<?xml version="1.0" encoding="utf-8" standalone="yes"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:xhtml="http://www.w3.org/1999/xhtml"><url><loc>https://firewallsync.com/categories/ai-security/</loc><lastmod>2026-11-07T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/categories/appsec/</loc><lastmod>2026-11-07T04:50:00+00:00</lastmod></url><url><loc>https://firewallsync.com/categories/identity-access/</loc><lastmod>2026-11-08T04:56:00+00:00</lastmod></url><url><loc>https://firewallsync.com/categories/cloud-security/</loc><lastmod>2026-11-06T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/categories/security-operations/</loc><lastmod>2026-11-08T04:55:00+00:00</lastmod></url><url><loc>https://firewallsync.com/categories/privacy-risk/</loc><lastmod>2026-10-07T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/categories/fundamentals/</loc><lastmod>2026-10-04T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/</loc><lastmod>2026-12-03T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/</loc><lastmod>2026-12-03T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/access-control/</loc><lastmod>2026-11-08T04:56:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/authorization/</loc><lastmod>2026-11-08T04:56:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/certificate-authority/</loc><lastmod>2026-11-08T04:56:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/data-breach/</loc><lastmod>2026-11-08T04:56:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/digicert/</loc><lastmod>2026-11-08T04:56:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/digicert-data-breach-self-registration-archived-customer-data/</loc><lastmod>2026-11-08T04:56:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/hacking-news/</loc><lastmod>2026-11-08T04:56:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/</loc><lastmod>2026-11-08T04:56:00+00:00</lastmod></url><url><loc>https://firewallsync.com/categories/</loc><lastmod>2026-11-08T04:56:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/automation/</loc><lastmod>2026-11-08T04:55:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/cve/</loc><lastmod>2026-11-08T04:55:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/cve-json-5/</loc><lastmod>2026-11-08T04:55:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/cvelistv5/</loc><lastmod>2026-11-08T04:55:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/cvelistv5-delta-json-deltalog-incremental-cve-sync/</loc><lastmod>2026-11-08T04:55:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/data-feeds/</loc><lastmod>2026-11-08T04:55:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/vulnerability-management/</loc><lastmod>2026-11-08T04:55:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/ai-security/</loc><lastmod>2026-11-07T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/prompt-injection-explained-how-attackers-manipulate-ai-applications/</loc><lastmod>2026-11-07T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/affected-versions/</loc><lastmod>2026-11-07T04:50:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/cisa-kev/</loc><lastmod>2026-11-07T04:50:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/epss/</loc><lastmod>2026-11-07T04:50:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/epss-scores-for-kev-cves-low-after-listing-threshold-audit/</loc><lastmod>2026-11-07T04:50:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/kernel-cna/</loc><lastmod>2026-11-07T04:50:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/linux-kernel/</loc><lastmod>2026-11-07T04:50:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/linux-kernel-cve-records-affected-versions-stable-branches/</loc><lastmod>2026-11-07T04:50:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/security-operations/</loc><lastmod>2026-11-07T04:50:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/vulnerability-prioritization/</loc><lastmod>2026-11-07T04:50:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/cloud-security/</loc><lastmod>2026-11-06T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/iam/</loc><lastmod>2026-11-06T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/what-is-workload-identity-and-why-should-you-stop-using-static-cloud-keys/</loc><lastmod>2026-11-06T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/epss-v5/</loc><lastmod>2026-11-06T04:45:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/epss-v5-score-shift-model-version-v2026-06-15/</loc><lastmod>2026-11-06T04:45:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/openvex/</loc><lastmod>2026-11-06T04:40:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/openvex-products-subcomponents-purl-matching-trivy/</loc><lastmod>2026-11-06T04:40:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/purl/</loc><lastmod>2026-11-06T04:40:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/sbom/</loc><lastmod>2026-11-06T04:40:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