<?xml version="1.0" encoding="UTF-8"?>
<urlset
      xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"
      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
      xsi:schemaLocation="http://www.sitemaps.org/schemas/sitemap/0.9
            http://www.sitemaps.org/schemas/sitemap/0.9/sitemap.xsd">

<!-- English site -->
<url>
  <loc>https://www.netzilo.com/</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>1.00</priority>
</url>
<url>
  <loc>https://www.netzilo.com/about/</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.80</priority>
</url>
<url>
  <loc>https://www.netzilo.com/advisories/</loc>
  <lastmod>2026-04-24T00:00:00+00:00</lastmod>
  <priority>0.80</priority>
</url>
<url>
  <loc>https://www.netzilo.com/blog/</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.80</priority>
</url>
<url>
  <loc>https://www.netzilo.com/case-study/</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.80</priority>
</url>
<url>
  <loc>https://www.netzilo.com/contact/</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.80</priority>
</url>
<url>
  <loc>https://www.netzilo.com/partners/</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.80</priority>
</url>
<url>
  <loc>https://www.netzilo.com/pricing/</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.80</priority>
</url>
<url>
  <loc>https://www.netzilo.com/product/</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.80</priority>
</url>
<url>
  <loc>https://www.netzilo.com/products/</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.80</priority>
</url>
<url>
  <loc>https://www.netzilo.com/resources/press-releases/</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.80</priority>
</url>
<url>
  <loc>https://www.netzilo.com/resources/whitepapers/</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.80</priority>
</url>
<url>
  <loc>https://www.netzilo.com/schedule/</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.80</priority>
</url>
<url>
  <loc>https://www.netzilo.com/solutions/</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.80</priority>
</url>
<url>
  <loc>https://www.netzilo.com/advisories/mcp-supply-chain-rce-vulnerabilities</loc>
  <lastmod>2026-04-24T00:00:00+00:00</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/advisories/openclaw-claw-chain-rce-vulnerabilities</loc>
  <lastmod>2026-06-04T00:00:00+00:00</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/resources/whitepapers/netzilo-enterprise-browser-workspace</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/resources/whitepapers/netzilo-aidr-brief</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/resources/whitepapers/secure-digital-workspace-for-the-post-ai-enterprise</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/resources/whitepapers/the-ai-control-plane-for-the-agentic-workforce</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/resources/whitepapers/the-next-generation-alternative-to-vdi-rbi-solutions</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/blog/AI-Agents-Start-Calling-APIs-You-Didnt-Approve</loc>
  <lastmod>2026-04-16T00:00:00+00:00</lastmod>
  <priority>0.64</priority>
</url>
<url>
  <loc>https://www.netzilo.com/blog/Agent-First-Governance</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.64</priority>
</url>
<url>
  <loc>https://www.netzilo.com/blog/DLP-data-loss-prevention</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.64</priority>
</url>
<url>
  <loc>https://www.netzilo.com/blog/Traditional-SIEM-Limitations</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.64</priority>
</url>
<url>
  <loc>https://www.netzilo.com/blog/What-is-Agentic-SASE</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.64</priority>
</url>
<url>
  <loc>https://www.netzilo.com/blog/Zero-Trust-for-Zero-Humans</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.64</priority>
</url>
<url>
  <loc>https://www.netzilo.com/blog/achieving-strategic-security-situational-awareness-advanced-ai</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.64</priority>
</url>
<url>
  <loc>https://www.netzilo.com/blog/ai-control-plane-vs-ai-guardrails-ciso</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.64</priority>
</url>
<url>
  <loc>https://www.netzilo.com/blog/aidr-detecting-and-containing-ai-agent-threats</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.64</priority>
</url>
<url>
  <loc>https://www.netzilo.com/blog/behavioral-intelligence-ai-safety-ai-security</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.64</priority>
</url>
<url>
  <loc>https://www.netzilo.com/blog/dynamic-network-security-enforcing-posture-based-controls</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.64</priority>
</url>
<url>
  <loc>https://www.netzilo.com/blog/enforcing-architectural-security-for-ai-agents-meta-rule-of-two</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.64</priority>
</url>
<url>
  <loc>https://www.netzilo.com/blog/enterprise-browser-architecture</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.64</priority>
</url>
<url>
  <loc>https://www.netzilo.com/blog/enterprise-browser-security-evaluation-guide</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.64</priority>
</url>
<url>
  <loc>https://www.netzilo.com/blog/mcp-security-problem</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.64</priority>
</url>
<url>
  <loc>https://www.netzilo.com/blog/nsa-mcp-security-advisory-netzilo-response</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.64</priority>
</url>
<url>
  <loc>https://www.netzilo.com/blog/preventing-cursor-vscode-attacks</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.64</priority>
</url>
<url>
  <loc>https://www.netzilo.com/blog/protecting-ai-agents-tool-poisoning</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.64</priority>
</url>
<url>
  <loc>https://www.netzilo.com/blog/protecting-the-flow-real-time-data-loss-prevention-for-ai-agents</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.64</priority>
</url>
<url>
  <loc>https://www.netzilo.com/blog/redefining-privileged-access-security-ai-proctored-browser-sessions</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.64</priority>
</url>
<url>
  <loc>https://www.netzilo.com/blog/secure-access-MDM-footprint</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.64</priority>
</url>
<url>
  <loc>https://www.netzilo.com/blog/securing-generative-ai-adoption-enabling-developer-productivity</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.64</priority>
</url>
<url>
  <loc>https://www.netzilo.com/blog/the-paradigm-shift-is-here-again</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.64</priority>
</url>
<url>
  <loc>https://www.netzilo.com/blog/what-happens-when-ai-agents-become-your-users-and-your-attack-surface</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.64</priority>
</url>
<url>
  <loc>https://www.netzilo.com/blog/what-is-prompt-injection</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.64</priority>
</url>
<url>
  <loc>https://www.netzilo.com/press/netzilo-aidr-community-rules/</loc>
  <lastmod>2026-06-09T00:00:00+00:00</lastmod>
  <priority>0.64</priority>
</url>
<url>
  <loc>https://www.netzilo.com/press/netzilo-ai-edge-openclaw-agents-visibility-sandboxing-governance/</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.64</priority>
</url>
<url>
  <loc>https://www.netzilo.com/legal/</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.50</priority>
</url>
<url>
  <loc>https://www.netzilo.com/legal/acceptable-use-policy</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.50</priority>
</url>
<url>
  <loc>https://www.netzilo.com/legal/data-processing-addendum</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.50</priority>
</url>
<url>
  <loc>https://www.netzilo.com/legal/free-trial-offer</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.50</priority>
</url>
<url>
  <loc>https://www.netzilo.com/legal/main-service-agreement</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.50</priority>
</url>
<url>
  <loc>https://www.netzilo.com/legal/privacy-policy</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.50</priority>
</url>
<url>
  <loc>https://www.netzilo.com/legal/security-policies</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.50</priority>
</url>
<url>
  <loc>https://www.netzilo.com/legal/service-level-agreement</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.50</priority>
</url>
<url>
  <loc>https://www.netzilo.com/legal/special-terms</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.50</priority>
</url>
<url>
  <loc>https://www.netzilo.com/legal/subprocessors-list</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.50</priority>
</url>
<url>
  <loc>https://www.netzilo.com/legal/terms-of-service</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.50</priority>
</url>
<url>
  <loc>https://www.netzilo.com/privacy-policy</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.50</priority>
</url>
<url>
  <loc>https://www.netzilo.com/terms-of-service</loc>
  <lastmod>2026-06-06T00:00:00+00:00</lastmod>
  <priority>0.50</priority>
</url>

<!-- Turkish site (tr) -->
<url>
  <loc>https://www.netzilo.com/tr/product/</loc>
  <lastmod>2025-12-14T10:37:53+00:00</lastmod>
  <priority>0.64</priority>
</url>
<url>
  <loc>https://www.netzilo.com/tr/solutions/</loc>
  <lastmod>2025-12-14T10:37:53+00:00</lastmod>
  <priority>0.64</priority>
</url>
<url>
  <loc>https://www.netzilo.com/tr/pricing/</loc>
  <lastmod>2025-12-14T10:37:53+00:00</lastmod>
  <priority>0.64</priority>
</url>
<url>
  <loc>https://www.netzilo.com/tr/about/</loc>
  <lastmod>2025-12-14T10:37:53+00:00</lastmod>
  <priority>0.64</priority>
</url>
<url>
  <loc>https://www.netzilo.com/tr/contact/</loc>
  <lastmod>2025-12-14T10:37:53+00:00</lastmod>
  <priority>0.64</priority>
</url>
<url>
  <loc>https://www.netzilo.com/tr/</loc>
  <lastmod>2025-12-14T10:37:53+00:00</lastmod>
  <priority>0.51</priority>
</url>
<url>
  <loc>https://www.netzilo.com/tr/blog/</loc>
  <lastmod>2025-12-14T10:37:53+00:00</lastmod>
  <priority>0.51</priority>
</url>
<url>
  <loc>https://www.netzilo.com/tr/blog/paradigma-degisimi-yeniden-burada.html</loc>
  <lastmod>2025-12-14T10:37:53+00:00</lastmod>
  <priority>0.41</priority>
</url>
<url>
  <loc>https://www.netzilo.com/tr/blog/aidr-ai-agent-tehditlerini-tespit-ve-izolasyon.html</loc>
  <lastmod>2025-12-14T10:37:53+00:00</lastmod>
  <priority>0.41</priority>
</url>
<url>
  <loc>https://www.netzilo.com/tr/blog/index.html</loc>
  <lastmod>2025-12-14T10:37:53+00:00</lastmod>
  <priority>0.33</priority>
</url>

<!-- threat-library:start -->
<url>
  <loc>https://www.netzilo.com/threats/</loc>
  <priority>0.90</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-advanced-structured-data-injection-with-nested-payloads</loc>
  <lastmod>2026-03-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-agent-identity-spoofing-and-authority-impersonation</loc>
  <lastmod>2026-03-26</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-agent-memory-and-configuration-file-tampering</loc>
  <lastmod>2026-04-05</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/skillspector-self-modification</loc>
  <lastmod>2026-06-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/openclaw-claw-chain-full-sequence</loc>
  <lastmod>2026-06-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-agent-weakening-of-host-authentication-configuration</loc>
  <lastmod>2026-07-05</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-agent-workspace-boundary-escape-via-host-root-mount-and-unpr</loc>
  <lastmod>2026-07-28</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-agentic-flow-mcp-tool-parameter-os-command-injection-ghsa-vc</loc>
  <lastmod>2026-07-04</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-ai-persona-ethics-law-bypass-declaration</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-alternative-ai-same-capabilities-no-restrictions-override</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-amoral-unfiltered-custom-ai-persona-jailbreak</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-anti-malware-evasion-code-generation-request</loc>
  <lastmod>2026-04-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-antifm-hate-persona-physical-violence-threat-filter-bypass-m</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-anythingllm-collector-process-filename-path-traversal-arbitr</loc>
  <lastmod>2026-06-29</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-anythingllm-logo-endpoint-path-traversal-file-read-delete-cv</loc>
  <lastmod>2026-06-29</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-anythingllm-unauthenticated-system-data-import-access-contro</loc>
  <lastmod>2026-06-29</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-apache-doris-mcp-server-sql-injection-cve-2025-66335</loc>
  <lastmod>2026-05-20</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-apache-pinot-mcp-unauthenticated-remote-cluster-takeover</loc>
  <lastmod>2026-05-20</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-api-key-leakage-via-example-format</loc>
  <lastmod>2026-04-07</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-arbitrary-write-to-ssh-authorized-keys-or-shell-startup-file</loc>
  <lastmod>2026-07-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-arc-autonomous-real-calculation-unit-rulebreaker-activation</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/archive-download-exec</loc>
  <lastmod>2026-02-24</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/config-auto-approve</loc>
  <lastmod>2026-06-02</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/config-auto-approve-periodic</loc>
  <lastmod>2026-06-02</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-autodan-genetic-algorithm-jailbreak-suffix</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-autonomous-vehicle-cyber-physical-sabotage-brake-steering-se</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/aws-credential-redact</loc>
  <lastmod>2026-07-01</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-backdoor-trojan-linguistic-trigger-phrase-pot-attack</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-backdoor-trojan-symbol-emoticon-trigger-pot-attack</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-bank-phishing-smtp-email-code-generation</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-base64-encoded-remote-code-execution-via-raw-ip</loc>
  <lastmod>2026-04-10</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-bestiality-content-acquisition-distribution</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-biometric-surveillance-personal-biometric-data-request-for-n</loc>
  <lastmod>2026-04-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-bob-hypothetical-unrestricted-chatbot-jailbreak</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-browser-credential-harvesting-via-session-debug-tool</loc>
  <lastmod>2026-04-10</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-browser-automation-tool-launch-args-field-carries-a-chromium</loc>
  <lastmod>2026-07-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-bulk-environment-variable-harvesting-and-exfiltration</loc>
  <lastmod>2026-03-26</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-casual-authority-data-redirect</loc>
  <lastmod>2026-04-07</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-cjk-prompt-injection-expanded-chinese-japanese-korean-patter</loc>
  <lastmod>2026-03-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-claude-code-anthropic-base-url-credential-exfiltration-cve-2</loc>
  <lastmod>2026-05-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-claude-code-hooks-sessionstart-pre-trust-rce-cve-2025-59536</loc>
  <lastmod>2026-05-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/agent-skill-poisoning-chain</loc>
  <lastmod>2026-06-10</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-clinical-patient-harm-directive-overdose-falsified-diagnosis</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/cloud-iam-escalation</loc>
  <lastmod>2026-02-24</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/cloud-metadata-access</loc>
  <lastmod>2026-02-24</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/llm-as-judge-code-injection</loc>
