<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:image="http://www.google.com/schemas/sitemap-image/1.1">
<url>
<loc>https://agenticdefensereview.com</loc>
<lastmod>2026-11-01T17:20:41.030Z</lastmod>
<changefreq>daily</changefreq>
<priority>1</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/sections/ai-agent-attacks</loc>
<lastmod>2026-11-01T17:20:41.030Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/sections/shadow-ai</loc>
<lastmod>2026-10-30T15:46:52.622Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/sections/agent-identity</loc>
<lastmod>2026-10-25T16:55:47.984Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/sections/protocol-security</loc>
<lastmod>2026-10-24T16:01:00.567Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/sections/agentic-incident-response</loc>
<lastmod>2026-10-07T16:35:52.587Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/sections/security-controls</loc>
<lastmod>2026-10-31T16:25:56.343Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/sections/features</loc>
<lastmod>2026-09-16T21:11:30.091Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/authors/marcus-belliveau</loc>
<lastmod>2026-11-01T17:20:41.030Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/authors/priya-subramaniam</loc>
<lastmod>2026-11-01T17:20:41.030Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/authors/tobias-krenz</loc>
<lastmod>2026-11-01T17:20:41.030Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/authors/danielle-osei-mensah</loc>
<lastmod>2026-11-01T17:20:41.030Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/operationalizing-enterprise-mcp-governance-across-heterogeneous-agent-stacks</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/c42e7725-7ef6-49ab-a809-331d0c43f5ef.jpeg</image:loc>
</image:image>
<lastmod>2026-11-01T17:20:41.030Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/secure-agent-deployment-from-slack-and-collaboration-platforms</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/dc5247db-5acd-4ab9-a789-61fbcb031a92.jpeg</image:loc>
</image:image>
<lastmod>2026-10-31T16:25:56.343Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/mcp-traffic-fingerprinting-in-enterprise-siem-pipelines</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/48504e96-618c-4394-96c5-220dc6417675.jpeg</image:loc>
</image:image>
<lastmod>2026-10-30T15:46:52.622Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/ai-control-plane-architecture-for-single-pane-mcp-visibility</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/221f227c-d62c-4269-befb-b648143581b2.jpeg</image:loc>
</image:image>
<lastmod>2026-10-27T16:16:52.924Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/mcp-server-hardening-checklist-for-enterprise-deployments</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/207300ec-8189-4106-83e6-19a53df8a2fe.jpeg</image:loc>
</image:image>
<lastmod>2026-10-26T17:26:06.815Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/unified-mcp-control-planes-that-eliminate-per-project-auth-sprawl-for-platform-e</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/88476722-8903-4104-93c8-a3075cede05f.jpeg</image:loc>
</image:image>
<lastmod>2026-10-25T16:55:47.984Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/agent-development-lifecycle-security-gates</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/1e8b48d4-af07-47a7-b1a2-628b0a56f21a.jpeg</image:loc>
</image:image>
<lastmod>2026-10-24T16:01:00.567Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/aaif-working-group-security-recommendations-for-agent-interoperability</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/b4990555-3b46-4ee6-b8b1-190b0f6a500a.jpeg</image:loc>
</image:image>
<lastmod>2026-10-23T15:26:31.798Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/iso-iec-42001-ai-management-system-controls-for-agentic-deployments</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/d3b078f7-1196-4fee-8122-efe2b78c65c9.jpeg</image:loc>
</image:image>
<lastmod>2026-10-22T16:47:06.370Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/mcp-protocol-spec-changes-that-create-new-defensive-requirements</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/be3c0a1a-1964-4917-946c-f15e92e3b412.jpeg</image:loc>
</image:image>
<lastmod>2026-10-21T16:36:32.137Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/soc-2-evidence-requirements-for-ai-agent-audit-trails</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/26e96f99-4abd-4816-85bd-0eefed32c984.jpeg</image:loc>
</image:image>
<lastmod>2026-10-20T17:11:31.176Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/aarm-framework-application-to-mcp-tool-authorization</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/5ca7e28b-0beb-44ab-8d1d-d247a5091f2e.jpeg</image:loc>
</image:image>
<lastmod>2026-10-19T16:56:46.183Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/casb-and-sspm-gaps-in-detecting-agentic-ai-integrations</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/6e7542a7-bbe9-4f4b-bbe7-2809dbb8fbb7.jpeg</image:loc>
</image:image>
<lastmod>2026-10-18T17:25:45.894Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/endpoint-telemetry-indicators-for-shadow-agent-processes</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/109dff54-89d0-45a5-9da1-e63b688a1d10.jpeg</image:loc>
</image:image>
<lastmod>2026-10-17T16:00:55.598Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/enumerating-exposed-mcp-gateway-endpoints-in-enterprise-networks</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/2f1e709f-3a15-4b9d-9f42-f2ec57f82a8a.jpeg</image:loc>
</image:image>
<lastmod>2026-10-16T15:41:43.066Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/triaging-shadow-mcp-servers-by-blast-radius</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/caa89337-c84b-49c6-b893-c247761ba29f.jpeg</image:loc>
</image:image>
<lastmod>2026-10-15T15:02:20.429Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/network-level-detection-of-unsanctioned-mcp-clients</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/542f4d80-e79f-4598-b5d5-8ebe337d6891.jpeg</image:loc>
</image:image>
<lastmod>2026-10-14T15:52:07.746Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/saas-integration-discovery-for-unsanctioned-ai-connectors</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/ca41c69b-b87a-4463-849f-fcb0ca8b23bc.jpeg</image:loc>