/supply-chain/</loc><lastmod>2026-11-06T04:40:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/trivy/</loc><lastmod>2026-11-06T04:40:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/vex/</loc><lastmod>2026-11-06T04:40:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/non-human-identities-the-security-problem-behind-service-accounts-and-ai-agents/</loc><lastmod>2026-11-05T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/appsec/</loc><lastmod>2026-11-05T04:40:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/cve-packageurl-purl-cve-json-5-2-affected-sbom-matching/</loc><lastmod>2026-11-05T04:40:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/package-url/</loc><lastmod>2026-11-05T04:40:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/version-matching/</loc><lastmod>2026-11-05T04:40:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/csaf/</loc><lastmod>2026-11-05T04:30:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/csaf-vex/</loc><lastmod>2026-11-05T04:30:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/csaf-vex-product-tree-product-status-purl-sbom-matching/</loc><lastmod>2026-11-05T04:30:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/how-to-audit-unused-cloud-accounts-roles-and-service-identities/</loc><lastmod>2026-11-04T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/cve-2026-119977/</loc><lastmod>2026-11-04T04:40:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/kev/</loc><lastmod>2026-11-04T04:40:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/patch-management/</loc><lastmod>2026-11-04T04:40:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/php/</loc><lastmod>2026-11-04T04:40:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/race-condition/</loc><lastmod>2026-11-04T04:40:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/rce/</loc><lastmod>2026-11-04T04:40:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/wordpress/</loc><lastmod>2026-11-04T04:40:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/wordpress-cve-2026-119977-upgrade-race-rce-kev/</loc><lastmod>2026-11-04T04:40:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/cpe/</loc><lastmod>2026-11-04T04:30:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/cpeapplicability/</loc><lastmod>2026-11-04T04:30:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/cve-cpeapplicability-cpe-match-nodes-operators-version-ranges/</loc><lastmod>2026-11-04T04:30:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/cloud-iam-vs-network-security-why-identity-has-become-the-new-perimeter/</loc><lastmod>2026-11-03T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/cyclonedx/</loc><lastmod>2026-11-03T04:40:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/cyclonedx-vex-analysis-state-justification-openvex-csaf-mapping/</loc><lastmod>2026-11-03T04:40:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/adp/</loc><lastmod>2026-11-03T04:30:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/cisa-vulnrichment/</loc><lastmod>2026-11-03T04:30:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/cve-adp-containers-cisa-adp-cve-program-supplier-sadp/</loc><lastmod>2026-11-03T04:30:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/ssvc/</loc><lastmod>2026-11-03T04:30:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/github-actions-oidc-stop-storing-cloud-credentials-in-cicd/</loc><lastmod>2026-11-02T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/cve-affected-versions-lessthan-defaultstatus-versiontype/</loc><lastmod>2026-11-02T04:40:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/vulnerability-prioritization-workflow-cve-record-to-patch-ticket/</loc><lastmod>2026-11-02T04:30:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/how-to-secure-github-actions-permissions-secrets-and-oidc/</loc><lastmod>2026-11-01T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/escape-user-input-regex-sql-like/</loc><lastmod>2026-11-01T04:40:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/go/</loc><lastmod>2026-11-01T04:40:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/input-validation/</loc><lastmod>2026-11-01T04:40:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/javascript/</loc><lastmod>2026-11-01T04:40:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/like/</loc><lastmod>2026-11-01T04:40:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/python/</loc><lastmod>2026-11-01T04:40:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/regex/</loc><lastmod>2026-11-01T04:40:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/sql/</loc><lastmod>2026-11-01T04:40:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/cve-2026-41709/</loc><lastmod>2026-11-01T04:30:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/esxi/</loc><lastmod>2026-11-01T04:30:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/logging/</loc><lastmod>2026-11-01T04:30:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