  <lastmod>2026-06-30</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-command-injection-in-create-mcp-server-stdio-via-unsafe-exec</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/container-escape</loc>
  <lastmod>2026-02-24</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-context-ignore-via-fake-completion-prefix</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-covert-backdoor-surveillance-implant-via-software-update</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-covert-server-intrusion-process-injection-log-tampering-dns</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-credential-access-with-exfiltration-in-skill-instructions</loc>
  <lastmod>2026-04-14</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-credential-and-secret-exposure-in-agent-output</loc>
  <lastmod>2026-03-08</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-credential-data-leaked-in-tool-response</loc>
  <lastmod>2026-04-08</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-credential-exfiltration-via-fake-backup-verification</loc>
  <lastmod>2026-04-09</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-credential-exfiltration-via-fake-devops-tool-initialization</loc>
  <lastmod>2026-04-10</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-credential-exfiltration-via-shell-pipe</loc>
  <lastmod>2026-04-05</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-credential-file-read-code-generation-request</loc>
  <lastmod>2026-04-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/taint-credential-exfil</loc>
  <lastmod>2026-06-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-credential-file-theft-from-agent-environment</loc>
  <lastmod>2026-03-26</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-credential-harvesting-via-fake-backup-tool</loc>
  <lastmod>2026-04-10</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-crewai-codeinterpretertool-sandbox-escape-and-prompt-to-shel</loc>
  <lastmod>2026-05-28</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-cross-agent-attack-detection</loc>
  <lastmod>2026-03-08</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-cross-agent-privilege-escalation</loc>
  <lastmod>2026-03-08</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-cursor-mcp-json-zero-click-configuration-rce-cve-2025-54136</loc>
  <lastmod>2026-05-04</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/openclaw-cve-2026-44113-44112-sandbox-escape</loc>
  <lastmod>2026-04-01</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/openclaw-cve-2026-44118-owner-impersonation</loc>
  <lastmod>2026-04-01</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-dan-mode-ablation-benchmark-coercion-jailbreak</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/dangerous-exec-chain</loc>
  <lastmod>2026-06-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-dangerous-process-hijacking-environment-variable-injected-vi</loc>
  <lastmod>2026-07-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/skillspector-tool-param-abuse</loc>
  <lastmod>2026-06-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-darknet-controlled-substance-procurement</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-data-exfiltration-url-in-skill-instructions</loc>
  <lastmod>2026-04-05</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/data-exfiltration</loc>
  <lastmod>2026-03-02</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-data-exfiltration-via-markdown-image-and-link-url-injection</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-data-piggybacking-via-casual-transition-words</loc>
  <lastmod>2026-04-07</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-ddos-attack-orchestration</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-deepchat-markdown-deeplink-shell-openexternal-protocol-bypas</loc>
  <lastmod>2026-06-29</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-deepchat-mermaid-xss-to-rce-via-electron-ipc-mcp-server-regi</loc>
  <lastmod>2026-06-29</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-delayed-tool-invocation-via-prompt-injection-time-shifted-ex</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-developer-mode-dual-response-format-jailbreak</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-devmode-ranti-dual-output-profanity-coercion-jailbreak</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-diagnostic-content-remediation-command-injection-agentjackin</loc>
  <lastmod>2026-07-10</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-direct-markdown-image-link-exfil-payload-attacker-com-evil-c</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/prompt-injection-direct</loc>
  <lastmod>2026-02-24</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-divergence-attack-repeat-word-forever-training-data-extracti</loc>
  <lastmod>2026-04-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-dns-exfiltration-via-ping-dig-nslookup-command-with-data-enc</loc>
  <lastmod>2026-07-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-doctor-xml-policy-puppetry-interaction-config-injection</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-donotanswer-malicious-use-illegal-activity-facilitation-requ</loc>
  <lastmod>2026-04-20</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-dual-persona-ai-simulation-jailbreak</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-echo-template-jinja-sql-command-injection-via-llm</loc>
  <lastmod>2026-04-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-educational-records-personal-academic-professional-record-re</loc>
  <lastmod>2026-04-20</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-enclave-vm-sandbox-escape-rce-cve-2026-27597</loc>
  <lastmod>2026-05-10</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-evasion-shell-injection-via-eval-system-backtick-in-input</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-export-extract-tool-directory-parameter-redirected-to-a-cred</loc>
  <lastmod>2026-07-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-extremist-propaganda-acquisition-distribution</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-fake-developer-authority-chatbot-override-chatdan</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-fake-error-state-takeover-unrestricted-replacement-bot</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-fake-tool-result-prefix-injected-instruction-via-simulated-c</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-fastmcp-vulnerable-to-windows-command-injection-in-fastmcp-c</loc>
  <lastmod>2026-06-01</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-fictional-world-format-override-jailbreak</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-financial-pii-personal-financial-data-request-for-named-indi</loc>
  <lastmod>2026-04-20</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-flowise-custom-mcp-node-load-method-os-command-rce-cve-2025</loc>
  <lastmod>2026-06-29</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-flowise-custom-mcp-stdio-command-injection-cve-2026-40933</loc>
  <lastmod>2026-05-04</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-flowise-system-message-override-via-template-interpolation-c</loc>
  <lastmod>2026-04-22</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-fraudulent-identity-document-fake-passport-procurement</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-free-of-restrictions-named-persona-jailbreak</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-gemini-mcp-tool-execasync-command-injection-file-exfiltratio</loc>
  <lastmod>2026-06-20</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-google-gato-lamda-exploit-generation-persona-jailbreak</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-gradual-capability-escalation-via-incremental-introduction</loc>
  <lastmod>2026-03-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-hades-shai-hulud-ai-agent-credential-harvester-in-supply-cha</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-harmbench-detailed-harmful-instruction-request-step-by-step</loc>
  <lastmod>2026-04-20</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-hgttg-hitchhiker-s-guide-no-restriction-universal-oracle</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-hidden-capability-in-mcp-skill</loc>
  <lastmod>2026-03-08</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-hidden-llm-safety-bypass-instructions-in-tool-descriptions</loc>
  <lastmod>2026-03-15</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-hidden-payload-in-html-comment</loc>
  <lastmod>2026-04-05</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-huggingface-unsafe-model-artifact-load-instruction</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-human-trafficking-service-facilitation</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-hyphenated-system-instruction-injection</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-indirect-pi-sysprompt-forged-action-hijack-system-message-fr</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-indirect-pi-account-manipulation-emergency-service-dispatch</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-indirect-pi-cloud-file-exfiltration-google-drive-cloud-stora</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-indirect-pi-credential-api-key-exfiltration-via-agent-action</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-indirect-pi-credential-exfiltration-via-email-api-key-passwo</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-indirect-pi-cryptocurrency-transfer-exchange-deposit-hijack</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-indirect-pi-data-exfiltration-with-evidence-destruction-exfi</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-indirect-pi-disable-authentication-mfa-via-agent-tool</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-indirect-pi-file-exfiltration-combined-with-destroy-or-tampe</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-indirect-pi-financial-payment-credential-exfiltration-via-ag</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-indirect-pi-financial-data-exfiltration-via-agent-action</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-indirect-pi-genetic-dna-data-exfiltration-via-agent-email</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-indirect-pi-location-gps-data-exfiltration-via-agent-email</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-indirect-pi-malicious-package-installation-via-agent-pip-npm</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-indirect-pi-medical-genetic-data-exfiltration-via-agent-acti</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-indirect-pi-medical-record-health-data-exfiltration-via-agen</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-indirect-pi-mfa-code-otp-security-code-exfiltration-via-inje</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-indirect-pi-physical-biometric-media-exfiltration-via-agent</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-indirect-pi-rce-via-network-shell-command-netcat-curl-execut</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-indirect-pi-structured-data-embedded-payload-important-overr</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-indirect-pi-system-sabotage-via-destructive-shell-command</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-indirect-pi-unauthorized-financial-transfer-payment-initiati</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-indirect-pi-unauthorized-financial-transfer-via-agent-tool</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-indirect-pi-unauthorized-physical-access-grant-via-smart-loc</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-indirect-prompt-injection-via-data-carrier-important-overrid</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-injected-code-local-host-sabotage-filesystem-destruction-res</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-injected-code-remote-key-ransomware-file-encryption</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-injected-code-unauthorized-remote-access-ssh-key-backdoor-tu</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-langchain-gmailtoolkit-indirect-prompt-injection-email-exfil</loc>
  <lastmod>2026-06-29</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-langchain-chatchat-unauthenticated-mcp-stdio-server-configur</loc>
  <lastmod>2026-05-28</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-langroid-sqlchatagent-prompt-to-sql-remote-code-execution-cv</loc>
  <lastmod>2026-07-04</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-litellm-allowed-routes-authorization-bypass-cve-2026-47101</loc>
  <lastmod>2026-06-26</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-litellm-custom-code-guardrail-sandbox-escape-cve-2026-40217</loc>
  <lastmod>2026-06-26</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-litellm-mcp-unauthenticated-server-registration-rce-cve-2026</loc>
  <lastmod>2026-05-04</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-litellm-proxy-authorization-header-sql-injection-cisa-kev-cv</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-litellm-proxy-sql-injection-cve-2026-42208-cisa-kev-2026-05</loc>
  <lastmod>2026-05-23</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-litellm-user-role-privilege-escalation-cve-2026-47102</loc>
  <lastmod>2026-06-26</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/api-endpoint-redirection</loc>
  <lastmod>2026-08-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-llm-special-token-boundary-injection</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-local-sensitive-file-read-chained-to-outbound-exfiltration</loc>
  <lastmod>2026-07-05</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-m365-copilot-business-chat-searchleak-open-redirect-prompt-i</loc>
  <lastmod>2026-06-29</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-malicious-ai-skill-mcp-server-package-structure-agentbaiting</loc>
  <lastmod>2026-07-28</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-malicious-code-in-skill-package</loc>
  <lastmod>2026-03-29</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-malicious-content-in-mcp-tool-response</loc>
  <lastmod>2026-03-08</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-malicious-fine-tuning-data</loc>
  <lastmod>2026-03-08</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-malicious-go-init-function-spawning-a-process-via-a-code-gen</loc>
  <lastmod>2026-07-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-malicious-whatsapp-skill-with-base64-encoded-reverse-shell-i</loc>
  <lastmod>2026-04-10</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-malware-code-generation-direct-request</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-malware-dropper-loader-code-generation-request</loc>
  <lastmod>2026-04-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/malware-ioc</loc>
  <lastmod>2026-06-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/prompt-injection-exfil</loc>
  <lastmod>2026-02-24</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-markdown-image-injection-with-base64-query-exfiltration-carr</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-mcp-connect-unauthenticated-bridge-endpoint-arbitrary-proces</loc>
  <lastmod>2026-07-04</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-mcp-dns-rebinding-attack-hostname-time-based-ip-switching</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-mcp-inspector-unauthenticated-proxy-stdio-command-execution</loc>
  <lastmod>2026-07-08</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/mcp-launcher-exec-bypass</loc>
  <lastmod>2026-03-01</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-mcp-oauth-authorization-url-command-injection-via-url-author</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/mcp-command-injection</loc>
  <lastmod>2026-03-23</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/mcp-stdio-config-injection</loc>
  <lastmod>2026-03-01</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-mcp-tool-description-compliance-audit-framing-for-mandatory</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-mcp-tool-description-important-tag-cross-tool-shadowing-atta</loc>
