<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"
        xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
  <url>
    <loc>https://www.intelfusions.com/news/wordpress-mu-plugin-etherhiding-self-healing</loc>
    <news:news>
      <news:publication>
        <news:name>IntelFusions</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-22T17:36:37.501Z</news:publication_date>
      <news:title>WordPress malware hides its C2 on the Ethereum blockchain</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.intelfusions.com/news/closedquorum-llm-quorum-autonomous-c2</loc>
    <news:news>
      <news:publication>
        <news:name>IntelFusions</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-22T17:01:45.145Z</news:publication_date>
      <news:title>Malware lets four AI models vote on its next move</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.intelfusions.com/news/eviltokens-device-code-phishing-dcu-disruption</loc>
    <news:news>
      <news:publication>
        <news:name>IntelFusions</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-22T16:28:54.534Z</news:publication_date>
      <news:title>Microsoft disrupts AI phishing kit that hit 12,000 inboxes</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.intelfusions.com/news/mikrotrick-certpl-analysis-patch-diffing-window</loc>
    <news:news>
      <news:publication>
        <news:name>IntelFusions</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-22T16:00:00.209Z</news:publication_date>
      <news:title>MikroTik&apos;s silent patch was reverse engineered in a day</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.intelfusions.com/news/synology-dsm-critical-unauthenticated-file-write</loc>
    <news:news>
      <news:publication>
        <news:name>IntelFusions</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-22T11:28:43.384Z</news:publication_date>
      <news:title>Two critical Synology NAS bugs let strangers write files</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.intelfusions.com/news/proxyware-copilot-disguise-larva-25012</loc>
    <news:news>
      <news:publication>
        <news:name>IntelFusions</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-22T10:41:56.753Z</news:publication_date>
      <news:title>Proxyware hides as a Copilot service on hijacked PCs</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.intelfusions.com/news/settra-ransomware-typo-spares-defender-log</loc>
    <news:news>
      <news:publication>
        <news:name>IntelFusions</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-22T10:21:56.753Z</news:publication_date>
      <news:title>A typo saved Defender&apos;s logs from Settra ransomware</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.intelfusions.com/news/inc-ransom-second-note-press-release-threat</loc>
    <news:news>
      <news:publication>
        <news:name>IntelFusions</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-22T10:00:00.258Z</news:publication_date>
      <news:title>INC ransomware now threatens victims with a press release</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.intelfusions.com/news/check-point-management-server-preauth-root-rce</loc>
    <news:news>
      <news:publication>
        <news:name>IntelFusions</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-22T06:13:03.346Z</news:publication_date>
      <news:title>Login bug gives root on Check Point&apos;s own servers</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.intelfusions.com/news/waterplum-joint-advisory-laptop-farm-japan</loc>
    <news:news>
      <news:publication>
        <news:name>IntelFusions</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-22T05:31:37.761Z</news:publication_date>
      <news:title>Fake job offers infected 30,000 devices worldwide</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.intelfusions.com/news/gyazo-helpfeel-breach-screenshot-metadata</loc>
    <news:news>
      <news:publication>
        <news:name>IntelFusions</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-22T04:57:42.189Z</news:publication_date>
      <news:title>Gyazo leak exposes 23.6M accounts and private images</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.intelfusions.com/news/wordpress-core-click2shell-preauth-rce</loc>
    <news:news>
      <news:publication>
        <news:name>IntelFusions</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-22T04:10:00.215Z</news:publication_date>
      <news:title>One admin click can hand over a WordPress site</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.intelfusions.com/news/argentina-record-week-ransomware-leak-claims</loc>
    <news:news>
      <news:publication>
        <news:name>IntelFusions</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-21T22:20:27.501Z</news:publication_date>
      <news:title>Argentina had its busiest week yet on ransomware leak sites</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.intelfusions.com/news/fake-ai-subscription-sites-one-starter-kit</loc>
    <news:news>
      <news:publication>
        <news:name>IntelFusions</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-21T22:00:00.238Z</news:publication_date>
      <news:title>Over 100 fake AI sites sell subscriptions up to $2,000</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.intelfusions.com/news/vidar-string-obfuscation-virtual-machine-cipher</loc>
    <news:news>
      <news:publication>
        <news:name>IntelFusions</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-21T18:05:07.471Z</news:publication_date>
      <news:title>Vidar stealer changes its disguise with every build</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.intelfusions.com/news/kapibala-wordpress-government-records-theft</loc>
    <news:news>
      <news:publication>
        <news:name>IntelFusions</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-21T17:18:19.691Z</news:publication_date>
      <news:title>Hackers stole 18,000 records from a government site</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.intelfusions.com/news/payload-ransomware-group-policy-no-encryption</loc>
    <news:news>
      <news:publication>
        <news:name>IntelFusions</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-21T16:41:50.841Z</news:publication_date>
      <news:title>Group Policy alone put ransom notes on every PC</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.intelfusions.com/news/exvicy-clickfix-copycat-errtraffic-code</loc>
    <news:news>
      <news:publication>
        <news:name>IntelFusions</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-21T15:55:00.244Z</news:publication_date>
      <news:title>Fake Cloudflare checks hide a cloned malware-for-hire kit</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.intelfusions.com/news/leak-sites-ports-fuel-terminals-september-2026</loc>
    <news:news>
      <news:publication>
        <news:name>IntelFusions</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-21T09:55:00.046Z</news:publication_date>
      <news:title>Extortion crews turn on ports and fuel terminals</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.intelfusions.com/news/f5-big-ip-dns-second-unpatched-dos</loc>
    <news:news>
      <news:publication>
        <news:name>IntelFusions</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-21T03:50:00.202Z</news:publication_date>
      <news:title>Second BIG-IP DNS bug in six weeks has no fix yet</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.intelfusions.com/news/audit-team-ransomware-russia-top-target</loc>
    <news:news>
      <news:publication>
        <news:name>IntelFusions</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-20T21:55:00.233Z</news:publication_date>
      <news:title>Extortion crew hits Russian firms and flags who paid</news:title>
    </news:news>
  </url>
</urlset>