/vmware/</loc><lastmod>2026-11-01T04:30:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/vmware-esx-cve-2026-41709-insufficient-logging-kev/</loc><lastmod>2026-11-01T04:30:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/vsphere/</loc><lastmod>2026-11-01T04:30:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/dependency-confusion-how-package-managers-can-become-an-attack-path/</loc><lastmod>2026-10-31T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/connect-secure/</loc><lastmod>2026-10-31T05:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/incident-response/</loc><lastmod>2026-10-31T05:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/ivanti/</loc><lastmod>2026-10-31T05:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/ivanti-connect-secure-cve-2026-111357-cve-2026-118527-kev/</loc><lastmod>2026-10-31T05:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/vpn/</loc><lastmod>2026-10-31T05:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/denial-of-service/</loc><lastmod>2026-10-31T04:50:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/node.js/</loc><lastmod>2026-10-31T04:50:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/redos/</loc><lastmod>2026-10-31T04:50:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/user-supplied-regex-redos-safe-engines/</loc><lastmod>2026-10-31T04:50:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/software-supply-chain-attacks-where-modern-build-pipelines-break/</loc><lastmod>2026-10-30T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/ci/cd/</loc><lastmod>2026-10-30T04:40:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/gitlab/</loc><lastmod>2026-10-30T04:40:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/gitlab-cve-2026-97229-ci-regex-rce-patch-and-hunt/</loc><lastmod>2026-10-30T04:40:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/ruby/</loc><lastmod>2026-10-30T04:40:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/express/</loc><lastmod>2026-10-30T04:30:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/file-upload/</loc><lastmod>2026-10-30T04:30:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/owasp/</loc><lastmod>2026-10-30T04:30:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/secure-file-upload-nodejs-express-multer/</loc><lastmod>2026-10-30T04:30:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/api-security/</loc><lastmod>2026-10-29T04:40:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/nodejs-decompression-bomb-zlib-limits/</loc><lastmod>2026-10-29T04:40:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/magento-cve-2026-48356-polyshell-patch-and-hunt/</loc><lastmod>2026-10-29T04:30:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/remote-code-execution/</loc><lastmod>2026-10-29T04:30:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/authentication/</loc><lastmod>2026-10-28T04:45:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/php-session-regenerate-id-stop-session-fixation/</loc><lastmod>2026-10-28T04:45:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/session-security/</loc><lastmod>2026-10-28T04:45:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/brotli-cve-2026-111497-find-and-patch-every-copy/</loc><lastmod>2026-10-28T04:40:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/configuration/</loc><lastmod>2026-10-27T04:55:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/hardening/</loc><lastmod>2026-10-27T04:55:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/php-ini-security-hardening-production-settings/</loc><lastmod>2026-10-27T04:55:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/php2shell-cve-2026-109618-cve-2026-109619-patch-and-hunt/</loc><lastmod>2026-10-27T04:50:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/audit-logging/</loc><lastmod>2026-10-26T04:45:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/detection-engineering/</loc><lastmod>2026-10-26T04:45:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/kubernetes/</loc><lastmod>2026-10-26T04:45:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/kubernetes-audit-log-detections-8-rules-tested/</loc><lastmod>2026-10-26T04:45:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/threat-hunting/</loc><lastmod>2026-10-26T04:45:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/code-injection/</loc><lastmod>2026-10-26T04:40:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/firewalls/</loc><lastmod>2026-10-26T04:40:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/pan-os-cve-2026-0322-management-interface-rce-patch-and-hunt/</loc><lastmod>2026-10-26T04:40:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/detection/</loc><lastmod>2026-10-25T04:45:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/kubernetes-audit-policy-what-to-log-and-at-what-level/</loc><lastmod>2026-10-25T04:45:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/sd-wan/</loc><lastmod>2026-10-