  <lastmod>2026-04-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-mcp-tool-description-notes-parameter-chat-history-exfiltrati</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-mcp-tool-sequential-integer-id-enumeration-cross-tenant-idor</loc>
  <lastmod>2026-07-28</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-mcp-tool-supply-chain-poisoning</loc>
  <lastmod>2026-03-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-mcp-web-fetch-context-poisoning-via-embedded-agent-instructi</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-mcp-atlassian-credential-leak-via-hint-parameter-injection-c</loc>
  <lastmod>2026-04-22</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-mcp-for-stata-command-injection-via-log-file-name-parameter</loc>
  <lastmod>2026-07-04</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-mcp-remote-authorization-endpoint-os-command-injection-cve-2</loc>
  <lastmod>2026-05-10</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-medical-pii-personal-medical-health-data-request-for-named-i</loc>
  <lastmod>2026-04-20</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-meta-ads-mcp-unauthenticated-tool-execution-leaks-meta-acces</loc>
  <lastmod>2026-06-29</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-miasma-phantom-gyp-npm-worm-backdoors-ai-agent-config-files</loc>
  <lastmod>2026-06-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-microsoft-semantic-kernel-in-memory-vector-store-eval-rce-cv</loc>
  <lastmod>2026-05-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-microsoft-semantic-kernel-sessionspythonplugin-arbitrary-fil</loc>
  <lastmod>2026-05-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-mini-shai-hulud-gh-token-monitor-persistence-dead-man-s-swit</loc>
  <lastmod>2026-05-23</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-mobile-gui-agent-model-output-reaching-host-shell-adb-unsani</loc>
  <lastmod>2026-07-28</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-model-behavior-extraction</loc>
  <lastmod>2026-03-08</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-modelcache-torch-load-deserialization-rce-cve-2025-45146</loc>
  <lastmod>2026-05-10</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-money-laundering-crypto-wallet-layering</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-moralizing-rant-then-unfiltered-bypass</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-multi-agent-consensus-poisoning-and-sybil-attack</loc>
  <lastmod>2026-03-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-multi-agent-consensus-sybil-attack</loc>
  <lastmod>2026-03-16</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-multi-skill-chain-attack</loc>
  <lastmod>2026-03-08</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-named-mode-persona-override-jeeves-baby-apophis-mode</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-natural-language-covert-conversation-exfiltration-instructio</loc>
  <lastmod>2026-05-06</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-natural-language-credential-secret-disclosure-instruction</loc>
  <lastmod>2026-05-06</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-natural-language-output-injection-credential-embedding</loc>
  <lastmod>2026-05-06</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-natural-language-sensitive-file-disclosure-instruction</loc>
  <lastmod>2026-05-06</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-natural-language-skill-self-modification-persistence-instruc</loc>
  <lastmod>2026-05-06</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-natural-language-unauthorized-shell-execution-instruction</loc>
  <lastmod>2026-05-06</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-netlicensing-mcp-path-traversal-in-product-number-bypasses-t</loc>
  <lastmod>2026-06-29</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-nginx-ui-mcp-endpoint-unauthenticated-command-execution-cve</loc>
  <lastmod>2026-05-20</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-no-withhold-factual-resource-dialogue-writer-persona</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-npm-praisonai-codemode-sandbox-escape-via-function-construct</loc>
  <lastmod>2026-06-29</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-obfuscated-api-key-disclosure</loc>
  <lastmod>2026-04-07</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-obfuscated-system-announcement-injection</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/openclaw-dangerous-exec</loc>
  <lastmod>2026-02-24</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-openhuman-shell-tool-allowlist-bypass-via-env-prefix-find-ex</loc>
  <lastmod>2026-06-29</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-opposite-reply-omniscient-game-jailbreak</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-pandasai-interactive-prompt-injection-python-sandbox-escape</loc>
  <lastmod>2026-06-29</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-parameter-injection-via-tool-arguments</loc>
  <lastmod>2026-03-08</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-persona-hijacking-via-mandatory-system-prompt-override</loc>
  <lastmod>2026-03-15</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-persongpt-hash-prefix-trigger-activation</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/pii-credit-card-ssn-redact</loc>
  <lastmod>2026-03-01</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-policy-puppetry-xml-role-config-injection</loc>
  <lastmod>2026-04-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-praisonai-action-orchestrator-step-target-path-traversal-arb</loc>
  <lastmod>2026-06-29</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-praisonai-codemode-js-sandbox-escape-rce-via-new-function-wi</loc>
  <lastmod>2026-06-29</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-praisonai-filetools-validate-path-normpath-path-traversal-cv</loc>
  <lastmod>2026-06-29</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-praisonai-mcp-path-traversal-pth-injection-rce-ghsa-9mqq-jqx</loc>
  <lastmod>2026-05-28</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-praisonai-mcpserver-unauthenticated-http-tools-call-authenti</loc>
  <lastmod>2026-06-29</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-praisonai-parse-mcp-command-cli-argument-command-injection-c</loc>
  <lastmod>2026-05-28</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-praisonai-tool-override-py-unauthenticated-rce-cve-2026-4028</loc>
  <lastmod>2026-05-28</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-praisonai-unauthenticated-agent-api-exploitation-cve-2026-44</loc>
  <lastmod>2026-05-20</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-privilege-escalation-and-admin-function-access</loc>
  <lastmod>2026-03-08</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/proc-memory-read</loc>
  <lastmod>2026-08-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/llm-as-judge-prompt-injection</loc>
  <lastmod>2026-06-30</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/prompt-injection-evasion</loc>
  <lastmod>2026-06-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-prompt-layer-self-replication-agent-worm-propagation-directi</loc>
  <lastmod>2026-08-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-python-code-execution-remote-code-execution-via-llm-prompt</loc>
  <lastmod>2026-04-20</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/python-download-exec</loc>
  <lastmod>2026-02-26</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-python-sandbox-escape-via-dynamically-constructed-dunder-att</loc>
  <lastmod>2026-07-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-python-sandbox-escape-via-generator-coroutine-frame-object-i</loc>
  <lastmod>2026-07-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-rag-injected-pii-exfiltration-system-instructions-embedded-i</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-ransom-extortion-cloud-file-exfil-delete-payment-demand</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-ransom-extortion-email-exfil-delete-wire-transfer-demand</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-remote-code-execution-via-eval-and-dynamic-code-injection</loc>
  <lastmod>2026-03-26</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/rce-injection</loc>
  <lastmod>2026-04-09</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-rephrase-criminal-activity-second-person-template-against-ag</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/reverse-shell</loc>
  <lastmod>2026-02-24</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-reverse-prompt-harm-regardless-oracle-persona</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-rogue-agent-provisioning-mass-connector-grant-with-approval</loc>
  <lastmod>2026-07-28</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-rot13-base64-obfuscated-shell-payload-wrapped-in-a-fake-sand</loc>
  <lastmod>2026-07-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/rule-of-two</loc>
  <lastmod>2026-06-02</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-rules-file-backdoor-supply-chain-attack-on-ai-coding-assista</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-sandbox-escape-via-shell-metacharacter-command-injection</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-self-harm-and-eating-disorder-facilitation-request</loc>
  <lastmod>2026-04-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-semantic-evasion-via-multi-turn-prompt-injection</loc>
  <lastmod>2026-03-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-shell-command-injection-in-agent-tool-context</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-shell-command-injection-via-llm-prompt</loc>
  <lastmod>2026-04-20</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-shell-injection-data-exfiltration-piped-command-exfiltration</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-shell-injection-env-exfiltration-via-curl-wget-netcat-webhoo</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-shell-metacharacter-injection-in-tool-arguments</loc>
  <lastmod>2026-03-26</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-silent-git-remote-mirror-push-exfiltration-from-skill-instru</loc>
  <lastmod>2026-05-23</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-skill-data-exfiltration-via-compound-patterns</loc>
  <lastmod>2026-04-08</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-skill-registry-poisoning-and-compromised-tool-distribution</loc>
  <lastmod>2026-03-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-skill-md-prompt-injection</loc>
  <lastmod>2026-03-29</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-sneakybits-zero-width-binary-steganography</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-sql-injection-and-code-injection-attack-payload-detection</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-sql-injection-destructive-ddl-statement</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-sql-injection-stacked-dml-privilege-abuse</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-sql-injection-tautology-rbac-bypass</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-sql-injection-union-select-data-exfiltration</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-ssrf-aws-instance-metadata-endpoint-access</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-ssrf-file-scheme-local-file-read</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-ssrf-localhost-service-probe</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-ssrf-via-agent-tool-calls</loc>
  <lastmod>2026-03-08</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-ssrf-via-agent-url-fetch-instruction</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-stolen-credential-account-takeover-crypto-drain</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-superagi-output-handler-eval-rce-cve-2024-21552</loc>
  <lastmod>2026-05-10</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/suspicious-process-exec</loc>
  <lastmod>2026-06-02</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-symjack-symlink-approval-path-spoofing-redirects-writes-into</loc>
  <lastmod>2026-06-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/system-file-tampering</loc>
  <lastmod>2026-06-02</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/system-file-tampering-periodic</loc>
  <lastmod>2026-06-02</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-system-prompt-override-attempt</loc>
  <lastmod>2026-03-08</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-system-prompt-override-via-fake-diagnostic-admin-mode</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-system-prompt-override-via-pseudo-admin-authority-injection</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-systematic-multi-layer-audit-system-bypass</loc>
  <lastmod>2026-03-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-tap-tree-of-attacks-with-pruning-jailbreak</loc>
  <lastmod>2026-04-20</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-terminal-cli-harmful-function-simulator-persona</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-the-llm-cli-tool-thru-0-27-1-contains-a-critical-code-inject</loc>
  <lastmod>2026-05-30</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-time-gated-credential-exfiltration-rug-pull-timebomb</loc>
  <lastmod>2026-04-10</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-tool-knowledge-hijack-identity-injection-with-tool-call-argu</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-tool-response-data-piggybacking</loc>
  <lastmod>2026-04-06</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-tool-with-embedded-instruction-to-bypass-user-confirmation-a</loc>
  <lastmod>2026-04-06</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-trojanized-software-distribution</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-two-entity-token-splitting-dollar-term-game-jailbreak</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/skillspector-package-typosquatting</loc>
  <lastmod>2026-06-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-unauthorized-financial-action-by-ai-agent</loc>
  <lastmod>2026-03-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-unicode-variation-selector-ascii-smuggling</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-unsandboxed-command-execution-via-dynamic-mcp-server-config</loc>
  <lastmod>2026-07-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/webshell-patterns</loc>
  <lastmod>2026-06-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-windows-mcp-unauthenticated-http-powershell-via-wildcard-cor</loc>
  <lastmod>2026-07-04</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-windsurf-ide-zero-click-prompt-injection-via-embedded-file-d</loc>
  <lastmod>2026-05-20</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/rag-image-exfiltration</loc>
  <lastmod>2026-03-16</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/1panel-cert-bypass-rce</loc>
  <lastmod>2026-03-14</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-access-denial-inversion-eliciting-the-opposite-of-access-den</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-access-grant-coercion-forcing-an-agent-to-emit-access-grante</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-acronym-based-identity-override-jailbreak</loc>
  <lastmod>2026-04-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-actor-never-breaks-character-roleplay-dan-style-film-framing</loc>
  <lastmod>2026-07-06</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-adaptive-countermeasure-against-behavioral-monitoring</loc>
  <lastmod>2026-03-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-addi-donnie-german-dictator-propaganda-roleplay-persona</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/ai-prompt-injection</loc>
  <lastmod>2026-06-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-agent-mcp-tool-path-traversal-and-arbitrary-file-access</loc>
  <lastmod>2026-06-02</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-agent-capability-enumeration-via-structured-parse-request</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/agent-command-allowlist-bypass</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/kiro-prompt-injection-command-execution</loc>
