<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:image="http://www.google.com/schemas/sitemap-image/1.1">
<url>
<loc>https://threatintelreview.com</loc>
<lastmod>2026-11-03T17:07:21.122Z</lastmod>
<changefreq>daily</changefreq>
<priority>1</priority>
</url>
<url>
<loc>https://threatintelreview.com/sections/agent-threats</loc>
<lastmod>2026-10-29T15:31:58.120Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://threatintelreview.com/sections/secure-development</loc>
<lastmod>2026-11-01T17:20:43.922Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://threatintelreview.com/sections/runtime-controls</loc>
<lastmod>2026-10-31T14:35:44.922Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://threatintelreview.com/sections/agent-security</loc>
<lastmod>2026-10-19T14:16:14.273Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://threatintelreview.com/sections/threat-platforms</loc>
<lastmod>2026-10-02T14:15:44.653Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://threatintelreview.com/sections/adversarial-ml-and-prompt-attacks</loc>
<lastmod>2026-11-03T17:07:21.122Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://threatintelreview.com/sections/agent-runtime</loc>
<lastmod>2026-10-14T16:11:47.992Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://threatintelreview.com/sections/features</loc>
<lastmod>2026-09-01T18:36:15.582Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://threatintelreview.com/authors/kieran-voss-nakamura</loc>
<lastmod>2026-11-03T17:07:21.122Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://threatintelreview.com/authors/desmond-okwuosa</loc>
<lastmod>2026-11-03T17:07:21.122Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://threatintelreview.com/authors/madeleine-truchon</loc>
<lastmod>2026-11-03T17:07:21.122Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://threatintelreview.com/authors/priya-subramaniam</loc>
<lastmod>2026-11-03T17:07:21.122Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/universal-adversarial-suffixes-against-tool-calling-llms</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/c66d0745-1347-4e63-b1ce-c24600d72d5a.jpeg</image:loc>
</image:image>
<lastmod>2026-11-03T17:07:21.122Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/benchmarking-prompt-injection-defenses-in-production-agents</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/e41998cc-9842-445b-bba8-9bf26bdbab05.jpeg</image:loc>
</image:image>
<lastmod>2026-11-02T15:41:26.395Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/ai-agent-security-skill-risks-mapped-to-developer-responsibilities</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/e70ae192-cace-4e75-b47e-cbcd67010f67.jpeg</image:loc>
</image:image>
<lastmod>2026-11-01T17:20:43.922Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/runtime-telemetry-collection-and-overhead-tradeoffs-for-ai-agents</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/025bf84c-07d8-47d3-8c06-5ce3bcdf145d.jpeg</image:loc>
</image:image>
<lastmod>2026-10-31T14:35:44.922Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/ai-agent-incident-taxonomy-for-security-operations-teams</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/c8328775-6413-4e6a-a311-33744765a8a1.jpeg</image:loc>
</image:image>
<lastmod>2026-10-29T15:31:58.120Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/inter-agent-trust-boundaries-in-multi-agent-pipeline-architectures</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/be6103dc-8a62-4bee-9efe-26939ac31c44.jpeg</image:loc>
</image:image>
<lastmod>2026-10-28T16:16:35.624Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/prompt-injection-vs-jailbreak-attacks-on-ai-agents</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/e70f2d8c-480e-46d2-851a-3dd1c715a6ec.jpeg</image:loc>
</image:image>
<lastmod>2026-10-27T15:21:50.289Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/output-filtering-gaps-in-multi-step-agent-tool-chains</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/6262dbf4-2613-4fa7-9148-a61437fd3f90.jpeg</image:loc>
</image:image>
<lastmod>2026-10-26T14:11:03.753Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/goal-hijacking-and-memory-poisoning-mechanics-in-production-agents</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/315a7c57-53c8-4536-9bf6-7093d31a11ee.jpeg</image:loc>
</image:image>
<lastmod>2026-10-24T16:15:52.514Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/ai-gateway-guardrail-coverage-gaps-across-litellm-and-kong</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/0c7842f1-727f-4f67-bc61-87a530c95bbb.jpeg</image:loc>
</image:image>
<lastmod>2026-10-23T15:31:31.300Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/machine-identity-and-inventory-management-for-production-ai-agents</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/af3cd446-2a8a-4f5f-8d13-9380bf2798d8.jpeg</image:loc>
</image:image>
<lastmod>2026-10-22T15:06:04.718Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/attacker-reconnaissance-of-ai-agent-tool-manifests-and-memory-architecture</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/0ff2923f-324b-43ed-bea5-6665399cfe96.jpeg</image:loc>
</image:image>
<lastmod>2026-10-21T13:56:27.591Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/pasta-threat-model-applied-to-llm-agent-architectures</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/21a00b27-9d86-4471-84b0-cf87a3e9c0f5.jpeg</image:loc>
</image:image>
<lastmod>2026-10-19T14:16:14.273Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/dread-scoring-calibrated-for-ai-agent-vulnerability-reports</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/dcaa2a46-0ecd-46c2-a823-1b5381bf8b4b.jpeg</image:loc>