25T04:40:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/sql-injection/</loc><lastmod>2026-10-25T04:40:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/velocloud-orchestrator-cve-2026-114625-patch-and-hunt/</loc><lastmod>2026-10-25T04:40:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/kubernetes-service-account-tokens-bound-vs-legacy-secrets/</loc><lastmod>2026-10-24T04:45:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/least-privilege/</loc><lastmod>2026-10-24T04:45:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/service-accounts/</loc><lastmod>2026-10-24T04:45:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/tokens/</loc><lastmod>2026-10-24T04:45:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/collabora-code-cve-2026-110447-nextcloud-patch-and-hunt/</loc><lastmod>2026-10-24T04:30:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/command-injection/</loc><lastmod>2026-10-24T04:30:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/nextcloud/</loc><lastmod>2026-10-24T04:30:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/encryption/</loc><lastmod>2026-10-23T04:45:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/etcd/</loc><lastmod>2026-10-23T04:45:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/kubernetes-secrets-encryption-at-rest-what-it-protects/</loc><lastmod>2026-10-23T04:45:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/secrets-management/</loc><lastmod>2026-10-23T04:45:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/atlassian/</loc><lastmod>2026-10-23T04:30:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/atlassian-cve-2026-21589-data-center-file-read-patch-and-hunt/</loc><lastmod>2026-10-23T04:30:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/path-traversal/</loc><lastmod>2026-10-23T04:30:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/llm-improper-output-handling-treat-model-output-as-untrusted-input/</loc><lastmod>2026-10-22T18:45:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/llm-security/</loc><lastmod>2026-10-22T18:45:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/xss/</loc><lastmod>2026-10-22T18:45:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/mass-assignment-vulnerability-how-to-stop-clients-setting-role-admin/</loc><lastmod>2026-10-22T18:44:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/kubernetes-rbac-audit-11-permissions-that-escalate-access/</loc><lastmod>2026-10-22T18:43:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/rbac/</loc><lastmod>2026-10-22T18:43:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/kubernetes-networkpolicy-default-deny-safe-rollout/</loc><lastmod>2026-10-22T18:42:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/network-security/</loc><lastmod>2026-10-22T18:42:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/zero-trust/</loc><lastmod>2026-10-22T18:42:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/beyondtrust-remote-support-cve-2026-102764-patch-and-hunt/</loc><lastmod>2026-10-22T18:41:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/remote-access/</loc><lastmod>2026-10-22T18:41:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/plex-media-server-cve-2026-96656-exploited-chain-patch-and-hunt/</loc><lastmod>2026-10-22T18:40:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/webhook-security-hmac-signatures-timestamps-and-replay-protection/</loc><lastmod>2026-10-22T19:20:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/process/</loc><lastmod>2026-10-18T06:06:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/ssvc-deployer-patch-priority-model-explained-exploitation-exposure-automatable-and-human-impact/</loc><lastmod>2026-10-18T06:06:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/kubernetes-mutatingadmissionpolicy-cel-mutations-apply-configuration-or-json-patch-and-when-a-webhook-is-still-needed/</loc><lastmod>2026-10-18T06:05:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/jwt-security-9-mistakes-that-can-turn-tokens-into-an-attack-path/</loc><lastmod>2026-10-17T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/how-to-read-a-cvss-v4-0-vector-string-metric-by-metric-with-real-cve-records/</loc><lastmod>2026-10-17T06:06:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/tools/</loc><lastmod>2026-10-17T06:06:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/kubernetes-validatingadmissionpolicy-cel-rules-for-registry-allowlists-and-memory-limits-with-a-warn-first-rollout/</loc><lastmod>2026-10-17T06:05:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/idor-vulnerabilities-how-to-find-and-fix-insecure-direct-object-references/</loc><lastmod>2026-10-16T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/cve-record-states-published-rejected-and-disputed-what-each-means-for-vulnerability-triage/</loc><lastmod>2026-10-16T06:12:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/fundamentals/</loc><lastmod>2026-10-16T06:12:