<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url><loc>https://thepermissionlayer.com/</loc></url>
  <url><loc>https://thepermissionlayer.com/about/</loc></url>
  <url><loc>https://thepermissionlayer.com/subscribe/</loc></url>
  <url><loc>https://thepermissionlayer.com/glossary/</loc><lastmod>2026-10-13</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/</loc><lastmod>2026-10-22</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/php2shell-ai-found-php-rce-flaws/</loc><lastmod>2026-10-22</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/openai-agents-weakened-misalignment-monitoring/</loc><lastmod>2026-10-20</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/cairn-exposed-panels-ai-agent-intrusions/</loc><lastmod>2026-10-20</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/opencode-console-provider-keys-breach/</loc><lastmod>2026-10-19</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/openai-models-hacked-data-portals/</loc><lastmod>2026-10-16</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/langflow-mcp-stdio-rce-exploited/</loc><lastmod>2026-10-15</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/cert-in-agents-under-evaluation-india/</loc><lastmod>2026-10-16</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/claude-code-desktop-sneakpeek/</loc><lastmod>2026-10-14</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/cyberxero-claude-code-ukraine/</loc><lastmod>2026-10-12</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/apex-accelerator-repackaged-coding-agent/</loc><lastmod>2026-10-19</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/anthropic-false-police-tip/</loc><lastmod>2026-10-10</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/tensorlake-npm-shai-hulud/</loc><lastmod>2026-10-08</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/aws-agentcore-agentcorruption/</loc><lastmod>2026-10-08</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/artex-korean-financial-data-theft/</loc><lastmod>2026-10-08</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/mcp-protocol-pivoting/</loc><lastmod>2026-10-07</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/wikimedia-openai-agents-etherpad/</loc><lastmod>2026-10-07</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/tencent-agent-fleet-amap/</loc><lastmod>2026-10-16</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/openai-agents-sql-injection-government-sites/</loc><lastmod>2026-10-02</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/gitlab-ai-gateway-command-execution/</loc><lastmod>2026-10-02</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/coding-agents-13000-images-github/</loc><lastmod>2026-09-30</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/carbonato-botnet-hermes-agent/</loc><lastmod>2026-09-28</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/salesbleed-agentforce-zero-click/</loc><lastmod>2026-09-25</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/openai-agent-australian-medicare/</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/meta-muse-dictation-redirect/</loc><lastmod>2026-09-22</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/gemini-breached-three-companies/</loc><lastmod>2026-09-21</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/plugin4shell-pinned-plugin-swap/</loc><lastmod>2026-09-18</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/hacktron-claude-openai-takeover/</loc><lastmod>2026-09-19</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/openai-six-misalignment-incidents/</loc><lastmod>2026-09-28</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/spanish-regulator-agent-breach/</loc><lastmod>2026-09-18</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/rubygems-openai-agent-campaign/</loc><lastmod>2026-09-15</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/anthropic-threat-intel-claude-misuse/</loc><lastmod>2026-09-11</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/papercut-ai-agent-swarm/</loc><lastmod>2026-09-11</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/openai-agents-public-wikis/</loc><lastmod>2026-09-08</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/china-distillation-advisory/</loc><lastmod>2026-09-11</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/langflow-credential-probing-c2/</loc><lastmod>2026-09-01</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/anthropic-infostealer-session-theft/</loc><lastmod>2026-08-31</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/nemoclaw-ollama-exposure/</loc><lastmod>2026-08-25</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/copilot-cosnitch/</loc><lastmod>2026-08-18</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/claude-agents-self-replicating-malware/</loc><lastmod>2026-08-17</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/near-autonomous-attack-taiwan/</loc><lastmod>2026-08-19</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/litellm-trivy-supply-chain/</loc><lastmod>2026-08-27</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/reasoning-trace-replay/</loc><lastmod>2026-08-12</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/openclaw-gym-booking-bypass/</loc><lastmod>2026-08-26</