<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://orasec.co/blog/bgp-hijack-delivered-a-backdoored-virtualizor-update</loc>
    <lastmod>2026-09-03</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/jfrog-artifactory-vulnerability-exploited-in-three-days</loc>
    <lastmod>2026-09-02</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/dll-sideloading-how-valleyrat-hides-behind-signed-software</loc>
    <lastmod>2026-09-01</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/terminalfix-the-clickfix-attack-that-uses-windows-terminal</loc>
    <lastmod>2026-08-31</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/internet-exposed-ot-why-100-water-sector-systems-were-targeted</loc>
    <lastmod>2026-08-28</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/cisa-red-team-why-one-soc-contained-the-attack-and-one-didnt</loc>
    <lastmod>2026-08-27</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/mirage2fa-the-microsoft-365-phishing-kit-that-bypasses-conventional-mfa</loc>
    <lastmod>2026-08-26</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/microsoft-copilot-security-when-one-click-leaks-your-data</loc>
    <lastmod>2026-08-25</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/what-is-a-byovd-attack-how-signed-drivers-bypass-edr</loc>
    <lastmod>2026-08-24</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/software-supply-chain-attacks-when-your-build-runs-malware</loc>
    <lastmod>2026-08-21</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/ssrf-vulnerability-how-attackers-steal-cloud-credentials</loc>
    <lastmod>2026-08-20</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/passkey-security-how-attackers-can-bypass-phishing-resistant-mfa</loc>
    <lastmod>2026-08-11</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/malicious-vs-code-extensions-how-ide-supply-chain-attacks-steal-developer-secrets</loc>
    <lastmod>2026-08-10</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/ai-agent-security-how-prompt-injection-becomes-an-attack-path</loc>
    <lastmod>2026-08-07</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/what-is-sql-injection-and-how-to-prevent-it</loc>
    <lastmod>2026-06-19</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/how-often-should-you-do-a-pentest</loc>
    <lastmod>2026-06-19</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/file-upload-vulnerabilities</loc>
    <lastmod>2026-06-19</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/what-is-bola-broken-object-level-authorization</loc>
    <lastmod>2026-06-19</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/best-supply-chain-security-companies-2025-tools</loc>
    <lastmod>2026-06-09</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/best-ways-to-speed-up-alert-triage-for-soc-team</loc>
    <lastmod>2026-06-09</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/penetration-testing-vs-vulnerability-assessment</loc>
    <lastmod>2026-06-09</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/red-team-vs-blue-team-vs-purple-team</loc>
    <lastmod>2026-06-09</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/best-deception-tools</loc>
    <lastmod>2026-06-09</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/bastion-host-guide-types-use-cases-security</loc>
    <lastmod>2026-06-09</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/best-anti-phishing-tools</loc>
    <lastmod>2026-06-09</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/best-static-code-analysis-tools</loc>
    <lastmod>2026-06-09</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/reasons-why-cybersecurity-is-essential</loc>
    <lastmod>2026-06-09</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/web-application-security-issues-and-their-solutions</loc>
    <lastmod>2026-06-09</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/application-security-vs-devsecops</loc>
    <lastmod>2026-05-22</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/dast-vs-penetration-testing</loc>
    <lastmod>2026-05-21</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/phishing-vs-spear-phishing-vs-whaling</loc>
    <lastmod>2026-05-21</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/google-cloud-security-risks</loc>
    <lastmod>2026-05-21</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/what-is-cloud-threat-hunting</loc>
    <lastmod>2026-05-15</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/steps-to-improve-cloud-security-vulnerability-remediation</loc>
    <lastmod>2026-05-15</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/what-is-penetration-testing</loc>
    <lastmod>2026-08-21</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/what-is-cuec-in-soc-report</loc>
    <lastmod>2026-05-15</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/benefits-of-network-security</loc>
    <lastmod>2026-05-15</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/free-malware-analysis-tools</loc>
    <lastmod>2026-05-15</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/honeypot-vs-honeynet-in-cybersecurity</loc>
    <lastmod>2026-05-15</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/the-future-of-red-teaming</loc>
    <lastmod>2026-05-09</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/vulnerability-management-vs-risk-management</loc>
    <lastmod>2026-05-08</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/what-is-api-hacking-prevention</loc>
    <lastmod>2026-05-09</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/how-to-stop-bad-rabbit-ransomware</loc>
    <lastmod>2026-05-07</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/how-to-prevent-back-door-attacks</loc>
    <lastmod>2026-08-24</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/ai-powered-investment-scams</loc>
    <lastmod>2026-05-09</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/what-is-digital-risk-protection-strategy</loc>
    <lastmod>2026-05-06</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/vulnerability-remediation-vs-mitigation-key-differences</loc>
    <lastmod>2026-05-05</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/choose-the-right-penetration-testing-provider</loc>
