<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="//secto.io/blog/sitemap.xsl"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:image="http://www.google.com/schemas/sitemap-image/1.1"><url><loc>https://secto.io/blog/why-ip-based-filtering-is-no-longer-enough/</loc><lastmod>2026-08-30T04:44:57.000Z</lastmod><image:image><image:loc>https://secto.io/blog/content/images/migration/ip-filtering-hero.svg</image:loc><image:caption>ip-filtering-hero.svg</image:caption></image:image></url><url><loc>https://secto.io/blog/the-email-from-yourself-when-routing-mistakes-make-phishing-look-internal/</loc><lastmod>2026-08-30T04:44:49.000Z</lastmod><image:image><image:loc>https://secto.io/blog/content/images/migration/internal-spoof-routing-hero.png</image:loc><image:caption>internal-spoof-routing-hero.png</image:caption></image:image></url><url><loc>https://secto.io/blog/the-teams-invite-that-wants-a-phone-call/</loc><lastmod>2026-08-30T04:44:20.000Z</lastmod><image:image><image:loc>https://secto.io/blog/content/images/migration/teams-callback-invite-hero.png</image:loc><image:caption>teams-callback-invite-hero.png</image:caption></image:image></url><url><loc>https://secto.io/blog/konni-blockchain-lures-and-the-developer-as-a-phishing-target/</loc><lastmod>2026-08-30T04:44:17.000Z</lastmod><image:image><image:loc>https://secto.io/blog/content/images/migration/developer-blockchain-phish-hero.png</image:loc><image:caption>developer-blockchain-phish-hero.png</image:caption></image:image></url><url><loc>https://secto.io/blog/w3llstore-is-gone-the-phishing-marketplace-model-is-not/</loc><lastmod>2026-08-30T04:44:13.000Z</lastmod><image:image><image:loc>https://secto.io/blog/content/images/migration/w3ll-phishing-marketplace-hero.png</image:loc><image:caption>w3ll-phishing-marketplace-hero.png</image:caption></image:image></url><url><loc>https://secto.io/blog/payroll-pirate-phishing-when-search-ads-lead-to-stolen-salaries/</loc><lastmod>2026-08-30T04:44:05.000Z</lastmod><image:image><image:loc>https://secto.io/blog/content/images/migration/payroll-pirate-canada-hero.png</image:loc><image:caption>payroll-pirate-canada-hero.png</image:caption></image:image></url><url><loc>https://secto.io/blog/venom-and-the-qr-code-that-was-not-an-image/</loc><lastmod>2026-08-30T04:44:02.000Z</lastmod><image:image><image:loc>https://secto.io/blog/content/images/migration/venom-executive-qr-hero.png</image:loc><image:caption>venom-executive-qr-hero.png</image:caption></image:image></url><url><loc>https://secto.io/blog/device-code-phishing-after-eviltoken/</loc><lastmod>2026-08-30T04:43:54.000Z</lastmod><image:image><image:loc>https://secto.io/blog/content/images/migration/eviltoken-device-code-hero.png</image:loc><image:caption>eviltoken-device-code-hero.png</image:caption></image:image></url><url><loc>https://secto.io/blog/tycoon2fa-is-down-the-session-theft-problem-is-not/</loc><lastmod>2026-08-30T04:43:50.000Z</lastmod><image:image><image:loc>https://secto.io/blog/content/images/migration/tycoon2fa-hero.png</image:loc><image:caption>tycoon2fa-hero.png</image:caption></image:image></url><url><loc>https://secto.io/blog/ta416-new-delivery-chains-state-phishing-that-tracks-the-news-cycle/</loc><lastmod>2026-08-30T04:43:46.000Z</lastmod><image:image><image:loc>https://secto.io/blog/content/images/migration/ta416-hero.png</image:loc><image:caption>ta416-hero.png</image:caption></image:image></url><url><loc>https://secto.io/blog/ghostframe-and-the-failure-of-html-only-phishing-detection/</loc><lastmod>2026-08-30T04:43:42.000Z</lastmod><image:image><image:loc>https://secto.io/blog/content/images/migration/ghostframe-hero.png</image:loc><image:caption>ghostframe-hero.png</image:caption></image:image></url><url><loc>https://secto.io/blog/genai-cloned-login-pages-and-the-30-second-phish/</loc><lastmod>2026-08-30T04:43:38.000Z</lastmod><image:image><image:loc>https://secto.io/blog/content/images/migration/genai-hero.png</image:loc><image:caption>genai-hero.png</image:caption></image:image></url><url><loc>https://secto.io/blog/adversary-in-the-middle-aitm-mfa-bypass-threat/</loc><lastmod>2026-08-30T04:43:22.000Z</lastmod><image:image><image:loc>https://secto.io/blog/content/images/migration/AiTM.png</image:loc><image:caption>AiTM.png</image:caption></image:image></url><url><loc>https://secto.io/blog/direct-send-blind-spot-phish-reach-microsoft-365-without-seg/</loc><lastmod>2026-08-30T04:39:07.000Z</lastmod><image:image><image:loc>https://secto.io/blog/content/images/migration/directsendblog3.jpeg</image:loc><image:caption>directsendblog3.jpeg</image:caption></image:image></url><url><loc>https://secto.io/blog/executing-adversary-in-the-middle-aitm-okta-flows-how-secto-stops-it/</loc><lastmod>2026-08-30T04:38:15.000Z</lastmod><image:image><image:loc>https://secto.io/blog/content/images/migration/oktaLogin.png</image:loc><image:caption>oktaLogin.png</image:caption></image:image></url><url><loc>https://secto.io/blog/clickfix-trap-how-attackers-trick-users-into-hacking-themselves/</loc><lastmod>2026-08-30T04:37:20.000Z</lastmod><image:image><image:loc>https://secto.io/blog/content/images/migration/clickfix-hero.jpg</image:loc><image:caption>clickfix-hero.jpg</image:caption></image:image></url><url><loc>https://secto.io/blog/beyond-email-gateway-why-inbox-is-wrong-place-to-fight-phishing/</loc><lastmod>2026-08-30T04:36:02.000Z</lastmod><image:image><image:loc>https://secto.io/blog/content/images/migration/email-gateway-hero.jpg</image:loc><image:caption>email-gateway-hero.jpg</image:caption></image:image></url><url><loc>https://secto.io/blog/browser-in-the-middle-vs-attacker-in-the-middle-understanding-aitm-bitm/</loc><lastmod>2026-08-30T04:35:11.000Z</lastmod><image:image><image:loc>https://secto.io/blog/content/images/migration/aitm-bitm-comparison.jpg</image:loc><image:caption>aitm-bitm-comparison.jpg</image:caption></image:image></url><url><loc>https://secto.io/blog/trusted-redirects-oauth-as-a-phishing-handoff/</loc><lastmod>2026-08-30T04:33:48.000Z</lastmod><image:image><image:loc>https://secto.io/blog/content/images/migration/oauth-handoff-hero.png</image:loc><image:caption>oauth-handoff-hero.png</image:caption></image:image></url><url><loc>https://secto.io/blog/why-secure-web-gateways-miss-modern-browser-attacks/</loc><lastmod>2026-08-30T00:51:00.000Z</lastmod><image:image><image:loc>https://secto.io/blog/content/images/migration/swg-browser-gap-hero.svg</image:loc><image:caption>swg-browser-gap-hero.svg</image:caption></image:image></url></urlset>