<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
<url><loc>https://agentstateattack.com/</loc></url>
<url><loc>https://agentstateattack.com/blog</loc></url>
<url><loc>https://agentstateattack.com/about</loc></url>
<url><loc>https://agentstateattack.com/pillars</loc></url>
<url><loc>https://agentstateattack.com/pillars/definitions</loc></url>
<url><loc>https://agentstateattack.com/pillars/state-surfaces</loc></url>
<url><loc>https://agentstateattack.com/pillars/detection</loc></url>
<url><loc>https://agentstateattack.com/pillars/defenses</loc></url>
<url><loc>https://agentstateattack.com/pillars/evidence-mappings</loc></url>
<url><loc>https://agentstateattack.com/blog/agent-plan-poisoning-task-list-state</loc><lastmod>2026-09-12T00:01:07.969Z</lastmod></url>
<url><loc>https://agentstateattack.com/blog/agentic-browser-session-hijacking-authenticated-state</loc><lastmod>2026-09-09T00:00:43.399Z</lastmod></url>
<url><loc>https://agentstateattack.com/blog/sandbox-configuration-escape-agent-execution-environment</loc><lastmod>2026-09-05T00:00:35.021Z</lastmod></url>
<url><loc>https://agentstateattack.com/blog/rag-poisoning-vector-store-context-injection</loc><lastmod>2026-09-04T12:56:35.050Z</lastmod></url>
<url><loc>https://agentstateattack.com/blog/defending-agent-state-cross-surface-control-model</loc><lastmod>2026-09-04T12:53:35.049Z</lastmod></url>
<url><loc>https://agentstateattack.com/blog/detecting-agent-state-attacks-cross-surface-telemetry</loc><lastmod>2026-09-04T12:50:35.065Z</lastmod></url>
<url><loc>https://agentstateattack.com/blog/mcp-tool-poisoning-agent-tool-state</loc><lastmod>2026-09-04T12:47:35.008Z</lastmod></url>
<url><loc>https://agentstateattack.com/blog/shared-state-poisoning-multi-agent-systems</loc><lastmod>2026-09-04T12:46:34.969Z</lastmod></url>
<url><loc>https://agentstateattack.com/blog/slopsquatting-hallucinated-packages-agent-generated-artifacts</loc><lastmod>2026-08-22T09:00:32.085Z</lastmod></url>
<url><loc>https://agentstateattack.com/blog/instruction-file-poisoning-agent-configuration-files</loc><lastmod>2026-08-15T09:00:39.622Z</lastmod></url>
<url><loc>https://agentstateattack.com/blog/persistent-memory-injection-agent-memory-tools</loc><lastmod>2026-08-12T09:00:40.032Z</lastmod></url>
<url><loc>https://agentstateattack.com/blog/owasp-agentic-mitre-atlas-crosswalk</loc><lastmod>2026-07-30T00:01:09.243Z</lastmod></url>
<url><loc>https://agentstateattack.com/blog/compromised-summaries-context-compaction</loc><lastmod>2026-07-30T00:01:05.794Z</lastmod></url>
<url><loc>https://agentstateattack.com/blog/agent-state-attack</loc><lastmod>2026-07-30T00:01:02.354Z</lastmod></url>
</urlset>