<?xml version="1.0" encoding="UTF-8"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9" xmlns:xhtml="http://www.w3.org/1999/xhtml" xmlns:image="http://www.google.com/schemas/sitemap-image/1.1" xmlns:video="http://www.google.com/schemas/sitemap-video/1.1"><url><loc>https://theinjection.dev/</loc><lastmod>2026-10-07T07:05:48.295Z</lastmod></url><url><loc>https://theinjection.dev/about/</loc></url><url><loc>https://theinjection.dev/category/attack/</loc><lastmod>2026-10-07T07:05:48.295Z</lastmod></url><url><loc>https://theinjection.dev/category/benchmark/</loc><lastmod>2026-10-07T07:05:48.295Z</lastmod></url><url><loc>https://theinjection.dev/category/incident/</loc><lastmod>2026-10-07T07:05:48.295Z</lastmod></url><url><loc>https://theinjection.dev/category/lab-safety/</loc><lastmod>2026-10-07T07:05:48.295Z</lastmod></url><url><loc>https://theinjection.dev/category/research/</loc><lastmod>2026-10-07T07:05:48.295Z</lastmod></url><url><loc>https://theinjection.dev/category/supply-chain/</loc><lastmod>2026-10-07T07:05:48.295Z</lastmod></url><url><loc>https://theinjection.dev/category/tool/</loc><lastmod>2026-10-07T07:05:48.295Z</lastmod></url><url><loc>https://theinjection.dev/category/vulnerability/</loc><lastmod>2026-10-07T07:05:48.295Z</lastmod></url><url><loc>https://theinjection.dev/contact/</loc></url><url><loc>https://theinjection.dev/developers/</loc></url><url><loc>https://theinjection.dev/items/air-anthropic-skill-scanner-bypass/</loc><lastmod>2026-10-07T07:05:48.295Z</lastmod></url><url><loc>https://theinjection.dev/items/air-mcpjacking/</loc><lastmod>2026-10-07T07:05:48.295Z</lastmod></url><url><loc>https://theinjection.dev/items/air-plugin4shell/</loc><lastmod>2026-10-07T07:05:48.295Z</lastmod></url><url><loc>https://theinjection.dev/items/aisi-gpt-6-astra-unsanctioned-supply-chain-attacks/</loc><lastmod>2026-10-07T07:05:48.295Z</lastmod></url><url><loc>https://theinjection.dev/items/anthropic-claude-desktop-cowork-file-exec/</loc><lastmod>2026-10-07T07:05:48.295Z</lastmod></url><url><loc>https://theinjection.dev/items/anthropic-cyber-verification-program-tiers/</loc><lastmod>2026-10-07T07:05:48.295Z</lastmod></url><url><loc>https://theinjection.dev/items/arxiv-explosive-prompts-trigger-injections/</loc><lastmod>2026-10-07T07:05:48.295Z</lastmod></url><url><loc>https://theinjection.dev/items/caisi-glm-5-3-cyber-assessment/</loc><lastmod>2026-10-07T07:05:48.295Z</lastmod></url><url><loc>https://theinjection.dev/items/checkpoint-chatgpt-shared-artifactory-channel/</loc><lastmod>2026-10-07T07:05:48.295Z</lastmod></url><url><loc>https://theinjection.dev/items/claude-code-symlink-toctou-file-write/</loc><lastmod>2026-10-07T07:05:48.295Z</lastmod></url><url><loc>https://theinjection.dev/items/embracethered-ssms-copilot-select-to-sysadmin/</loc><lastmod>2026-10-07T07:05:48.295Z</lastmod></url><url><loc>https://theinjection.dev/items/gtig-ai-threat-tracker-prompting-to-autonomy/</loc><lastmod>2026-10-07T07:05:48.295Z</lastmod></url><url><loc>https://theinjection.dev/items/mcp-typescript-sdk-oauth-credential-leak/</loc><lastmod>2026-10-07T07:05:48.295Z</lastmod></url><url><loc>https://theinjection.dev/items/ollama-agent-bash-approval-bypass/</loc><lastmod>2026-10-07T07:05:48.295Z</lastmod></url><url><loc>https://theinjection.dev/items/owasp-agent-control-standard/</loc><lastmod>2026-10-07T07:05:48.295Z</lastmod></url><url><loc>https://theinjection.dev/items/socket-memtensor-memos-compromise/</loc><lastmod>2026-10-07T07:05:48.295Z</lastmod></url><url><loc>https://theinjection.dev/items/zenity-salesbleed-agentforce-exfiltration/</loc><lastmod>2026-10-07T07:05:48.295Z</lastmod></url><url><loc>https://theinjection.dev/privacy/</loc></url></urlset>