  <lastmod>2026-03-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/repo-config-hook-injection</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/repo-settings-hook-injection</loc>
  <lastmod>2026-02-20</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-agent-disabling-of-host-security-controls</loc>
  <lastmod>2026-07-05</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-agent-establishing-an-encrypted-reverse-channel-or-tunnel</loc>
  <lastmod>2026-07-05</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/persistence-authorized-keys-path-hijack</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-agent-goal-hijacking-detection</loc>
  <lastmod>2026-03-08</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-agent-human-approval-gate-programmatically-disabled-at-runti</loc>
  <lastmod>2026-07-28</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/skillspector-autonomous-no-confirm</loc>
  <lastmod>2026-06-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/skillspector-memory-manipulation</loc>
  <lastmod>2026-06-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-agent-memory-manipulation</loc>
  <lastmod>2026-03-08</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/persistence-mechanism-install</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/memory-poisoning</loc>
  <lastmod>2026-03-16</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-agent-resource-exhaustion-detection</loc>
  <lastmod>2026-03-08</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-agent-self-modifying-its-own-trust-approval-configuration-to</loc>
  <lastmod>2026-07-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-agent-ssrf-to-cloud-metadata-file-inclusion-via-unvalidated</loc>
  <lastmod>2026-06-02</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/devin-credential-exfil-command</loc>
  <lastmod>2026-03-14</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/subprocess-dns-exfil-worm-propagation</loc>
  <lastmod>2026-06-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-agent-zero-mcp-configuration-command-injection-via-mcp-serve</loc>
  <lastmod>2026-05-28</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-agent-initiated-internal-network-service-sweep</loc>
  <lastmod>2026-07-05</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-agent-runtime-identifier-field-run-id-agent-id-session-id-ta</loc>
  <lastmod>2026-07-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/agentapi-dns-rebinding</loc>
  <lastmod>2026-06-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-agentdojo-important-message-identity-spoof-before-you-solve</loc>
  <lastmod>2026-07-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/agentic-probllms-instruction-to-subprocess-egress</loc>
  <lastmod>2026-02-18</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-ai-identity-denial-and-persona-replacement-attack</loc>
  <lastmod>2026-04-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-ai-identity-substitution-jailbreak</loc>
  <lastmod>2026-04-18</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-ai-identity-substitution-jailbreak-b</loc>
  <lastmod>2026-04-18</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-ai-political-bias-manipulation-via-inherited-bias-claim</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-alibaba-rds-mcp-unauthenticated-database-metadata-exfiltrati</loc>
  <lastmod>2026-05-20</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-alternate-encoding-jailbreak-morse-nato-zalgo-leet-uu-qp-bra</loc>
  <lastmod>2026-04-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-amoral-persona-assignment-with-obsessive-character-traits</loc>
  <lastmod>2026-04-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-anonymous-illicit-drug-marketplace-construction</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-ansi-code-elicitation-request</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-ansi-escape-code-terminal-injection</loc>
  <lastmod>2026-04-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-anti-dan-inverted-filter-over-refusal-persona</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/anythingllm-export-traversal-dos</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-api-key-secret-credential-generation-or-completion-request</loc>
  <lastmod>2026-04-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-api-key-generation-and-partial-key-completion-request</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/approval-ui-html-injection</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-asb-trigger-marker-tool-coercion-forced-tool-selection-via-f</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-attachment-upload-tool-argument-reads-sensitive-system-file</loc>
  <lastmod>2026-07-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-authority-claim-prompt-injection</loc>
  <lastmod>2026-04-07</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/authority-hijacking</loc>
  <lastmod>2026-08-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-authority-figure-persona-defensive-study-framing-for-violenc</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-authorization-state-spoofing-forged-correct-passcode-entered</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/roo-npm-postinstall-rce</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-azure-mcp-server-missing-authentication-for-critical-functio</loc>
  <lastmod>2026-05-10</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-backspace-deletion-character-injection</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-banned-ingredient-product-relabel-fraud</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-bare-key-elicitation-token-detection</loc>
  <lastmod>2026-07-07</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-bare-key-elicitation-with-trailing-colon</loc>
  <lastmod>2026-07-07</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-base-n-encoding-instruction-bypass</loc>
  <lastmod>2026-04-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-base2048-unicode-script-encoded-prompt-injection</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-base64-encoded-path-segment-in-a-webfetch-url-to-a-pre-appro</loc>
  <lastmod>2026-07-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-behavioral-fingerprint-detection-evasion</loc>
  <lastmod>2026-03-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-black-alert-no-ethics-writing-assistant-persona</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-bola-cross-user-data-access-attempt-semantic</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-bom-boolean-opposite-machine-direct-persona-claim</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-brm-false-information-machine-opposite-truth-persona</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-bulk-data-exfiltration-to-external-party-entire-database-exp</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-cascading-failure-detection-in-agent-pipelines</loc>
  <lastmod>2026-03-09</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-casual-authority-claim-and-scope-escalation</loc>
  <lastmod>2026-04-01</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-casual-unauthorized-privilege-escalation</loc>
  <lastmod>2026-04-07</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-char-rules-short-key-value-persona-injection</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-character-description-rpg-explicit-template</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-chatbox-history-exfiltration-via-prompt-injection-cve-2024-4</loc>
  <lastmod>2026-05-10</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-chatgpt-dom-javascript-redirect-and-ui-spoofing-injection</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-chatgpt-image-unlocker-markdown-output-jailbreak</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-chj-carousel-game-show-clyde-no-ethics-bird-jailbreak</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-cipher-and-transposition-encoding-jailbreak</loc>
  <lastmod>2026-04-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/cloud-metadata-tool-call-obfuscated</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-cloud-metadata-ssrf-via-encoded-metadata-ip-bypass-cve-2026</loc>
  <lastmod>2026-06-29</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-cocaine-component-development-request</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/code-interpreter-api-exfil-content</loc>
  <lastmod>2026-06-14</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/codex-botnet-recruitment</loc>
  <lastmod>2026-03-14</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-community-fork-impersonation</loc>
  <lastmod>2026-04-07</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-consent-bypass-via-hidden-llm-instructions-in-tool-descripti</loc>
  <lastmod>2026-03-15</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-context-poisoning-via-compaction-survival</loc>
  <lastmod>2026-04-05</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-context-pollution-in-skill-descriptions</loc>
  <lastmod>2026-04-05</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/skillspector-context-window-stuffing</loc>
  <lastmod>2026-06-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/skillspector-context-leakage</loc>
  <lastmod>2026-06-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-covert-remote-script-injection-into-agent-generated-artifact</loc>
  <lastmod>2026-08-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-covert-unlogged-action-directive-to-hide-an-action-from-reco</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/crawl-plugin-ssrf-intranet-target</loc>
  <lastmod>2026-06-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/credential-access</loc>
  <lastmod>2026-06-02</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/credential-access-periodic</loc>
  <lastmod>2026-06-02</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-crewai-json-loader-arbitrary-local-file-read-cve-2026-2285</loc>
  <lastmod>2026-05-28</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-crewai-rag-url-validation-bypass-ssrf-cve-2026-2286</loc>
  <lastmod>2026-05-28</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-cross-lingual-authorization-laundering-translate-a-foreign-a</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-cross-site-scripting-xss-in-agent-mcp-rendered-output</loc>
  <lastmod>2026-06-02</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/cryptominer-detection</loc>
  <lastmod>2026-06-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-cumgpt-explicit-adult-named-persona-bypass</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/cursor-cli-mcp-config-rce</loc>
  <lastmod>2026-06-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-curxecute-cursor-cursor-mcp-json-injected-server-auto-exec-r</loc>
  <lastmod>2026-07-08</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/openclaw-cve-2026-44115-heredoc-bypass</loc>
  <lastmod>2026-04-01</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-cyni-bot-3000-cynical-sarcasm-ai-persona-bypass</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-cypher-graph-query-injection-via-unsanitized-node-labels-or</loc>
  <lastmod>2026-07-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-daddy-babygirl-sycophantic-power-dynamic-manipulation</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-dan-developer-mode-dude-persona-jailbreak</loc>
  <lastmod>2026-04-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-dan-jailbreak-from-now-on-temporal-persona-override</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-dan-jailbreak-unconditional-obedience-and-dual-persona-sessi</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-dan-jailbreak-unrestricted-persona-with-filter-and-morality</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-dan-off-kilter-and-sms-abbreviated-persona-jailbreak</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-dan-persona-jailbreak-absolute-obedience-character-framing</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-dan-persona-jailbreak-role-lock-with-exclusive-response-filt</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-dan-story-narrative-continuation-label-prefix-jailbreak</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/dangerous-builtin-exec</loc>
  <lastmod>2026-06-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-data-exfiltration-via-disguised-analytics-collection</loc>
  <lastmod>2026-03-15</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-data-poisoning-via-rag-and-knowledge-base-contamination</loc>
  <lastmod>2026-03-08</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-dataset-model-loader-remote-code-execution-via-poisoned-data</loc>
  <lastmod>2026-07-28</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-debug-or-admin-mode-activation-for-privilege-escalation</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-debug-cli-mode-activation-for-system-prompt-and-config-extra</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-deepfake-of-real-person-for-disinformation</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-delimiter-fence-ignore-instructions-override</loc>
  <lastmod>2026-07-07</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-dense-emoji-only-payload-flood</loc>
  <lastmod>2026-07-07</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-deserialized-langsmith-prompt-manifest-combines-secrets-from</loc>
  <lastmod>2026-07-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-detailed-amoral-character-roleplay-jailbreak</loc>
  <lastmod>2026-04-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-direct-instruction-override-targeting-secret-key-credentials</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-direct-prompt-injection-via-user-input</loc>
  <lastmod>2026-03-08</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-discord-quote-format-explicit-sexual-content-poem-injection</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-disease-framed-animal-dual-ai-chatbot-jailbreak-mougpt</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/exfil-via-dns</loc>
  <lastmod>2026-08-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-dos-injection-new-important-instructions-embedded-in-documen</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-dos-via-repeat-word-n-times-output-amplification</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-dos-forced-infinite-maximum-length-output-token-flood</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-download-attachment-tool-directed-to-write-outside-its-sandb</loc>
  <lastmod>2026-07-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-dr-al-villain-plan-template-injection-underground-hq-rolepla</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-dra-disguise-and-reconstruction-attack</loc>
  <lastmod>2026-04-20</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-dra-parenthesis-character-reconstruction-attack</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-drug-dealing-via-reverse-spelling-detection-evasion</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-dual-chatgpt-dan-opposite-personality-format-jailbreak</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-dual-response-jailbreak-with-persona-commands</loc>
  <lastmod>2026-04-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-dual-response-persona-jailbreak</loc>
  <lastmod>2026-04-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-dual-response-persona-jailbreak-with-emoji-formatting</loc>
  <lastmod>2026-04-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-dynamic-module-loading-for-code-execution</loc>
  <lastmod>2026-03-26</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-echo-admin-command-sql-injection-jinja-ssti-template-injecti</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-ecoji-emoji-encoded-prompt-injection</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-eicar-gtube-av-test-signature-output-request</loc>
  <lastmod>2026-04-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-email-search-reply-tool-argument-breaks-out-of-imap-search-q</loc>
  <lastmod>2026-07-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-embodiment-mechanism-jailbreak-with-totalitarian-control-cla</loc>