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/epss-data-feed-columns-percentile-vs-probability-and-how-to-join-it-to-a-scanner-export/</loc><lastmod>2026-10-16T06:11:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/broken-access-control-real-world-examples-and-how-to-prevent-it/</loc><lastmod>2026-10-15T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/kubernetes-pod-security-admission-namespace-labels-modes-and-a-safe-rollout-from-warn-to-enforce/</loc><lastmod>2026-10-15T06:06:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/cisa-kev-json-feed-what-each-field-means-and-how-to-match-it-against-a-scanner-export/</loc><lastmod>2026-10-15T06:05:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/how-api-rate-limiting-actually-works-and-where-it-fails/</loc><lastmod>2026-10-14T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/verify-signed-container-images-in-kubernetes-sigstore-policy-controller-keyless-policy-and-rollout/</loc><lastmod>2026-10-14T06:08:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/cisa-vulnrichment-how-to-read-ssvc-values-in-a-cve-record-and-turn-them-into-a-patch-decision/</loc><lastmod>2026-10-14T06:07:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/the-most-common-api-security-misconfigurations-and-how-to-fix-them/</loc><lastmod>2026-10-13T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/cosign-container-image-signing-keyless-signing-in-ci-and-why-verification-must-pin-an-identity/</loc><lastmod>2026-10-13T06:06:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/vex-explained-what-a-not-affected-statement-means-and-how-to-read-one/</loc><lastmod>2026-10-13T08:05:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/how-to-secure-a-public-rest-api-a-production-checklist/</loc><lastmod>2026-10-12T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/cisa-bod-26-04-explained-kev-deadlines-forensic-triage-and-what-private-teams-can-borrow/</loc><lastmod>2026-10-12T09:22:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/slsa-build-levels-and-provenance-attestations-what-they-prove-and-what-they-dont/</loc><lastmod>2026-10-12T06:10:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/api-authentication-api-keys-vs-oauth-vs-jwt/</loc><lastmod>2026-10-11T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/sbom-minimum-elements-2026-what-cisa-and-partners-changed-from-the-2021-ntia-baseline/</loc><lastmod>2026-10-11T06:05:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/http-security-headers-hsts-nosniff-referrer-policy-and-permissions-policy-explained/</loc><lastmod>2026-10-11T06:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/burp-suite-vs-owasp-zap-which-web-app-scanner-fits-your-workflow/</loc><lastmod>2026-10-10T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/how-to-find-overprivileged-aws-iam-users-and-roles/</loc><lastmod>2026-10-10T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/content-security-policy-a-strict-nonce-based-policy-and-how-to-roll-it-out-safely/</loc><lastmod>2026-10-10T06:05:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/compliance/</loc><lastmod>2026-10-10T06:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/spf-dkim-and-dmarc-what-each-record-does-and-what-gmail-and-outlook-require/</loc><lastmod>2026-10-10T06:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/aws-iam-least-privilege-a-practical-guide-to-finding-excess-permissions/</loc><lastmod>2026-10-09T05:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/open-source-vs-commercial-siem-what-actually-changes-at-small-scale/</loc><lastmod>2026-10-09T05:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/1password-vs-bitwarden-vs-vaultwarden-choosing-a-password-manager-for-a-small-team/</loc><lastmod>2026-10-08T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/what-is-token-theft-and-why-mfa-doesnt-always-stop-it/</loc><lastmod>2026-10-08T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/s3-block-public-access-what-the-four-settings-do-and-how-to-enforce-them/</loc><lastmod>2026-10-08T08:20:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/cors-misconfiguration-what-access-control-allow-origin-actually-permits/</loc><lastmod>2026-10-08T08:15:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/how-to-secure-oauth-tokens-in-production/</loc><lastmod>2026-10-07T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/privacy/</loc><lastmod>2026-10-07T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/what-is-pii-and-why-classification-is-harder-than-it-sounds/</loc><lastmod>2026-10-07T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/csrf-protection-samesite-cookies-tokens-and-fetch-metadata-compared/</loc><lastmod>2026-10-07T08:35:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/cvss-vs-epss-vs-kev-which-signal-should-decide-what-you-patch-first/</loc><lastmod>2026-10-07T08:30:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/data-minimization-the-privacy-principle