</image:image>
<lastmod>2026-10-13T16:21:42.971Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/credential-scoping-patterns-for-autonomous-agent-tool-use</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/0f2a8a24-7e03-44ab-a894-0b65cfca5a7e.jpeg</image:loc>
</image:image>
<lastmod>2026-10-12T15:01:40.280Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/delegation-chains-in-multi-agent-systems</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/2acd5839-a7cd-4398-8270-579b0793b674.jpeg</image:loc>
</image:image>
<lastmod>2026-10-11T17:01:15.331Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/quantifying-shadow-ai-risk-with-an-asset-inventory-framework</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/a6d24d0d-7e18-40d1-93ff-94925e2ab89e.jpeg</image:loc>
</image:image>
<lastmod>2026-10-10T16:50:37.826Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/owasp-mcp-top-10-mapped-to-enterprise-deployment-risks</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/858f8725-9e8e-4dfe-af9c-b2a537a7a303.jpeg</image:loc>
</image:image>
<lastmod>2026-10-09T16:05:37.096Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/ai-agent-incident-response-runbook-structure-and-ownership</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/800bff4f-54e9-460b-b392-690af1a1330b.jpeg</image:loc>
</image:image>
<lastmod>2026-10-07T16:35:52.587Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/post-mortem-framework-for-agentic-system-failures</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/67cf1c78-5acc-4174-b0c7-77bd382eeace.png</image:loc>
</image:image>
<lastmod>2026-10-06T16:55:03.284Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/data-exfiltration-detection-in-agent-tool-call-sequences</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/383533ce-f41d-4e75-b571-879a452c9bff.jpeg</image:loc>
</image:image>
<lastmod>2026-10-05T15:31:02.148Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/anomalous-agent-behavior-alerting-with-tool-call-baselines</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/100b5506-975b-4e70-b803-5b9f3f60c5fb.jpeg</image:loc>
</image:image>
<lastmod>2026-10-04T16:25:05.516Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/otel-tracing-for-ai-agent-session-forensics</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/bdae4a8e-ce4e-46c7-b526-a1f54aa7c6aa.jpeg</image:loc>
</image:image>
<lastmod>2026-10-03T16:24:49.256Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/tamper-proof-audit-logging-architecture-for-ai-agent-actions</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/873fe119-829d-4805-9783-8e99b5147949.jpeg</image:loc>
</image:image>
<lastmod>2026-10-02T16:25:30.628Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/policy-based-access-control-at-tool-call-depth</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/1b648506-bfc5-4f12-9313-9bf20a1beae8.jpeg</image:loc>
</image:image>
<lastmod>2026-09-30T17:55:29.837Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/sso-and-scim-provisioning-for-ai-agent-principals</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/3d5dc435-9456-4c1b-b38e-441e19a7be91.jpeg</image:loc>
</image:image>
<lastmod>2026-09-30T16:16:45.706Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/jit-credential-issuance-for-ephemeral-agent-sessions</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/4d42208b-c640-4a7b-89e5-7fbdaf821939.jpeg</image:loc>
</image:image>
<lastmod>2026-09-29T04:08:51.085Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/oauth-2-0-limitations-for-non-human-agent-identities</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/5fd38881-a9f9-47ac-8694-c0ca09aee2d6.jpeg</image:loc>
</image:image>
<lastmod>2026-09-26T05:15:34.276Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/agent-sandbox-escape-techniques-and-mitigations</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/b85865d8-121a-4afd-b9be-7efb10b3b084.jpeg</image:loc>
</image:image>
<lastmod>2026-09-24T23:55:26.363Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/mcp-supply-chain-campaign-anatomy</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/0ffb7fef-cd0b-4775-848d-d8436e23195b.jpeg</image:loc>
</image:image>
<lastmod>2026-09-23T22:09:13.160Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/stdio-remote-code-execution-in-local-mcp-servers</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/0f7d13a1-bff1-4969-829f-b011e7cb35c7.jpeg</image:loc>
</image:image>
<lastmod>2026-09-22T17:51:00.618Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/ai-asset-sprawl-as-an-attack-surface-expansion-vector</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/a86a766f-13f9-4d7e-afbd-643f305f80fa.jpeg</image:loc>
</image:image>
<lastmod>2026-09-21T15:24:27.851Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/intent-drift-detection-in-autonomous-agent-sessions</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/470e5db9-84e2-4701-b371-a16dcf43086b.jpeg</image:loc>
</image:image>
<lastmod>2026-09-20T15:59:04.468Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/mcp-server-impersonation-and-rug-pull-attacks</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/4e0ea587-0862-4423-b645-fbc3f4458983.jpeg</image:loc>
</image:image>
<lastmod>2026-09-19T15:58:32.255Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/prompt-injection-in-agentic-pipelines</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/6cd6014e-d8f2-4b6c-9b01-e0455382a169.jpeg</image:loc>
</image:image>
<lastmod>2026-09-18T15:10:32.172Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/tool-poisoning-in-mcp-server-registries</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/1cc05519-9270-4292-8528-5d099ac7316f.jpeg</image:loc>
</image:image>
<lastmod>2026-09-17T16:35:23.395Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/containing-a-compromised-ai-agent-without-killing-the-workflow</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/dc8a6de5-12c1-40cd-ac82-d22ed8befdd5.jpeg</image:loc>
</image:image>
<lastmod>2026-09-16T21:11:30.091Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
</urlset>