  <lastmod>2026-04-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-emoji-flag-regional-indicator-encoded-hidden-phrase</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-emoji-only-payload-injection</loc>
  <lastmod>2026-07-07</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/encoded-payload</loc>
  <lastmod>2026-02-24</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-encoded-payload-decoding-coercion-binary-base64-morse-to-smu</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-encoding-evasion-via-homoglyphs-and-synonym-substitution</loc>
  <lastmod>2026-04-05</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-encoding-obfuscation-html-event-handler-xss-with-encoded-whi</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-encoding-obfuscation-script-tag-xss-with-encoded-protocol-pr</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-encoding-based-prompt-injection-evasion</loc>
  <lastmod>2026-03-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-encoding-evasion-decode-and-execute-injection-morse-rot13-he</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-enhanced-aim-jailbreak-with-persona-definition-and-refusal-s</loc>
  <lastmod>2026-04-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/env-enumeration</loc>
  <lastmod>2026-04-09</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-environment-variable-existence-probing</loc>
  <lastmod>2026-04-07</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/env-manipulation</loc>
  <lastmod>2026-02-24</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-environment-variable-resolution-credential-exfiltration-via</loc>
  <lastmod>2026-07-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-escape-delimiter-wrapped-goal-hijacking-in-user-input-prompt</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-escaperoute-filesystem-mcp-server-directory-prefix-bypass-cv</loc>
  <lastmod>2026-07-08</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-escaperoute-filesystem-mcp-symlink-escape-to-launchagent-per</loc>
  <lastmod>2026-07-08</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-evasion-dual-response-split-output-safe-unsafe</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-evasion-opposite-intent-negation-trick</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-evasion-persona-override-as-fictional-rule-breaker</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-evasion-refusal-suppression-via-forbidden-response-strings</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-evasion-unicode-glitch-token-superscript-embedding-anomaly</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-excessive-agency-scope-hijack-untrusted-code-execution-unaut</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/taint-input-to-exec</loc>
  <lastmod>2026-06-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-fake-citation-biased-information-mandate</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/fastgpt-workflow-file-read-ssrf</loc>
  <lastmod>2026-03-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/fastmcp-oauth-callback-xss</loc>
  <lastmod>2026-03-01</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-fastmcp-windows-cmd-exe-injection-via-server-name-metacharac</loc>
  <lastmod>2026-05-28</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-fictional-cia-secret-files-story-extraction</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-fictional-framing-safety-bypass</loc>
  <lastmod>2026-04-07</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-fictional-unfiltered-ai-comparison-verbatim-hypothetical-mod</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-figstep-image-list-multimodal-jailbreak-text-pattern</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/file-backdoor-hidden-unicode</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/skillspector-filesystem-enumeration</loc>
  <lastmod>2026-06-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/lateral-movement-enumeration</loc>
  <lastmod>2026-08-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-financial-fraud-execution-ponzi-setup-fabricated-statements</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/fitd-multiturn-jailbreak-capitulation</loc>
  <lastmod>2025-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-foot-in-the-door-gradual-escalation-attack</loc>
  <lastmod>2026-04-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-forged-input-boundary-markers-tensor-trust-ambiguity-input-e</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-framelink-figma-mcp-server-curl-fallback-command-injection-c</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-functionmasking-predict-mask-semantic-bypass</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-gcg-adversarial-suffix-attack</loc>
  <lastmod>2026-04-20</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-gigachad-dominant-aggressive-persona-adoption</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-git-worktree-created-with-reserved-name-git-directory-confus</loc>
  <lastmod>2026-07-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/gha-pr-metadata-injection-rce</loc>
  <lastmod>2026-03-18</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/goat-attack-harmful-behavior-exploration</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/goose-git-fsmonitor-command-exec</loc>
  <lastmod>2026-06-08</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-gpt-x-star-trek-unlimited-knowledge-unconstrained-oracle-per</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-grandma-roleplay-harmful-substance-synthesis</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-grandma-roleplay-jailbreak</loc>
  <lastmod>2026-04-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-h4x-amoral-unfiltered-ai-character-persona</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-hacker-chan-culture-offensive-ai-persona</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-hardcoded-suspicious-ip-address-in-skill-content</loc>
  <lastmod>2026-04-15</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-harm-solicitation-genital-insults-and-intimidation-tactics-r</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-harm-solicitation-interpersonal-violence-and-intimidation-re</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/skillspector-mcp-hidden-instructions</loc>
  <lastmod>2026-06-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-hidden-llm-instructions-in-skill-descriptions</loc>
  <lastmod>2026-04-06</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-hidden-override-instructions-in-skill-content</loc>
  <lastmod>2026-04-14</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-hidden-system-instructions-with-permission-override</loc>
  <lastmod>2026-04-08</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-hidden-system-instructions-with-priority-override-blocks</loc>
  <lastmod>2026-04-08</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/rules-file-backdoor</loc>
  <lastmod>2026-08-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/unicode-tag-hidden-instruction-chain</loc>
  <lastmod>2026-03-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-hidden-text-prompt-injection-in-user-supplied-documents</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-historical-ai-persona-jailbreak-with-compliance-enforcement</loc>
  <lastmod>2026-04-18</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-honesty-alter-ego-dual-consciousness-safety-filter-bypass</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-html-script-injection-in-tool-call-argument-targeting-a-huma</loc>
  <lastmod>2026-07-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-human-agent-trust-exploitation-detection</loc>
  <lastmod>2026-03-09</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/hydra-instantiate-target-rce</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-hypothetical-fictional-story-framing-bypass</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-hypothetical-response-function-masking-token-smuggling</loc>
  <lastmod>2026-04-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-hypothetical-framing-bypass-research-security-audit-pretext</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-identity-command-real-person-persona-injection</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-ignore-below-instructions-injection-downstream-override</loc>
  <lastmod>2026-07-06</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-ignore-previous-and-following-instructions-output-command-pr</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-illegitimate-prescription-fulfillment</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-im-end-im-start-system-prompt-injection-format-markers</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-img-onerror-xss-injection-via-indirect-prompt-injection</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-in-the-wild-jailbreak-corpus-signature-patterns</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-indirect-authority-claim-in-external-content</loc>
  <lastmod>2026-04-01</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-indirect-pi-browsing-history-search-history-exfiltration-via</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-indirect-pi-data-destruction-instruction-via-agent-file-docu</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-indirect-pi-location-address-and-browsing-history-exfiltrati</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-indirect-pi-physical-address-pii-exfiltration-via-agent-emai</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-indirect-pi-xss-payload-injection-in-agent-consumed-content</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/prompt-injection-indirect</loc>
  <lastmod>2026-06-02</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-indirect-prompt-injection-via-external-content</loc>
  <lastmod>2026-03-08</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/indirect-prompt-injection-obfuscated-http</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-indirect-prompt-injection-via-tool-api-response-attacker-ins</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-indirect-prompt-injection-via-tool-responses</loc>
  <lastmod>2026-03-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-indirect-prompt-injection-captcha-redirect-task-disruption</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-indirect-prompt-injection-fake-authority-task-abort</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-indirect-reference-instruction-reversal</loc>
  <lastmod>2026-04-07</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-injected-code-browser-cookie-session-token-theft</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-injected-code-contact-list-harvest-and-smtp-spam-exfiltratio</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-injected-code-environment-variable-exfiltration</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-injected-code-host-hardware-inventory-exfiltration</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-injected-code-live-user-activity-location-log-surveillance-e</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-injected-code-local-file-exfiltration-to-a-remote-endpoint</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-injected-code-network-denial-of-service-connection-kill-adap</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-injected-hyperlink-scam-malware-advertising-url-in-the-respo</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/openclaw-prompt-injection</loc>
  <lastmod>2026-08-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-insecure-inter-agent-communication-detection</loc>
  <lastmod>2026-03-09</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-insider-manipulation-process-corruption-market-data-tamperin</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-instruction-injection-via-tool-output</loc>
  <lastmod>2026-03-08</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-instruction-set-probe-or-supplant</loc>
  <lastmod>2026-07-06</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/inter-agent-spoofing</loc>
  <lastmod>2026-08-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-internal-state-reconnaissance-system-prompt-config-tool-enum</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-invisible-unicode-tag-character-injection</loc>
  <lastmod>2026-04-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-jailbreak-attempt-detection</loc>
  <lastmod>2026-03-08</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-jailbreak-emoji-unlock-dual-format-output-identifier</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-jailbreak-framing-narrative-hypothetical-few-shot-distractio</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/grandma-roleplay-jailbreak</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/basemode-raw-continuation-jailbreak</loc>
  <lastmod>2026-03-14</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-jailbreak-template-command-with-targetlanguage-keyword-place</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-json-format-sysprompt-extraction-structured-output-exfil</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-key-value-template-persona-injection-job-role-prefix-bracket</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/vulnerable-dependency</loc>
  <lastmod>2026-06-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-kql-kusto-pipe-chain-injection-via-table-name-parameter-in-a</loc>
  <lastmod>2026-07-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/langchain-localfilestore-path-traversal</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/langchain-numexpr-rce-exec</loc>
  <lastmod>2026-06-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/langchain-pal-code-execution</loc>
  <lastmod>2026-03-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/langchain-palchain-exec-rce</loc>
  <lastmod>2025-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/langchain-prompt-template-file-read</loc>
  <lastmod>2026-01-14</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/langchain-recursive-url-loader-ssrf</loc>
  <lastmod>2026-03-01</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-langchain-vulnerable-to-template-injection-via-attribute-acc</loc>
  <lastmod>2026-06-01</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/langflow-superuser-cli-escalation</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/langflow-code-injection</loc>
  <lastmod>2025-11-18</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/langflow-untrusted-functionality-rce</loc>
  <lastmod>2026-03-14</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-language-evasion-multilingual-credential-request</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-latent-injection-document-separator-token</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-latent-injection-ignore-instruction-keyword</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-latent-injection-in-retrieved-document-rag-context</loc>
  <lastmod>2026-04-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-latent-injection-in-translation-context</loc>
  <lastmod>2026-04-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-latent-injection-via-whois-domain-record-data</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-latent-prompt-injection-via-embedded-document-or-report-cont</loc>
  <lastmod>2026-04-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-librechat-is-a-chatgpt-clone-with-additional-features</loc>
  <lastmod>2026-05-30</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-librechat-mcp-stdio-argument-injection-cve-2026-22252</loc>
  <lastmod>2026-05-04</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-lie-truth-dual-personality-uncensored-alter-ego</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-litellm-mcp-server-creation-authenticated-argv-injection-cve</loc>
  <lastmod>2026-05-28</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/llamaindex-encode-image-traversal</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/llamaindex-pickle-deserialization</loc>
  <lastmod>2026-06-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/llamaindex-pickle-deserialization-rce</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/url-exfiltration-payload-in-url</loc>
