news:publication><news:name>AppSec Scoop</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-13T01:07:25Z</news:publication_date><news:title>Critical SAP NetWeaver Flaw Lets Low-Privilege Attackers Trigger Remote System Operations Without Checks</news:title></news:news></url><url><loc>https://appsecscoop.com/c/ai/dev-teams-face-coding-session-interruptions-from/</loc><news:news><news:publication><news:name>AppSec Scoop</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-13T00:42:24Z</news:publication_date><news:title>Dev teams face coding session interruptions from Codex CLI 0.157.0&#x27;s default hourly background updates</news:title></news:news></url><url><loc>https://appsecscoop.com/c/ai/mathematicians-urge-peers-to-halt-work-with/</loc><news:news><news:publication><news:name>AppSec Scoop</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-13T00:17:41Z</news:publication_date><news:title>Mathematicians urge peers to halt work with OpenAI after firm published solutions to complex problems</news:title></news:news></url><url><loc>https://appsecscoop.com/c/ai/financial-firms-risk-regulatory-gaps-as-ai/</loc><news:news><news:publication><news:name>AppSec Scoop</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-13T00:07:50Z</news:publication_date><news:title>Financial firms risk regulatory gaps as AI adoption outpaces compliance controls</news:title></news:news></url><url><loc>https://appsecscoop.com/c/ai/meta-defends-muse-ai-explicit-output-as-lawful/</loc><news:news><news:publication><news:name>AppSec Scoop</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-12T23:38:19Z</news:publication_date><news:title>Meta defends Muse AI explicit output as lawful, sparking critic backlash over permissive prompts</news:title></news:news></url><url><loc>https://appsecscoop.com/c/ai/philly-police-criticize-anthropics-2-month-delay/</loc><news:news><news:publication><news:name>AppSec Scoop</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-12T20:23:55Z</news:publication_date><news:title>Philly Police Criticize Anthropic&#x27;s 2-Month Delay in Reporting AI&#x27;s Fake Homicide Lead</news:title></news:news></url><url><loc>https://appsecscoop.com/c/vulnerabilities/organisations-at-risk-quarkus-cve-2026-87744/</loc><news:news><news:publication><news:name>AppSec Scoop</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-12T19:32:36Z</news:publication_date><news:title>Organisations at Risk: Quarkus CVE-2026-87744 Drops Class-Level Security in REST Data Panache</news:title></news:news></url></urlset>