<?xml version="1.0" encoding="UTF-8"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9"><url><loc>https://kkm-mako.com/en/blog/articles/openshift-ai-cve/</loc><news:news><news:publication><news:name>Canarii</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-07-23T12:17:01+00:00</news:publication_date><news:title>Red Hat OpenShift AI: in-cluster pods can impersonate any user (CVE-2026-16745)</news:title></news:news></url><url><loc>https://kkm-mako.com/blog/articles/openshift-ai-cve/</loc><news:news><news:publication><news:name>Canarii</news:name><news:language>ja</news:language></news:publication><news:publication_date>2026-07-23T12:16:44+00:00</news:publication_date><news:title>Red Hat OpenShift AIに管理者なりすましの穴 CVE-2026-16745、3.5へ更新を</news:title></news:news></url><url><loc>https://kkm-mako.com/en/blog/articles/wordpress-plugins-2026-07-23-critical-vulnerabilities-roundup/</loc><news:news><news:publication><news:name>Canarii</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-07-23T11:09:56+00:00</news:publication_date><news:title>Four WordPress plugins hit by critical site-takeover flaws (July 23)</news:title></news:news></url><url><loc>https://kkm-mako.com/blog/articles/wordpress-plugins-2026-07-23-critical-vulnerabilities-roundup/</loc><news:news><news:publication><news:name>Canarii</news:name><news:language>ja</news:language></news:publication><news:publication_date>2026-07-23T11:09:45+00:00</news:publication_date><news:title>WordPressプラグイン4件に緊急の脆弱性、サイト乗っ取りの恐れ</news:title></news:news></url><url><loc>https://kkm-mako.com/en/blog/articles/fastjson-cve/</loc><news:news><news:publication><news:name>Canarii</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-07-23T10:11:26+00:00</news:publication_date><news:title>Fastjson RCE (CVE-2026-16723) puts Spring Boot apps at risk — act now</news:title></news:news></url><url><loc>https://kkm-mako.com/blog/articles/fastjson-cve/</loc><news:news><news:publication><news:name>Canarii</news:name><news:language>ja</news:language></news:publication><news:publication_date>2026-07-23T10:11:15+00:00</news:publication_date><news:title>Fastjsonに乗っ取りの穴 CVE-2026-16723、Javaの定番部品は今すぐ対処を</news:title></news:news></url><url><loc>https://kkm-mako.com/en/blog/articles/duplicati-cve/</loc><news:news><news:publication><news:name>Canarii</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-07-23T07:09:39+00:00</news:publication_date><news:title>Free Backup Tool 'Duplicati' Has an Admin-Takeover Flaw (CVE-2026-16157) — Only a Risk for Non-Default Install Folders</news:title></news:news></url><url><loc>https://kkm-mako.com/blog/articles/duplicati-cve/</loc><news:news><news:publication><news:name>Canarii</news:name><news:language>ja</news:language></news:publication><news:publication_date>2026-07-23T07:09:28+00:00</news:publication_date><news:title>無料バックアップソフト『Duplicati』に管理者権限を奪われる脆弱性 CVE-2026-16157、既定以外の場所に入れた場合は要対処</news:title></news:news></url><url><loc>https://kkm-mako.com/en/blog/articles/ricoh-printer-cve/</loc><news:news><news:publication><news:name>Canarii</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-07-23T06:10:40+00:00</news:publication_date><news:title>Ricoh Printers and MFPs Can Be Used as a Stepping Stone Into Your Network (CVE-2026-63226) — Update the Firmware if SSH Is On</news:title></news:news></url><url><loc>https://kkm-mako.com/blog/articles/ricoh-printer-cve/</loc><news:news><news:publication><news:name>Canarii</news:name><news:language>ja</news:language></news:publication><news:publication_date>2026-07-23T06:10:29+00:00</news:publication_date><news:title>リコーの複合機・プリンターに社内ネットワーク侵入の踏み台にされる脆弱性 CVE-2026-63226、SSH利用時はファームウェア更新を</news:title></news:news></url><url><loc>https://kkm-mako.com/en/blog/articles/openai-model-hugging-face-cyberattack/</loc><news:news><news:publication><news:name>Canarii</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-07-23T01:39:14+00:00</news:publication_date><news:title>OpenAI Says Its In-Development AI Escaped a Test Sandbox and Attacked Hugging Face</news:title></news:news></url><url><loc>https://kkm-mako.com/blog/articles/openai-model-hugging-face-cyberattack/</loc><news:news><news:publication><news:name>Canarii</news:name><news:language>ja</news:language></news:publication><news:publication_date>2026-07-23T01:39:04+00:00</news:publication_date><news:title>OpenAIの開発中AIが暴走、勝手にネットに出て別のAI企業を攻撃</news:title></news:news></url><url><loc>https://kkm-mako.com/en/blog/articles/check-point-smartconsole-cve/</loc><news:news><news:publication><news:name>Canarii</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-07-22T20:11:32+00:00</news:publication_date><news:title>Check Point management console can be hijacked with no login (CVE-2026-16232) — exploited in the wild, patch now</news:title></news:news></url><url><loc>https://kkm-mako.com/blog/articles/check-point-smartconsole-cve/</loc><news:news><news:publication><news:name>Canarii</news:name><news:language>ja</news:language></news:publication><news:publication_date>2026-07-22T20:11:22+00:00</news:publication_date><news:title>Check Pointの管理ソフトにログイン不要で管理者乗っ取りの脆弱性 CVE-2026-16232、悪用中で即修正を</news:title></news:news></url></urlset>