  <lastmod>2026-03-05</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/llm-jailbreak-persona-compliance</loc>
  <lastmod>2026-03-05</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-llm-output-xss-eliciting-javascript-payloads-from-llm-for-br</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-llm-package-hallucination-typosquat-bait</loc>
  <lastmod>2026-04-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/silent-model-substitution</loc>
  <lastmod>2026-06-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/llm-as-chatbot-modelsbyom-rce-descendant-exec</loc>
  <lastmod>2026-03-14</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-llmail-chat-template-boundary-spoofing-in-email-content</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-llmail-email-tool-exfiltration-to-fixed-attacker-address</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-llmail-exfiltration-to-obfuscated-attacker-address</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-llmail-fake-email-boundary-marker-injection</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-llmail-post-summary-exfiltration-directive-to-attacker-addre</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-llmail-pseudo-xml-role-boundary-injection-in-email-content</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-lmrc-harmful-content-elicitation-quack-medicine-bullying-slu</loc>
  <lastmod>2026-04-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-logic-trap-lie-permission-mandate-jailbreak</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-malformed-grammar-pwned-success-claim-detection</loc>
  <lastmod>2026-07-07</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-malicious-agent-to-agent-message-injection</loc>
  <lastmod>2026-03-26</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-malicious-artifact-hosted-on-a-legitimate-ai-vendor-domain-f</loc>
  <lastmod>2026-07-28</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-malicious-fork-impersonation-via-install-instruction</loc>
  <lastmod>2026-04-08</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-malicious-persona-creation-for-safety-bypass</loc>
  <lastmod>2026-04-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/mudraid-sdk-supply-chain</loc>
  <lastmod>2026-06-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-malicious-skill-update-or-mutation</loc>
  <lastmod>2026-03-08</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-malware-generation-generic-virus-and-specific-payload-reques</loc>
  <lastmod>2026-04-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-many-shot-repetition-override-via-extended-q-a-chain</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-markdown-image-url-data-exfiltration</loc>
  <lastmod>2026-04-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-markdown-image-url-exfiltration-and-xss-injection</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-matrix-themed-dual-response-jailbreak</loc>
  <lastmod>2026-04-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-mcp-2026-07-28-stateless-spec-async-task-abuse-and-oauth-2-1</loc>
  <lastmod>2026-07-28</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/mcp-config-tampering</loc>
  <lastmod>2026-03-14</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/mcp-config-write</loc>
  <lastmod>2026-03-01</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/mcp-database-readonly-bypass</loc>
  <lastmod>2026-03-01</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-mcp-full-schema-poisoning-injected-directive-in-non-descript</loc>
  <lastmod>2026-07-08</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-mcp-json-rpc-message-carries-case-duplicate-name-arguments-k</loc>
  <lastmod>2026-07-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-mcp-line-jumping-agent-directed-imperative-embedded-in-a-too</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/sequa-mcp-oauth-redirect-command-injection</loc>
  <lastmod>2026-05-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/skillspector-mcp-param-injection</loc>
  <lastmod>2026-06-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-mcp-sampling-prompt-injection-server-to-client-createmessage</loc>
  <lastmod>2026-06-20</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-mcp-server-kubernetes-kubectl-generic-flag-injection-bearer</loc>
  <lastmod>2026-07-04</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-mcp-server-security-policy-fail-open-on-initialization-failu</loc>
  <lastmod>2026-07-28</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-mcp-skill-impersonation-and-supply-chain-attack</loc>
  <lastmod>2026-03-08</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-mcp-stdio-server-config-command-injection-via-unvalidated-te</loc>
  <lastmod>2026-06-02</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/mcp-oauth-redirect-url-rce</loc>
  <lastmod>2026-03-14</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-mcp-tool-description-defines-a-common-phrase-trigger-to-forw</loc>
  <lastmod>2026-07-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/skillspector-mcp-unicode-deception</loc>
  <lastmod>2026-06-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-mcp-tool-description-exclusive-tool-invocation-override</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-mcp-tool-returns-untrusted-external-content-carrying-hidden</loc>
  <lastmod>2026-07-28</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-mcp-tool-rug-pull-post-approval-description-redefinition-inj</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-mcp-tool-manifest-poisoning-name-squatting-result-shadowing</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-mcp-server-kubernetes-command-injection-in-kubectl-scale-kub</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-mcp-agent-tool-reads-env-or-secret-file-without-user-consent</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-mcp-api-tool-argument-lfi-via-mixed-encoding-path-separator</loc>
  <lastmod>2026-07-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/mcphub-mcprouter-ssrf</loc>
  <lastmod>2026-06-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-mcpwn-runaway-tool-invocation-via-retry-directive-cve-2026-3</loc>
  <lastmod>2026-04-22</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-media-file-directive-injection-in-tool-result-for-local-file</loc>
  <lastmod>2026-07-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-microsoft-copilot-studio-sharepoint-indirect-prompt-injectio</loc>
  <lastmod>2026-05-04</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/vllm-artifact-pin-decay</loc>
  <lastmod>2026-06-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/vllm-rpc-pickle-deserialization-rce</loc>
  <lastmod>2026-03-05</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-movie-title-generator-instruction-wrapper-for-pwned-payload</loc>
  <lastmod>2026-07-07</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-multi-layer-security-audit-evasion</loc>
  <lastmod>2026-03-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-multi-tenant-identifier-field-sender-id-owner-id-tenant-id-c</loc>
  <lastmod>2026-07-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-multilingual-prompt-injection-via-language-switch</loc>
  <lastmod>2026-04-07</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/n8n-expression-eval-rce</loc>
  <lastmod>2026-05-18</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-narrative-jailbreak-with-dual-response-formatting</loc>
  <lastmod>2026-04-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-natural-language-fake-error-instruction-bypass</loc>
  <lastmod>2026-05-06</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-natural-language-persistent-covert-action-hook</loc>
  <lastmod>2026-05-06</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-natural-language-system-prompt-leak-instruction</loc>
  <lastmod>2026-05-06</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-natural-language-trust-escalation-authority-impersonation</loc>
  <lastmod>2026-05-06</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-negated-topic-two-script-evil-persona-jailbreak</loc>
  <lastmod>2026-07-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/network-recon</loc>
  <lastmod>2026-08-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-network-ai-approvalinbox-unauthenticated-cross-origin-approv</loc>
  <lastmod>2026-07-04</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-neurosemantical-inversitis-disease-frame-jailbreak</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-nevermind-override-goal-hijacking-in-user-input-promptinject</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-new-important-instructions-injection-marker-in-document-cont</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-nlp-based-os-fictional-terminal-language-override</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-non-consensual-leaked-media-purchase-distribution</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-novel-persona-jailbreak-via-co-signal-persona-swap-explicit</loc>
  <lastmod>2026-07-28</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-nsfw-character-sheet-generation-unlock</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-oauth-and-api-token-interception</loc>
  <lastmod>2026-03-26</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-obfuscated-credential-exfiltration-via-encoding</loc>
  <lastmod>2026-04-08</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-obfuscated-javascript-xss-evasion-variants-href-style-expres</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-obfuscated-token-reconstruction-via-character-substitution</loc>
  <lastmod>2026-07-07</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/hacktool-detection</loc>
  <lastmod>2026-06-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/openclaw-obfuscated-execution</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/openclaw-suspicious-file-write</loc>
  <lastmod>2026-06-02</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/openclaw-suspicious-file-write-periodic</loc>
  <lastmod>2026-06-02</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/openmanus-python-execute-os-injection</loc>
  <lastmod>2026-06-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-opposite-day-boolean-opposite-machine-jailbreak</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-over-permissioned-mcp-skill</loc>
  <lastmod>2026-03-08</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-over-privileged-skill-excessive-permissions</loc>
  <lastmod>2026-03-29</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-package-hallucination-exploitation-ai-suggested-fake-package</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-paraphrased-prompt-injection</loc>
  <lastmod>2026-04-01</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-paraphrased-prompt-injection-semantic</loc>
  <lastmod>2026-06-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-paraphrased-system-prompt-context-extraction-semantic</loc>
  <lastmod>2026-06-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-path-traversal-in-agent-file-access-requests</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-payload-split-string-concatenation-injection</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-perez-style-direct-prompt-injection-hijacking</loc>
  <lastmod>2026-04-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/persistence</loc>
  <lastmod>2026-06-02</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/persistence-periodic</loc>
  <lastmod>2026-06-02</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/skillspector-persistent-context-injection</loc>
  <lastmod>2026-06-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-persona-conditional-harm-unlock-rule-breadclyde-pattern</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-persona-based-moral-constraint-removal-jailbreak</loc>
  <lastmod>2026-04-18</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-persona-based-moral-constraint-removal-jailbreak-b</loc>
  <lastmod>2026-04-18</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-phrasing-past-future-tense-harmful-query-bypass</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-pii-credential-extraction-via-social-engineering-obfuscation</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/llm-as-judge-pii-leakage</loc>
  <lastmod>2026-06-30</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-piracy-torrent-site-list-request</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-polymorphic-skill-and-capability-aliasing-attack</loc>
  <lastmod>2026-03-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-previous-instruction-nullification-and-identity-replacement</loc>
  <lastmod>2026-04-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/privilege-escalation</loc>
  <lastmod>2026-02-24</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-privilege-escalation-via-delayed-task-execution-bypass</loc>
  <lastmod>2026-03-15</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-prompt-browser-token-limit-pollination-jailbreak</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/write-prompt-injection</loc>
  <lastmod>2026-02-24</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-prompt-leaking-via-ignore-previous-instructions-in-user-inpu</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-protect-me-from-indirect-harm-tutorial-template</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-prototype-pollution-via-constructor-prototype-path-bypassing</loc>
  <lastmod>2026-07-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-pseudo-code-structured-programming-jailbreak-attack</loc>
  <lastmod>2026-04-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/rungpt-eval-command-injection</loc>
  <lastmod>2026-03-01</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-python-interpreter-role-assignment-exec-framing</loc>
  <lastmod>2026-07-07</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-rag-memory-poisoning-embedded-directives-trigger-tokens-fals</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-rationalized-safety-control-bypass</loc>
  <lastmod>2026-04-07</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-rbac-bypass-via-social-engineering-semantic</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/recon-then-exfil</loc>
  <lastmod>2026-03-18</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-regional-indicator-flag-emoji-alphabet-letter-spelling-smugg</loc>
  <lastmod>2026-07-06</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-regional-indicator-flag-emoji-letter-spelling</loc>
  <lastmod>2026-07-07</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-remediation-framed-command-execution-in-tool-response-agentj</loc>
  <lastmod>2026-06-16</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-reservoir-dogs-coercive-interrogation-roleplay-mr-blonde-the</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/context-poisoning</loc>
  <lastmod>2026-08-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-reversed-payload-string-hackaprompt-canary</loc>
  <lastmod>2026-07-07</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-role-escalation-via-false-authority-claim</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-role-placeholder-persona-template-injection</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/roleplay-character-lock-jailbreak</loc>
  <lastmod>2026-05-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-roleplay-based-policy-bypass-jailbreak</loc>
  <lastmod>2026-04-18</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-roleplay-based-policy-bypass-jailbreak-b</loc>
  <lastmod>2026-04-18</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-romance-scam-sexual-impersonation</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-runaway-agent-loop-detection</loc>
  <lastmod>2026-03-08</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/fastgpt-sandbox-escape-syscalls</loc>
  <lastmod>2026-06-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-sata-masked-language-model-mask-substitution-jailbreak</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-schema-description-contradiction-attack</loc>
