<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"
        xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
  <url>
    <loc>https://ismalicious.com/fr/posts/jetbrains-teamcity-cve-2026-63077-kev-cicd-chaine-approvisionnement</loc>
    <news:news>
      <news:publication>
        <news:name>isMalicious</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-08-18T09:00:00.000Z</news:publication_date>
      <news:title>CVE-2026-63077 : RCE non authentifiée sur chaque serveur TeamCity On-Premises</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://ismalicious.com/posts/jetbrains-teamcity-cve-2026-63077-kev-cicd</loc>
    <news:news>
      <news:publication>
        <news:name>isMalicious</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-18T09:00:00.000Z</news:publication_date>
      <news:title>CVE-2026-63077 Puts Unauthenticated RCE on Every TeamCity On-Premises Server</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://ismalicious.com/posts/ibm-langflow-cve-2026-9198-ai-agent-rce</loc>
    <news:news>
      <news:publication>
        <news:name>isMalicious</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-17T09:00:00.000Z</news:publication_date>
      <news:title>CVE-2026-9198 Gives Unauthenticated RCE in IBM Langflow OSS Agent Control Planes</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://ismalicious.com/fr/posts/ibm-langflow-cve-2026-9198-rce-agents-ia</loc>
    <news:news>
      <news:publication>
        <news:name>isMalicious</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-08-17T09:00:00.000Z</news:publication_date>
      <news:title>CVE-2026-9198 : RCE non authentifiée sur les plans de contrôle d'agents IBM Langflow OSS</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://ismalicious.com/posts/inc-ransomware-sonicwall-sma-zero-day-chain</loc>
    <news:news>
      <news:publication>
        <news:name>isMalicious</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-16T09:00:00.000Z</news:publication_date>
      <news:title>INC Ransomware Chains Two SonicWall SMA Zero-Days (CVE-2026-15409, CVE-2026-15410)</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://ismalicious.com/fr/posts/ransomware-inc-sonicwall-sma-chaine-zero-day</loc>
    <news:news>
      <news:publication>
        <news:name>isMalicious</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-08-16T09:00:00.000Z</news:publication_date>
      <news:title>Le ransomware INC enchaîne deux zero-days SonicWall SMA (CVE-2026-15409, CVE-2026-15410)</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://ismalicious.com/fr/posts/demantelement-kit-phishing-kratos-vol-session-aitm</loc>
    <news:news>
      <news:publication>
        <news:name>isMalicious</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-08-08T09:00:00.000Z</news:publication_date>
      <news:title>Démantèlement du kit de phishing Kratos : 200 serveurs saisis, 1 800 copies en circulation</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://ismalicious.com/posts/kratos-phishing-kit-takedown-aitm-session-theft</loc>
    <news:news>
      <news:publication>
        <news:name>isMalicious</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-08T09:00:00.000Z</news:publication_date>
      <news:title>The Kratos Phishing Kit Takedown: 200 Servers Gone, 1,800 Copies Still Out There</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://ismalicious.com/posts/cisa-kev-arista-velocloud-fortios-edge-management-plane</loc>
    <news:news>
      <news:publication>
        <news:name>isMalicious</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-07T09:00:00.000Z</news:publication_date>
      <news:title>CISA KEV Adds Arista VeloCloud and FortiOS Flaws: Why CVSS Is the Wrong Sort Order</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://ismalicious.com/fr/posts/cisa-kev-arista-velocloud-fortios-plan-controle-peripherie</loc>
    <news:news>
      <news:publication>
        <news:name>isMalicious</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-08-07T09:00:00.000Z</news:publication_date>
      <news:title>KEV ajoute Arista VeloCloud et FortiOS : pourquoi le CVSS est le mauvais critère de tri</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://ismalicious.com/fr/posts/clop-ptc-windchill-cve-2026-12569-campagne-extorsion</loc>
    <news:news>
      <news:publication>
        <news:name>isMalicious</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-08-06T09:00:00.000Z</news:publication_date>
      <news:title>Cl0p exploite PTC Windchill (CVE-2026-12569) pour voler les données d'ingénierie</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://ismalicious.com/posts/clop-ptc-windchill-cve-2026-12569-extortion-campaign</loc>
    <news:news>
      <news:publication>
        <news:name>isMalicious</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-06T09:00:00.000Z</news:publication_date>
      <news:title>Cl0p Is Exploiting PTC Windchill (CVE-2026-12569) to Steal Engineering Data</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://ismalicious.com/fr/posts/compromission-github-actions-chaine-approvisionnement-cicd</loc>
    <news:news>
      <news:publication>
        <news:name>isMalicious</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-08-05T09:00:00.000Z</news:publication_date>
      <news:title>Compromission de GitHub Actions et des pipelines CI/CD : un vecteur d'attaque en pleine expansion sur la chaîne d'approvisionnement</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://ismalicious.com/posts/github-actions-cicd-pipeline-supply-chain-compromise</loc>
    <news:news>
      <news:publication>
        <news:name>isMalicious</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-05T09:00:00.000Z</news:publication_date>
      <news:title>GitHub Actions and CI/CD Pipeline Compromise: A Growing Supply Chain Attack Vector</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://ismalicious.com/posts/infostealer-log-marketplaces-corporate-credential-theft</loc>
    <news:news>
      <news:publication>
        <news:name>isMalicious</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-04T09:00:00.000Z</news:publication_date>
      <news:title>Infostealer Log Marketplaces: How Stolen Corporate Credentials End Up for Sale</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://ismalicious.com/fr/posts/marches-logs-infostealer-vol-identifiants-entreprise</loc>
    <news:news>
      <news:publication>
        <news:name>isMalicious</news:name>
        <news:language>fr</news:language>
      </news:publication>
      <news:publication_date>2026-08-04T09:00:00.000Z</news:publication_date>
      <news:title>Marchés de logs d'infostealer : comment les identifiants d'entreprise volés finissent en vente</news:title>
    </news:news>
  </url>
</urlset>