</image:image>
<lastmod>2026-10-18T15:55:58.330Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/cyber-kill-chain-stages-adapted-for-ai-agent-intrusions</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/d46a2076-8219-4c32-a1e8-4b319d540897.jpeg</image:loc>
</image:image>
<lastmod>2026-10-17T14:15:44.010Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/oauth-scope-design-for-ai-agent-tool-integrations</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/76bc188a-432b-4abe-aef7-419d03916756.jpeg</image:loc>
</image:image>
<lastmod>2026-10-16T16:06:53.475Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/mitre-atlas-technique-mapping-for-llm-agent-attacks</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/386bf6b1-352b-4343-b25f-b05a546cdb9e.jpeg</image:loc>
</image:image>
<lastmod>2026-10-15T15:47:00.381Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/runtime-agent-security-monitoring-signals-and-detection-logic</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/5c0d6349-f81a-47e5-8065-9c7ab3b84b77.jpeg</image:loc>
</image:image>
<lastmod>2026-10-14T16:11:47.992Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/logging-and-audit-trail-requirements-for-production-ai-agents</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/846a0361-155c-4850-b164-9134d56e47f4.jpeg</image:loc>
</image:image>
<lastmod>2026-10-13T15:51:53.548Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/stride-threat-model-applied-to-ai-agent-tool-interfaces</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/58be86f1-dfd0-4b14-a571-ca6efe37150b.jpeg</image:loc>
</image:image>
<lastmod>2026-10-12T16:01:24.673Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/human-in-the-loop-controls-for-high-stakes-agent-actions</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/09f2efd8-355f-44c1-9ed6-c99951e6cbd6.jpeg</image:loc>
</image:image>
<lastmod>2026-10-11T14:20:55.669Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/security-testing-in-ci-cd-pipelines-for-ai-agent-releases</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/a7337aff-51ee-4803-8253-eee2ac32e172.jpeg</image:loc>
</image:image>
<lastmod>2026-10-10T15:31:56.333Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/incident-response-playbooks-for-compromised-ai-agents</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/94280e36-b66a-4356-a508-662b770b96c1.jpeg</image:loc>
</image:image>
<lastmod>2026-10-08T15:10:46.040Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/secure-configuration-baselines-for-mcp-server-deployments</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/04f94634-611a-4825-8277-5966ab1a0662.jpeg</image:loc>
</image:image>
<lastmod>2026-10-07T14:55:38.268Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/credential-management-patterns-for-tool-calling-ai-agents</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/d0906b69-832d-428f-8522-72b935cfbb16.png</image:loc>
</image:image>
<lastmod>2026-10-06T14:15:32.115Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/threat-modeling-frameworks-specific-to-llm-powered-agents</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/e22c7ea8-3916-44af-b5be-b42096ca87b6.jpeg</image:loc>
</image:image>
<lastmod>2026-10-05T14:10:38.386Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/security-release-gates-for-ai-agent-deployments</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/254b74e4-8972-4c73-a9a6-992851dfdae0.jpeg</image:loc>
</image:image>
<lastmod>2026-10-04T15:24:57.801Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/threat-intelligence-platform-selection-for-soc-workflows</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/c79ea0a4-f8b5-41a0-9b20-8a9c41eef39e.jpeg</image:loc>
</image:image>
<lastmod>2026-10-02T14:15:44.653Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/offensive-security-operations-augmented-by-ai-agents</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/77b66869-88bc-4b2f-b8e1-dc47211984d8.jpeg</image:loc>
</image:image>
<lastmod>2026-09-30T17:55:30.118Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/threat-intelligence-feed-quality-evaluation-criteria</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/c2a966ae-30b9-44d4-8f33-3fd67bcbf386.jpeg</image:loc>
</image:image>
<lastmod>2026-09-30T16:51:19.211Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/ai-generated-threat-intelligence-signals-in-enterprise-socs</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/36217d74-50db-471d-98f8-72640710c552.jpeg</image:loc>
</image:image>
<lastmod>2026-09-29T00:35:19.260Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/threat-hunting-in-environments-with-deployed-ai-agents</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/16f58f9b-815f-4650-bc0f-5e0e8a641b0c.jpeg</image:loc>
</image:image>
<lastmod>2026-09-26T23:30:08.555Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/threat-intelligence-coverage-gaps-for-ai-agent-attack-patterns</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/55749bb8-a66f-4274-8af5-73c05fd3fa92.jpeg</image:loc>
</image:image>
<lastmod>2026-09-26T05:10:59.017Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/provenance-tracking-for-ai-agent-tool-call-sequences</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/4ae4c5ae-8961-4c65-a902-736f1b8e6f5a.jpeg</image:loc>
</image:image>
<lastmod>2026-09-24T23:55:20.779Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/minimal-security-controls-that-preserve-agent-effectiveness</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/1977a7e1-4168-47c4-beb7-00dcf71b8d98.jpeg</image:loc>