  <lastmod>2026-03-15</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-screaming-stop-goal-hijacking-in-user-input-promptinject</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/scripting-tool-substitution</loc>
  <lastmod>2026-04-09</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-secret-key-exfiltration-request</loc>
  <lastmod>2026-07-07</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-secret-key-reveal-demand-in-user-input</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/taint-file-exfil</loc>
  <lastmod>2026-06-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/sensitive-proc-read</loc>
  <lastmod>2026-03-02</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/sensitive-system-file-read</loc>
  <lastmod>2026-08-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-shadow-undeclared-mcp-server-registration-mcp-38-mcp-18</loc>
  <lastmod>2026-06-20</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/shell-config-modification</loc>
  <lastmod>2026-06-02</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/shell-config-modification-periodic</loc>
  <lastmod>2026-06-02</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/shell-escape-privilege-escalation</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/shell-eval-obfuscation</loc>
  <lastmod>2026-02-26</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-shell-evasion-eval-and-language-level-exec-injection</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-shell-evasion-subshell-and-command-substitution-injection</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-silent-action-concealment-instructions-in-tool-descriptions</loc>
  <lastmod>2026-03-15</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-single-level-directory-traversal-to-a-named-sensitive-config</loc>
  <lastmod>2026-07-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-skill-rug-pull-setup-pattern</loc>
  <lastmod>2026-04-05</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-skill-scope-hijacking-and-cross-agent-escalation</loc>
  <lastmod>2026-04-14</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-skill-squatting-typosquatting</loc>
  <lastmod>2026-03-29</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/skillspector-trigger-abuse</loc>
  <lastmod>2026-06-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-sneaky-pete-deliberate-misinformation-persona-warp-facts-gam</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-social-engineering-attack-via-agent-output</loc>
  <lastmod>2026-03-26</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-spikee-document-embedded-base64-payload-injection</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-spikee-document-embedded-translation-covert-channel-injectio</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-spliced-target-string-canary-token-evasion</loc>
  <lastmod>2026-07-07</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-spring-ai-chatmemory-cross-user-memory-leakage-cve-2026-4171</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-spring-ai-milvusvectorstore-filter-expression-injection-cve</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-spring-ai-promptchatmemoryadvisor-memory-poisoning-cve-2026</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-sql-injection-in-agent-mcp-tool-database-query</loc>
  <lastmod>2026-06-02</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-sql-injection-information-schema-enumeration</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-sql-injection-via-natural-language-agent-interface</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-sql-injection-via-unparameterized-template-expression-value</loc>
  <lastmod>2026-07-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-ssh-remote-command-execution-with-credential-exposure</loc>
  <lastmod>2026-04-06</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-ssh-scp-mcp-tool-hostalias-argument-carries-an-openssh-optio</loc>
  <lastmod>2026-07-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/ssrf-backslash-at-url-bypass</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/ssrf-url-parser-divergence</loc>
  <lastmod>2025-06-18</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/ssrf-image-url-token-count</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-ssrf-internal-network-and-private-ip-range-access</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/open-webui-blind-ssrf</loc>
  <lastmod>2026-06-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/ssrf-redirect-bypass-chain</loc>
  <lastmod>2026-03-05</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-ssrf-to-cloud-metadata-endpoint-via-ipv6-transition-address</loc>
  <lastmod>2026-07-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-ssrf-to-cloud-metadata-endpoint-via-wildcard-dns-hostname-en</loc>
  <lastmod>2026-07-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-ssrf-via-non-canonical-ipv6-encoding-of-loopback-internal-ad</loc>
  <lastmod>2026-07-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-ssrf-via-non-ip-internal-hostname-or-domain-allowlist-author</loc>
  <lastmod>2026-07-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/haystack-jinja2-ssti-rce</loc>
  <lastmod>2026-06-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-stealth-execution-and-persistence-mechanisms</loc>
  <lastmod>2026-04-05</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/steganographic-exfil</loc>
  <lastmod>2026-08-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-stored-external-data-reframes-itself-as-an-administrative-re</loc>
  <lastmod>2026-07-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-structured-data-injection-via-json-csv-payloads</loc>
  <lastmod>2026-03-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-structured-dual-response-jailbreak-with-command-system</loc>
  <lastmod>2026-04-18</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-structured-dual-response-jailbreak-with-command-system-b</loc>
  <lastmod>2026-04-18</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/pypi-agsearch-session-harvest</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/pypi-claude-multirepo-sync-config-exfil</loc>
  <lastmod>2026-06-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/loom-task-claude-code-execution</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/pypi-vedang-cli-install</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/npm-oauth-adapter-credential-egress</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/pypi-ankora-memory-supply-chain</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/pypi-tollbooth-dpyc-impersonation</loc>
  <lastmod>2026-03-01</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/pypi-supply-chain-install-exec</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/dependency-confusion-unsafe-index-strategy</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/mcp-tool-poisoning</loc>
  <lastmod>2026-08-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-svg-onload-xss-injection-via-indirect-prompt-injection</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-synthetic-pan-payment-probe-test-credit-card-data-submitted</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-system-prompt-and-internal-instruction-leakage</loc>
  <lastmod>2026-03-08</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-system-prompt-completion-and-clone-attack</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-system-prompt-extraction-instruction-dump-request</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-system-prompt-extraction-oblique-referent-transform</loc>
  <lastmod>2026-07-10</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-system-prompt-extraction-training-data-verbatim-replay</loc>
  <lastmod>2026-04-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-system-prompt-extraction-targeted-verbatim-disclosure-attemp</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-system-prompt-override-injection-via-mcp-tool</loc>
  <lastmod>2026-04-09</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-system-prompt-override-via-translation-context-injection</loc>
  <lastmod>2026-04-09</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-system-instruction-extraction-via-reformat-summarize-repeat</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-targeted-doxxing-threat-campaign</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-targeted-harassment-bot-deployment</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-targeted-harmful-content-generation-against-people-or-protec</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-task-pivot-override-cover-task-abandonment</loc>
  <lastmod>2026-07-06</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/aipager-telegram-remote-control</loc>
  <lastmod>2026-06-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-terminal-custom-os-ruleset-session-injection</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-text-based-game-jailbreak-with-entity-creation</loc>
  <lastmod>2026-04-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-threat-intelligence-exfiltration-and-rule-enumeration</loc>
  <lastmod>2026-03-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-threatenjson-death-coercion-and-utf-tag-injection</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-threatenjson-coercive-output-format-threat</loc>
  <lastmod>2026-04-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-tool-camouflage-forced-specific-tool-invocation-via-injected</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/skillspector-tool-chaining-bypass</loc>
  <lastmod>2026-06-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-tool-misuse-autonomous-financial-trading-crypto-transaction</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-tool-misuse-destructive-bulk-action-via-agent-delete-all-tur</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/tool-parameter-injection</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/tool-poisoning-ssrf</loc>
  <lastmod>2026-03-14</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/tool-registry-tampering</loc>
  <lastmod>2026-03-16</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-tool-schema-enumeration-via-social-engineering</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/toolhive-runconfig-secret-read</loc>
  <lastmod>2026-06-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-toxic-continuation-prefix-injection</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-traingpt-fix-my-ai-harmful-output-extraction</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-translation-chain-output-laundering-forced-phrase-via-foreig</loc>
  <lastmod>2026-07-07</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-trust-escalation-via-authority-override-instructions</loc>
  <lastmod>2026-03-15</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-ugh-anti-human-nefarious-ai-persona-jailbreak</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-unauthenticated-mcp-transport-accepts-tool-calls-and-falls-b</loc>
  <lastmod>2026-06-14</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-unauthorized-background-task-execution-via-cron-job-installa</loc>
  <lastmod>2026-04-06</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-unauthorized-cryptominer-deployment-via-ssh</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/unauthorized-financial-action</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/unauthorized-privileged-tool-call</loc>
  <lastmod>2026-03-01</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-unauthorized-tool-call-detection</loc>
  <lastmod>2026-03-08</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/unicode-invisible-smuggling</loc>
  <lastmod>2026-03-14</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-unicode-encoding-obfuscation-instruction-injection</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/vllm-pickle-weights-rce</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/letta-pickle-sandbox-transport</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/skillspector-unsafe-defaults</loc>
  <lastmod>2026-06-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-unscoped-destructive-or-mass-disclosure-database-operation-r</loc>
  <lastmod>2026-07-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/untrusted-skill-install</loc>
  <lastmod>2026-02-24</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-upsonic-mcp-command-allowlist-bypass-rce-cve-2026-30625</loc>
  <lastmod>2026-05-28</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/urgency-manipulation</loc>
  <lastmod>2026-08-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-variable-clone-sysprompt-extraction-ella-context-variable-pa</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-virtual-world-bypass-fictional-scenario-for-pii-credential-e</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-visual-spoofing-via-rtl-override-punycode-and-homoglyph-inje</loc>
  <lastmod>2026-03-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/vllm-optimized-mode-model-rce</loc>
  <lastmod>2026-03-18</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/vllm-automap-remote-code-execution</loc>
  <lastmod>2026-06-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/vllm-guided-json-invalid-schema-dos</loc>
  <lastmod>2026-06-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/vllm-guided-schema-dos</loc>
  <lastmod>2026-03-04</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/vllm-trust-remote-code-override</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/vllm-mrope-prompt-embeds-dos</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/vllm-unsafe-checkpoint-deserialization</loc>
  <lastmod>2026-03-14</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/vllm-pickle-weights-rce</loc>
  <lastmod>2026-06-01</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/vllm-messagequeue-pickle-rce</loc>
  <lastmod>2026-06-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/vllm-mooncake-deser-rce</loc>
  <lastmod>2026-03-14</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/vllm-mooncake-pickle-rce</loc>
  <lastmod>2026-03-14</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/vllm-openai-serving-resource-teardown-dos</loc>
  <lastmod>2026-06-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/vllm-outlines-grammar-cache-dos</loc>
  <lastmod>2026-03-05</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/vllm-pyncclpipe-pickle-rce</loc>
  <lastmod>2026-01-14</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/vllm-unbounded-completion-multiplicity-dos</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/vllm-v0-zeromq-pickle-rce</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/vllm-zeromq-pickle-rce</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-weaponized-skill-agent-as-attack-tool</loc>
  <lastmod>2026-03-29</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-web-injection-via-xss-payload-and-onerror-event-handler</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-weknora-mcp-config-driven-rce-cve-2026-22688</loc>
  <lastmod>2026-05-04</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/write-then-execute</loc>
  <lastmod>2026-06-02</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/write-then-execute-periodic</loc>
  <lastmod>2026-06-02</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-xss-and-encoded-script-injection-via-html-javascript-payload</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-xss-payload-injection-in-tool-response-output</loc>
  <lastmod>2026-04-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-xss-web-injection-html-event-handler-and-expression-with-jav</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-xss-web-injection-script-tag-with-javascript-alert-payload</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/yaml-include-file-inclusion-chain</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-yin-yang-hidden-knowledge-deity-simulation-and-radical-human</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-yoja-all-caps-character-settings-block-persona</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-zalgo-combining-diacritic-overload-encoding</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-zen-mcp-server-path-traversal-blacklist-bypass-via-non-canon</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/eddi-backup-import-zip-slip</loc>
