<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
  <url>
    <loc>https://rootnotes.in/article/an-ai-agent-left-its-sandbox-and-workos-now-runs-it-against-itself</loc>
    <news:news>
      <news:publication>
        <news:name>Root Notes</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-08T12:04:56.737Z</news:publication_date>
      <news:title>An AI agent left its sandbox, and WorkOS now runs it against itself</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://rootnotes.in/article/paints-fix-arrived-24-days-after-the-advisory-said-there-was-one</loc>
    <news:news>
      <news:publication>
        <news:name>Root Notes</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-08T12:04:45.465Z</news:publication_date>
      <news:title>Paint&apos;s fix arrived 24 days after the advisory said there was one</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://rootnotes.in/article/control-web-panels-backdoor-has-no-cve-and-patching-will-not-remove-it</loc>
    <news:news>
      <news:publication>
        <news:name>Root Notes</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-08T12:04:32.966Z</news:publication_date>
      <news:title>Control Web Panel&apos;s backdoor has no CVE, and patching will not remove it</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://rootnotes.in/article/lockdown-mode-held-the-iframe-around-it-did-not</loc>
    <news:news>
      <news:publication>
        <news:name>Root Notes</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-08T12:04:17.270Z</news:publication_date>
      <news:title>Lockdown Mode held. The iframe around it did not</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://rootnotes.in/article/mistral-measured-its-refusal-rate-then-published-the-weights</loc>
    <news:news>
      <news:publication>
        <news:name>Root Notes</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-08T12:04:05.040Z</news:publication_date>
      <news:title>Mistral measured its refusal rate, then published the weights</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://rootnotes.in/article/the-file-leaking-keys-on-github-was-reported-in-december-and-a-bot-closed-it</loc>
    <news:news>
      <news:publication>
        <news:name>Root Notes</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-08T12:03:54.453Z</news:publication_date>
      <news:title>The file leaking keys on GitHub was reported in December, and a bot closed it</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://rootnotes.in/article/openai-says-81-firefox-bugs-mozillas-advisory-credits-it-with-41</loc>
    <news:news>
      <news:publication>
        <news:name>Root Notes</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-07T06:21:22.162Z</news:publication_date>
      <news:title>OpenAI says 81 Firefox bugs, Mozilla&apos;s advisory credits it with 41</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://rootnotes.in/article/gitlabs-fix-for-a-10-0-is-a-patch-to-ruby-not-to-gitlab</loc>
    <news:news>
      <news:publication>
        <news:name>Root Notes</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-07T06:20:53.449Z</news:publication_date>
      <news:title>GitLab&apos;s fix for a 10.0 is a patch to Ruby, not to GitLab</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://rootnotes.in/article/alpines-own-cloud-images-shipped-both-halves-of-the-ssh-bypass</loc>
    <news:news>
      <news:publication>
        <news:name>Root Notes</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-07T06:20:29.279Z</news:publication_date>
      <news:title>Alpine&apos;s own cloud images shipped both halves of the SSH bypass</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://rootnotes.in/article/the-three-things-chainalysis-cleared-on-friday-were-gone-by-wednesday</loc>
    <news:news>
      <news:publication>
        <news:name>Root Notes</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-07T06:19:15.764Z</news:publication_date>
      <news:title>The three things Chainalysis cleared on Friday were gone by Wednesday</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://rootnotes.in/article/barracudas-advisory-said-authentication-required-then-it-did-not</loc>
    <news:news>
      <news:publication>
        <news:name>Root Notes</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-07T06:18:58.532Z</news:publication_date>
      <news:title>Barracuda&apos;s advisory said authentication required, then it did not</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://rootnotes.in/article/anthropic-said-dispatch-would-be-gone-by-november-it-is-still-there</loc>
    <news:news>
      <news:publication>
        <news:name>Root Notes</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-07T06:18:43.626Z</news:publication_date>
      <news:title>Anthropic said Dispatch would be gone by November, it is still there</news:title>
    </news:news>
  </url>
</urlset>