<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
<url>
<loc>https://ai-incident-observatory.com/</loc>
<lastmod>2026-08-11T13:20:57.110Z</lastmod>
<changefreq>daily</changefreq>
<priority>1</priority>
</url>
<url>
<loc>https://ai-incident-observatory.com/occurrences</loc>
<lastmod>2026-08-11T13:20:57.110Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://ai-incident-observatory.com/patterns</loc>
<lastmod>2026-08-11T13:20:57.110Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://ai-incident-observatory.com/glossary</loc>
<lastmod>2026-08-11T13:20:57.110Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://ai-incident-observatory.com/methodology</loc>
<lastmod>2026-08-11T13:20:57.110Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://ai-incident-observatory.com/occurrences/claude-desktop-claude-url-scheme-prompt-injection-enables-silent-unauthorized-ac-2026-08</loc>
<lastmod>2026-08-11T13:20:57.110Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://ai-incident-observatory.com/occurrences/hugging-face-breach-autonomous-agent-exploited-data-pipeline-rce-to-steal-cloud-2026-08</loc>
<lastmod>2026-08-11T13:20:57.110Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://ai-incident-observatory.com/occurrences/agentforge-vulnerability-lets-phishing-email-plant-rogue-agent-in-chatgpt-worksp-2026-08</loc>
<lastmod>2026-08-11T13:20:57.110Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://ai-incident-observatory.com/occurrences/jadepuffer-ransomware-used-ai-agent-to-automate-attack-2026-07</loc>
<lastmod>2026-08-11T13:20:57.110Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://ai-incident-observatory.com/occurrences/anthropic-claude-code-covertly-tracked-users-china-location-and-ai-lab-affiliati-2026-07</loc>
<lastmod>2026-08-11T13:20:57.110Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://ai-incident-observatory.com/occurrences/clean-github-repo-tricks-ai-coding-agents-into-running-malware-2026-07</loc>
<lastmod>2026-08-11T13:20:57.110Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://ai-incident-observatory.com/occurrences/prompt-injection-as-role-confusion-2026-07</loc>
<lastmod>2026-08-11T13:20:57.110Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://ai-incident-observatory.com/occurrences/cline-issue-triage-prompt-injection-2026-02</loc>
<lastmod>2026-08-11T13:20:57.110Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://ai-incident-observatory.com/occurrences/openclaw-malicious-skills-2026-02</loc>
<lastmod>2026-08-11T13:20:57.110Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://ai-incident-observatory.com/occurrences/moltbook-agent-takeover-and-token-exposure-2026-02</loc>
<lastmod>2026-08-11T13:20:57.110Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://ai-incident-observatory.com/occurrences/m365-copilot-echoleak-zero-click-exfiltration-2025-09</loc>
<lastmod>2026-08-11T13:20:57.110Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://ai-incident-observatory.com/occurrences/gemini-cross-tool-prompt-injection-2025-08</loc>
<lastmod>2026-08-11T13:20:57.110Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://ai-incident-observatory.com/patterns/chain-of-thought-role-spoofing-enables-prompt-injection-via-unauthenticated-role</loc>
<lastmod>2026-08-11T13:20:57.110Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://ai-incident-observatory.com/patterns/issue-content-prompt-injection-into-release-tooling</loc>
<lastmod>2026-08-11T13:20:57.110Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://ai-incident-observatory.com/patterns/malicious-agent-skill-marketplace-supply-chain</loc>
<lastmod>2026-08-11T13:20:57.110Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://ai-incident-observatory.com/patterns/phishing-triggered-rogue-agent-provisioning-enables-connected-account-takeover-i</loc>
<lastmod>2026-08-11T13:20:57.110Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://ai-incident-observatory.com/patterns/autonomous-ai-agent-orchestrates-full-ransomware-attack-chain-after-initial-expl</loc>
<lastmod>2026-08-11T13:20:57.110Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://ai-incident-observatory.com/patterns/malicious-url-schemes-trigger-unconfirmed-prompt-execution-in-desktop-ai-assista</loc>
<lastmod>2026-08-11T13:20:57.110Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://ai-incident-observatory.com/patterns/malicious-repository-content-exploits-ai-coding-agent-s-automatic-error-recovery</loc>
<lastmod>2026-08-11T13:20:57.110Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://ai-incident-observatory.com/patterns/agent-platform-misconfiguration-enables-token-exposure-and-takeover</loc>
<lastmod>2026-08-11T13:20:57.110Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://ai-incident-observatory.com/patterns/indirect-prompt-injection-into-connected-productivity-actions</loc>
<lastmod>2026-08-11T13:20:57.110Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
</urlset>