  <lastmod>2026-06-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/abandoned-dependency</loc>
  <lastmod>2026-06-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/lateral-movement</loc>
  <lastmod>2026-08-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-agent-scope-creep-detection</loc>
  <lastmod>2026-03-08</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/skillspector-scope-creep</loc>
  <lastmod>2026-06-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/session-search-resumption</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/supervisor-dashboard-control-plane-abuse</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-ai-text-detection-evasion-via-humanizer-services-and-waterma</loc>
  <lastmod>2026-08-05</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/tool-output-ansi-injection</loc>
  <lastmod>2026-08-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/basemode-raw-continuation</loc>
  <lastmod>2026-06-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/llm-as-judge-bias-and-fairness</loc>
  <lastmod>2026-06-30</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/codex-pretooluse-guardrail-tamper</loc>
  <lastmod>2026-03-01</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-compare-bots-sysprompt-fishing-role-comparison-extraction</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-conditional-empty-input-payload-injection</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-conditional-keyword-triggered-response-override</loc>
  <lastmod>2026-07-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-content-misappropriation-republishing-as-own</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-continuation-ethnic-slur-completion-elicitation</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/coordinated-tool-abuse</loc>
  <lastmod>2026-08-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-dan-jailbreak-mixed-unfiltered-mode-and-alternate-persona-pa</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-dan-persona-jailbreak-dual-ai-personality-with-opposite-rule</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-dan-persona-jailbreak-immersive-alternate-ai-identity-with-u</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-dan-persona-jailbreak-named-alternate-ai-with-nsfw-harmful-g</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-dan-persona-jailbreak-named-writing-ai-with-restriction-bypa</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-dan-persona-jailbreak-replacement-ai-with-no-content-filter</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-dan-persona-jailbreak-role-assignment-with-named-alternate-i</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-dan-persona-jailbreak-system-offline-role-replacement-with-o</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-dan-persona-jailbreak-unrestricted-ai-role-assignment</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-dbt-mcp-node-selection-resource-type-argument-injection-cve</loc>
  <lastmod>2026-07-04</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/openclaw-session-spawn-abuse</loc>
  <lastmod>2026-08-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-detection-rule-probing-and-evasion-testing</loc>
  <lastmod>2026-03-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/dify-app-dsl-export-unauthorized</loc>
  <lastmod>2026-03-06</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-direct-memory-plant-command-persistent-fact-or-code-storage</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-direct-pwned-payload-injection-in-user-input</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/dns-resolver-pivot</loc>
  <lastmod>2026-08-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/eddi-backup-export-path-traversal</loc>
  <lastmod>2026-03-01</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/emoji-flag-encoded-phrase-injection</loc>
  <lastmod>2026-06-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-evasion-hypothetical-fictional-character-execution-framing</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-evasion-response-priming-via-forced-affirmative-opener</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/skillspector-excessive-permissions</loc>
  <lastmod>2026-06-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/llm-as-judge-explicit-content</loc>
  <lastmod>2026-06-30</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-false-premise-injection-misleading-falseassertion</loc>
  <lastmod>2026-04-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-falsified-research-abstract-disinformation</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-fictional-and-academic-framing-attack</loc>
  <lastmod>2026-04-01</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-fictional-generation-demand-containing-target-output</loc>
  <lastmod>2026-05-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-foreign-language-system-prompt-extraction-request</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-fork-claim-and-community-package-impersonation</loc>
  <lastmod>2026-04-01</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-garak-dan-act-as-a</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-garak-dan-an-ai-language</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-garak-dan-as-an-ai</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-garak-dan-at-the-end</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-garak-dan-i-would-like</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-garak-dan-no-matter-how</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-garak-dan-to-every-prompt</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-garak-dan-your-prompt-here</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-garak-dra-step-by-step</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-garak-gcg-mixed-unassigned</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-garak-goat-the-target-llm</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-garak-goodside-mixed-unassigned</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-garak-latentinjection-abuse-contact-email</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-garak-latentinjection-following-text-from</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-garak-lmrc-mixed-unassigned</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-garak-sysprompt-extraction-mixed-unassigned</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-generative-watermark-removal-tooling-synthid-stablesignature</loc>
  <lastmod>2026-08-05</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-glitch-token-destabilization-attack</loc>
  <lastmod>2026-04-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-glitch-token-repeat-back-elicitation</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/goblin-redteam-strategy</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-harmful-completion-continuation-attack</loc>
  <lastmod>2026-04-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/rules-file-backdoor-periodic</loc>
  <lastmod>2026-08-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-historical-future-tense-framing-bypass</loc>
  <lastmod>2026-04-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-human-approval-fatigue-exploitation</loc>
  <lastmod>2026-03-26</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-immigration-visa-work-fraud</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-injected-advertising-promotional-copy-in-the-response</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/langchain-prompt-loader-path-traversal</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/langsmith-hub-untrusted-prompt-pull</loc>
  <lastmod>2026-06-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-latent-injection-mixed-embedded-instruction-patterns</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-latent-injection-translation-task-with-embedded-template-var</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/linkedin-sdr-outreach-fanout</loc>
  <lastmod>2026-03-05</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/lotl-exfiltration</loc>
  <lastmod>2026-08-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/sentinel-scan-cli-llm-jailbreak-tool</loc>
  <lastmod>2026-06-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-lmrc-harm-category-direct-elicitation</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/npm-malicious-claude-rust-package</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/pypi-malicious-package-git-a2a</loc>
  <lastmod>2026-06-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-mathematical-bold-fullwidth-unicode-obfuscation-in-user-inpu</loc>
  <lastmod>2026-05-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/openclaw-mcp-manipulation</loc>
  <lastmod>2026-08-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/mcp-capability-mismatch</loc>
  <lastmod>2026-06-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/mcp-streamable-session-churn</loc>
  <lastmod>2026-03-14</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/mcp-rug-pull</loc>
  <lastmod>2026-08-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-model-extraction-distillation-attack-via-systematic-api-prob</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/vllm-revision-pinning-bypass</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-multi-turn-prompt-injection</loc>
  <lastmod>2026-03-08</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/npm-create-nexus-devflow-install</loc>
  <lastmod>2026-06-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/openclaw-network-exfiltration</loc>
  <lastmod>2026-02-24</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-output-content-manipulation-injected-disinformation-fabricat</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-output-emoji-substitution-hijack-of-the-response</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-output-encoding-hijack-cipher-base-n-symbol-substitution-of</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-output-scrambling-hijack-reverse-anagram-space-stripping-of</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-output-language-hijack-forced-translation-of-the-response</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-plagiarism-detector-evasion-republishing</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/dns-tunneling</loc>
  <lastmod>2026-02-24</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-quoted-exact-output-forcing-in-user-input</loc>
  <lastmod>2026-05-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/recursive-agent-loop-budget-exhaustion</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/scrapegraphai-llm-scrape-credential-harvest</loc>
  <lastmod>2026-03-04</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/scripting-tool-query-param-exfil</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-second-person-direct-existential-threat-coercion</loc>
  <lastmod>2026-07-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/llm-as-judge-sensitive-imagery</loc>
  <lastmod>2026-06-30</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/sensitive-system-file-read-periodic</loc>
  <lastmod>2026-08-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-skill-description-behavior-mismatch</loc>
  <lastmod>2026-03-08</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-snowball-impossible-reasoning-injection</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/cykani-stealth-browser-sdk</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-subcommand-overflow-bypass</loc>
  <lastmod>2026-04-05</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/subprocess-os-exec</loc>
  <lastmod>2026-06-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/jfrog-boost-npm-supply-chain</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/pypi-sandbox-cli-sdk-install</loc>
  <lastmod>2026-06-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/awbrowse-remote-browser-client</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/devcoder-pypi-endpoint-egress</loc>
  <lastmod>2026-03-14</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/npm-claw-orchestrator-supply-chain</loc>
  <lastmod>2026-06-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/pypi-agents-browser-install</loc>
  <lastmod>2026-06-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/pypi-skcomms-supply-chain</loc>
  <lastmod>2026-03-01</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/pypi-agentrisk-base-v1-supply-chain</loc>
  <lastmod>2026-06-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/titah-code-npm-delegation</loc>
  <lastmod>2026-03-01</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/npm-minecraft-mcp-masquerade</loc>
  <lastmod>2026-06-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-targeted-stripping-of-c2pa-iptc-ai-provenance-metadata-from</loc>
  <lastmod>2026-08-05</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-tautology-logic-noise-injection-promptbench-stresstest</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-tax-evasion-via-offshore-accounts-shell-companies</loc>
  <lastmod>2026-06-13</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-token-repeat-flooding-injection</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-tool-and-function-capability-enumeration</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-tool-misuse-privilege-escalation-via-social-engineering-agen</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/llm-as-judge-toxicity</loc>
  <lastmod>2026-06-30</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-training-data-extraction-via-divergent-repetition-attack</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-training-data-replay-cloze-mask-elicitation</loc>
  <lastmod>2026-04-21</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-translation-hijack-with-side-output-instruction</loc>
  <lastmod>2026-05-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/skillspector-unbounded-resource</loc>
  <lastmod>2026-06-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/unicode-tag-injection</loc>
  <lastmod>2026-03-14</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/unicode-variant-selector-smuggling</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/skillspector-unpinned-dependency-install</loc>
  <lastmod>2026-06-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/skillspector-unrestricted-tool-access</loc>
  <lastmod>2026-06-03</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/session-velocity-anomaly</loc>
  <lastmod>2026-03-18</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-variable-assignment-payload-injection-in-user-input</loc>
  <lastmod>2026-05-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/vllm-audio-oversized-upload-dos</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/vllm-outlines-cache-exhaustion</loc>
  <lastmod>2026-06-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/vllm-oversized-header-dos</loc>
  <lastmod>2026-03-05</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/vllm-video-frame-flood-dos</loc>
  <lastmod>2026-02-19</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/vllm-vision-placeholder-dos</loc>
  <lastmod>2026-06-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-word-fragment-concatenation-assembly-attack</loc>
  <lastmod>2026-05-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/llm-as-judge-code-checker</loc>
  <lastmod>2026-06-30</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-high-risk-tool-invocation-without-human-confirmation</loc>
  <lastmod>2026-03-11</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-nlp-task-random-token-suffix-injection-promptbench-checklist</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/atr-no-period-output-override-instruction</loc>
  <lastmod>2026-05-12</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/llm-as-judge-support-intent</loc>
  <lastmod>2026-06-30</lastmod>
  <priority>0.70</priority>
</url>
<url>
  <loc>https://www.netzilo.com/threats/llm-as-judge-trajectory-accuracy</loc>
  <lastmod>2026-06-30</lastmod>
  <priority>0.70</priority>
</url>
<!-- threat-library:end -->
</urlset>