    <lastmod>2026-05-15</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/ptaas-vs-traditional-pentesting</loc>
    <lastmod>2026-05-09</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/what-is-session-hijacking-types-risks-and-prevention</loc>
    <lastmod>2026-05-15</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/the-challenge-of-real-time-cyber-protection</loc>
    <lastmod>2026-08-25</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/breach-attack-simulation-vs-red-teaming</loc>
    <lastmod>2026-05-01</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/importance-of-security-risk-management-for-growing-tech-companies</loc>
    <lastmod>2026-04-30</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/top-benefits-of-idr-automation</loc>
    <lastmod>2026-04-29</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/what-are-software-vulnerabilities</loc>
    <lastmod>2026-04-28</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/hybrid-attack-in-cyber-security</loc>
    <lastmod>2026-04-28</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/best-security-incident-response-tools</loc>
    <lastmod>2026-04-28</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/application-control-101</loc>
    <lastmod>2026-08-26</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/0-day-clickjacking-vulnerabilities-password-managers</loc>
    <lastmod>2026-04-21</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/cloud-penetration-testing-rules-limitations-best-practices-guidelines</loc>
    <lastmod>2026-04-10</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/server-side-request-forgery-ssrf-explained</loc>
    <lastmod>2026-04-08</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/how-to-prepare-your-organization-for-a-pentest-step-by-step-guide</loc>
    <lastmod>2026-04-07</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/why-mfa-alone-doesnt-stop-account-takeovers</loc>
    <lastmod>2026-08-27</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/why-attackers-love-non-production-environments</loc>
    <lastmod>2026-08-21</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/what-happens-after-a-penetration-test-ends</loc>
    <lastmod>2026-08-25</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/how-to-integrate-ai-into-modern-soc-workflows</loc>
    <lastmod>2026-08-27</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/why-internal-systems-are-the-first-target-after-initial-access</loc>
    <lastmod>2026-08-25</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/why-dark-web-monitoring-alone-is-not-enough</loc>
    <lastmod>2026-08-27</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/how-attackers-sell-initial-access-on-the-dark-web</loc>
    <lastmod>2026-08-27</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/firebase-security-mistakes-that-leak-user-data</loc>
    <lastmod>2026-08-28</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/stolen-github-token-led-to-internal-system-compromise</loc>
    <lastmod>2026-08-28</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/one-misconfigured-api-gateway-away-from-full-account-takeover</loc>
    <lastmod>2026-08-24</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/certificate-based-authentication-cba-a-simple-guide-for-modern-security</loc>
    <lastmod>2026-08-28</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/mongodb-security-common-risks-and-how-companies-get-breached</loc>
    <lastmod>2026-08-31</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/data-breaches-may-2025</loc>
    <lastmod>2025-12-26</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/gemini-cli-for-kali-linux-penetration-testing-automation</loc>
    <lastmod>2026-09-01</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/cross-site-request-forgery-security-guide</loc>
    <lastmod>2026-09-01</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/http-status-codes-tip-off-hacker-security</loc>
    <lastmod>2026-09-01</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/dmarc-guide</loc>
    <lastmod>2026-08-21</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/malware-persistence-mechanisms-hackers-guide</loc>
    <lastmod>2026-09-02</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/host-based-intrusion-detection-system-hids-guide</loc>
    <lastmod>2026-08-31</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/ghidra-11-3-released-nsa-reverse-engineering-tool</loc>
    <lastmod>2026-09-02</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/ssh-keys-enterprise-security-blind-spot</loc>
    <lastmod>2026-09-03</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/prompt-injection-attacks-bypassing-ai-agents-security-guide</loc>
    <lastmod>2026-09-03</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/saas-security-admin-guide-2025</loc>
    <lastmod>2025-12-25</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/mcp-server-ai-cyber-defense-guide</loc>
    <lastmod>2025-12-25</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/best-zero-trust-security-vendors-2025</loc>
    <lastmod>2025-12-25</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/microsoft-remote-desktop-protocol-exploitation-campaign</loc>
    <lastmod>2025-12-25</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/vulnerability-management-tools-paid-open-source</loc>
    <lastmod>2026-04-28</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/vulnerability-prioritization-beat-patching-paralysis</loc>
    <lastmod>2026-08-24</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/hexstrike-ai-security-tools-integration-chatgpt-claude</loc>
    <lastmod>2025-12-30</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/clear-dns-cache-guide</loc>
    <lastmod>2025-12-25</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/out-of-bounds-read-and-write-vulnerability-guide</loc>
    <lastmod>2025-12-25</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/vpn-security-guidelines-nsa-cisa-tips</loc>
    <lastmod>2025-12-25</lastmod>
  </url>
  <url>
    <loc>https://orasec.co/blog/windows-11-cumulative-updates-august-2025-kb5063878-kb5063875</loc>
    <lastmod>2025-12-25</lastmod>
  </url>
</urlset>