<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
  <url>
    <loc>https://blog.gridinsoft.com/gootloader-disruption-wordpress-malware-delivery/</loc>
    <news:news>
      <news:publication>
        <news:name>Gridinsoft</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-13T14:30:49+00:00</news:publication_date>
      <news:title>Gootloader Disrupted: Police Cut Malware Delivery Routes</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://blog.gridinsoft.com/notion-fireworks-ai-chats-exposed-api-keys/</loc>
    <news:news>
      <news:publication>
        <news:name>Gridinsoft</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-13T08:32:18+00:00</news:publication_date>
      <news:title>Notion Reports Third-Party API Keys Exposed in AI Chats</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://blog.gridinsoft.com/gsocket-linux-server-persistence-after-patching/</loc>
    <news:news>
      <news:publication>
        <news:name>Gridinsoft</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-12T14:28:48+00:00</news:publication_date>
      <news:title>GSocket Keeps Linux Server Access Alive After Patching</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://blog.gridinsoft.com/falcon-c2-pdf-viewer-browser-session-spying/</loc>
    <news:news>
      <news:publication>
        <news:name>Gridinsoft</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-12T08:24:16+00:00</news:publication_date>
      <news:title>Falcon C2 Uses a Fake PDF Viewer to Spy Through the Browser</news:title>
    </news:news>
  </url>
</urlset>