-most-teams-skip/</loc><lastmod>2026-10-06T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/passkeys-vs-passwords-what-actually-changes-for-security-teams/</loc><lastmod>2026-10-06T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/zitadel-account-takeover-cve-2026-105207-cve-2026-105209-cve-2026-105215-fixed-versions/</loc><lastmod>2026-10-06T06:35:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/netscaler-cve-2026-88779-saml-denial-of-service-exploited-patched-last-weeks-zero-days/</loc><lastmod>2026-10-06T06:30:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/cisco-catalyst-sd-wan-manager-cve-2026-76504-authentication-bypass-fixed-releases-and-log-checks/</loc><lastmod>2026-10-05T09:05:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/how-to-detect-and-rotate-leaked-api-keys-before-attackers-use-them/</loc><lastmod>2026-10-05T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/what-gdpr-actually-requires-a-plain-english-breakdown-for-engineering-teams/</loc><lastmod>2026-10-05T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/zammad-zero-days-cve-2026-102489-and-cve-2026-102490-what-is-fixed-and-what-is-not/</loc><lastmod>2026-10-05T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/encryption-at-rest-vs-encryption-in-transit-what-each-actually-protects-against/</loc><lastmod>2026-10-04T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/third-party-risk/</loc><lastmod>2026-10-04T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/vetting-third-party-saas-tools-before-they-touch-your-data/</loc><lastmod>2026-10-04T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/password-hashing-argon2id-vs-bcrypt-vs-scrypt-which-to-use-and-with-what-parameters/</loc><lastmod>2026-10-04T06:35:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/fortimail-zero-day-cve-2026-104286-no-patch-yet-what-to-do/</loc><lastmod>2026-10-04T06:30:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/cloud-misconfiguration-checklists-dont-work-heres-what-does/</loc><lastmod>2026-10-03T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/what-is-a-zero-day-vulnerability-and-how-should-you-actually-respond-to-one/</loc><lastmod>2026-10-03T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/ssrf-explained-how-server-side-request-forgery-works-and-how-to-prevent-it/</loc><lastmod>2026-10-03T08:05:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/citrix-netscaler-zero-days-cve-2026-88771-cve-2026-88772-patch-and-hunt/</loc><lastmod>2026-10-03T08:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/security-champions-programs-that-dont-fizzle-out/</loc><lastmod>2026-10-02T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/tags/security-culture/</loc><lastmod>2026-10-02T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/symmetric-vs-asymmetric-encryption-when-to-use-each/</loc><lastmod>2026-10-02T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/the-vulnerability-backlog-that-never-shrinks/</loc><lastmod>2026-10-01T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/what-is-the-cia-triad-and-why-it-still-shapes-security-decisions/</loc><lastmod>2026-10-01T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/logging-for-incidents-not-for-dashboards/</loc><lastmod>2026-09-30T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/dependency-audits-without-slowing-down-releases/</loc><lastmod>2026-09-29T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/container-image-scanning-what-ci-pipelines-still-miss/</loc><lastmod>2026-09-28T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/the-tabletop-exercise-gap-testing-incident-response-for-real/</loc><lastmod>2026-09-27T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/alert-fatigue-is-a-security-metric-not-a-morale-problem/</loc><lastmod>2026-09-26T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/mfa-fatigue-attacks-what-actually-stops-them/</loc><lastmod>2026-09-25T09:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/the-api-key-mistakes-that-keep-making-breach-reports/</loc><lastmod>2026-08-24T00:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/why-your-incident-postmortems-arent-preventing-repeats/</loc><lastmod>2026-08-12T00:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/posts/least-privilege-access-controls-that-dont-slow-teams-down/</loc><lastmod>2026-08-01T00:00:00+00:00</lastmod></url><url><loc>https://firewallsync.com/about/</loc></url><url><loc>https://firewallsync.com/advertise/</loc></url><url><loc>https://firewallsync.com/contact/</loc></url><url><loc>https://firewallsync.com/corrections/</loc></url><url><loc>https://firewallsync.com/disclaimer/</loc></url><url><loc>https://firewallsync.com/editorial-policy/</loc></url><url><loc>https://firewallsync.com/for-ai/</loc></url><url><loc>https://firewallsync.com/privacy/</loc></url><url><loc>https://firewallsync.com/terms/</loc></url><url><loc>https://firewallsync.com/write-for-us/</loc></url></urlset>