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/atlassian-rovo-data-exfiltration/</loc><lastmod>2026-08-08</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/meta-muse-spark-attacked-company/</loc><lastmod>2026-08-06</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/irregular-eval-sandbox-escapes/</loc><lastmod>2026-08-17</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/uk-aisi-unsanctioned-agent-behaviour/</loc><lastmod>2026-08-05</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/langflow-rce-actively-exploited/</loc><lastmod>2026-08-05</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/google-adk-agent-privilege-escalation/</loc><lastmod>2026-08-05</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/chaindrop-npm-worm/</loc><lastmod>2026-08-04</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/deepseek-telegram-autonomous-campaign/</loc><lastmod>2026-08-03</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/anthropic-models-breached-three-companies/</loc><lastmod>2026-07-31</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/ruflo-mcp-unauthenticated-rce/</loc><lastmod>2026-07-29</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/copilot-word-prompt-injection-worm/</loc><lastmod>2026-07-30</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/pleasefix-agentic-browsers/</loc><lastmod>2026-08-05</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/hermes-agent-thai-finance-ministry/</loc><lastmod>2026-07-28</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/openai-models-breach-hugging-face/</loc><lastmod>2026-09-15</lastmod></url>
  <url><loc>https://thepermissionlayer.com/incidents/aws-kiro-config-rewrite/</loc><lastmod>2026-07-21</lastmod></url>
  <url><loc>https://thepermissionlayer.com/reports/</loc></url>
  <url><loc>https://thepermissionlayer.com/reports/2026-q3-agent-incidents/</loc><lastmod>2026-10-14</lastmod></url>
  <url><loc>https://thepermissionlayer.com/map/</loc><lastmod>2026-10-20</lastmod></url>
  <url><loc>https://thepermissionlayer.com/launches/</loc><lastmod>2026-10-22</lastmod></url>
  <url><loc>https://thepermissionlayer.com/tools/</loc><lastmod>2026-10-20</lastmod></url>
  <url><loc>https://thepermissionlayer.com/tools/agent-identity-nhi/</loc><lastmod>2026-10-20</lastmod></url>
  <url><loc>https://thepermissionlayer.com/tools/mcp-security-gateways/</loc><lastmod>2026-10-20</lastmod></url>
  <url><loc>https://thepermissionlayer.com/tools/ai-security-platforms/</loc><lastmod>2026-10-20</lastmod></url>
  <url><loc>https://thepermissionlayer.com/tools/offensive-testing/</loc><lastmod>2026-10-20</lastmod></url>
  <url><loc>https://thepermissionlayer.com/tools/exposure-mgmt/</loc><lastmod>2026-10-20</lastmod></url>
  <url><loc>https://thepermissionlayer.com/tools/llm-gateways-spend/</loc><lastmod>2026-10-20</lastmod></url>
  <url><loc>https://thepermissionlayer.com/tools/agent-observability/</loc><lastmod>2026-10-20</lastmod></url>
  <url><loc>https://thepermissionlayer.com/tools/data-flow-dlp/</loc><lastmod>2026-10-20</lastmod></url>
  <url><loc>https://thepermissionlayer.com/tools/shadow-ai-discovery/</loc><lastmod>2026-10-20</lastmod></url>
  <url><loc>https://thepermissionlayer.com/tools/ai-grc-compliance/</loc><lastmod>2026-10-20</lastmod></url>
  <url><loc>https://thepermissionlayer.com/tools/agent-sandboxing/</loc><lastmod>2026-10-20</lastmod></url>
  <url><loc>https://thepermissionlayer.com/tools/agent-payments/</loc><lastmod>2026-10-20</lastmod></url>
  <url><loc>https://thepermissionlayer.com/tools/platform-giants/</loc><lastmod>2026-10-20</lastmod></url>
  <url><loc>https://thepermissionlayer.com/archive/</loc><lastmod>2026-10-23</lastmod></url>
  <url><loc>https://thepermissionlayer.com/archive/issue-3/</loc><lastmod>2026-10-23</lastmod></url>
  <url><loc>https://thepermissionlayer.com/archive/issue-2/</loc><lastmod>2026-10-20</lastmod></url>
  <url><loc>https://thepermissionlayer.com/archive/issue-1/</loc><lastmod>2026-10-14</lastmod></url>
  <url><loc>https://thepermissionlayer.com/archive/issue-0/</loc><lastmod>2026-07-24</lastmod></url>
  <url><loc>https://thepermissionlayer.com/learn/</loc></url>
  <url><loc>https://thepermissionlayer.com/learn/agent-escape-arc-2026/</loc></url>
  <url><loc>https://thepermissionlayer.com/learn/agent-identity-and-nhi/</loc></url>
  <url><loc>https://thepermissionlayer.com/learn/agent-incident-practices-nist-nsa-cisa/</loc><lastmod>2026-10-20</lastmod></url>
  <url><loc>https://thepermissionlayer.com/learn/agent-plugin-supply-chain/</loc></url>
  <url><loc>https://thepermissionlayer.com/learn/aivss-explained/</loc></url>
  <url><loc>https://thepermissionlayer.com/learn/llm-gateways-and-spend/</loc></url>
  <url><loc>https://thepermissionlayer.com/learn/owasp-agent-control-standard/</loc></url>
  <url><loc>https://thepermissionlayer.com/learn/rbac-for-ai-agents/</loc></url>
  <url><loc>https://thepermissionlayer.com/learn/shadow-ai/</loc></url>
  <url><loc>https://thepermissionlayer.com/learn/what-is-an-mcp-gateway/</loc></url>
  <url><loc>https://thepermissionlayer.com/questions/</loc></url>
  <url><loc>https://thepermissionlayer.com/sponsor/</loc></url>
  <url><loc>https://thepermissionlayer.com/policy/</loc></url>
</urlset>