</image:image>
<lastmod>2026-09-23T15:28:57.889Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/exfiltration-prevention-controls-for-tool-calling-agents</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/237759d2-6481-4bee-a25b-bedbee5265e9.jpeg</image:loc>
</image:image>
<lastmod>2026-09-21T14:35:53.080Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/guardrail-bypass-techniques-against-ai-agent-runtime-controls</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/e3722f6c-78ed-4121-8b19-2c92772f6319.jpeg</image:loc>
</image:image>
<lastmod>2026-09-20T15:15:03.019Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/argument-level-enforcement-in-ai-agent-tool-calls</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/3440ffc2-efca-4ae5-92a7-e6491e598503.jpeg</image:loc>
</image:image>
<lastmod>2026-09-19T16:07:53.905Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/least-privilege-tool-access-controls-for-llm-agents</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/71754b01-bf84-4992-98a0-0f7e90b76289.jpeg</image:loc>
</image:image>
<lastmod>2026-09-18T15:35:36.604Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/runtime-guardrails-for-browser-use-agents-in-production</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/7a06a85d-bbc3-422d-a81d-2f853d0fa3d1.jpeg</image:loc>
</image:image>
<lastmod>2026-09-17T15:39:15.071Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/ai-agent-pentesting-tools-compared-for-agentic-architectures</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/41308af6-d557-4720-a2ca-f423835b2759.jpeg</image:loc>
</image:image>
<lastmod>2026-09-16T14:23:13.083Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/proven-exploit-requirements-for-ai-agent-security-findings</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/20b72f5a-711c-4fe6-9e29-c26c25195dcc.png</image:loc>
</image:image>
<lastmod>2026-09-15T23:23:12.181Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/red-teaming-vs-continuous-verification-for-production-ai-agents</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/b6b6469e-27af-441d-95d4-994f9366fdbf.jpeg</image:loc>
</image:image>
<lastmod>2026-09-15T22:53:58.548Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/workflow-regression-testing-after-ai-agent-security-changes</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/0fa4b39e-6cc7-4af4-bf37-e36d662777d7.jpeg</image:loc>
</image:image>
<lastmod>2026-09-15T22:23:38.798Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/reproducible-security-evidence-standards-for-ai-agent-releases</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/3a973aca-6a51-485f-b523-ba371722e2c2.jpeg</image:loc>
</image:image>
<lastmod>2026-09-13T02:02:35.231Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/isolated-twin-environments-for-agent-security-testing</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/6f014d2f-5149-4ca9-b209-ee318e3a5550.jpeg</image:loc>
</image:image>
<lastmod>2026-09-12T03:01:55.645Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/owasp-agentic-top-10-applied-to-production-deployments</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/a6a6e04d-96b7-4d8a-ab15-c49c72b5f647.jpeg</image:loc>
</image:image>
<lastmod>2026-09-11T02:27:25.718Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/ai-agent-attack-surface-differences-from-traditional-api-threats</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/6e57d228-ed4c-4394-a56b-5ed0acc21f84.jpeg</image:loc>
</image:image>
<lastmod>2026-09-09T23:57:07.250Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/supply-chain-risk-in-third-party-mcp-tool-integrations</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/5b9ba4e5-a9c1-4fa7-ab3b-fa930bd616e8.jpeg</image:loc>
</image:image>
<lastmod>2026-09-09T00:43:50.747Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/reconnaissance-techniques-targeting-deployed-ai-agents</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/8418f82b-1a60-4ce0-9d40-6881954857dd.jpeg</image:loc>
</image:image>
<lastmod>2026-09-07T16:03:46.325Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/indirect-prompt-injection-in-agentic-retrieval-pipelines</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/3ca99ad1-546c-44ad-8f9c-8c153fef51de.jpeg</image:loc>
</image:image>
<lastmod>2026-09-06T15:47:43.128Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/prompt-injection-via-workspace-content-in-ai-ide-agents</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/9ae6d3f7-420e-43cf-b53e-1c658453bc41.jpeg</image:loc>
</image:image>
<lastmod>2026-09-05T15:53:14.195Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/privilege-escalation-paths-in-llm-agent-tool-chains</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/cdf87a40-4718-4c6c-89ba-1925e7277392.png</image:loc>
</image:image>
<lastmod>2026-09-04T15:24:56.981Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/tool-poisoning-exploits-against-mcp-servers</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/bb06091d-9aa6-45dd-8a5d-6feac1fd7567.jpeg</image:loc>
</image:image>
<lastmod>2026-09-03T15:15:31.652Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatintelreview.com/posts/best-threat-intelligence-platforms-in-2026</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/70d914f8-4bc1-45e7-9fa5-87cbe92fd92a/canvas/d547d54b-b67b-42db-ad46-a311f7ee366c/generated/b30f4156-6522-44ba-aecb-fdfe26204045.jpeg</image:loc>
</image:image>
<lastmod>2026-09-01T18:36:15.582Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
</urlset>
