<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
<url>
<loc>https://threatpaper.com</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>daily</changefreq>
<priority>1</priority>
</url>
<url>
<loc>https://threatpaper.com/categories</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://threatpaper.com/tags</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatpaper.com/authors</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://threatpaper.com/about</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://threatpaper.com/contribute</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://threatpaper.com/claims</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://threatpaper.com/methodology</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://threatpaper.com/corrections</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://threatpaper.com/contributors</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://threatpaper.com/privacy</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.3</priority>
</url>
<url>
<loc>https://threatpaper.com/terms</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.3</priority>
</url>
<url>
<loc>https://threatpaper.com/search</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://threatpaper.com/rss.xml</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://threatpaper.com/cases/virtualizor-supply-chain-compromise-33-hours-of-hijacked-routes-and-unsigned-updates</loc>
<lastmod>2026-09-02T15:35:27.711Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://threatpaper.com/cases/polyfill-io-how-a-cdn-acquisition-backdoored-hundreds-of-thousands-of-sites</loc>
<lastmod>2026-09-02T14:27:24.268Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://threatpaper.com/cases/event-stream-the-npm-maintainer-handover-that-backdoored-a-bitcoin-wallet</loc>
<lastmod>2026-09-02T13:55:17.718Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://threatpaper.com/cases/codecov-bash-uploader-compromise-60-days-of-silent-ci-credential-theft</loc>
<lastmod>2026-09-02T13:23:12.698Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://threatpaper.com/cases/3cx-supply-chain-attack-cve-2023-29059-the-first-cascading-software-compromise</loc>
<lastmod>2026-09-02T09:40:01.017Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://threatpaper.com/cases/capital-one-data-breach-2019</loc>
<lastmod>2026-08-29T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://threatpaper.com/cases/redline-infostealer-malware-as-a-service-operation-and-operation-magnu</loc>
<lastmod>2026-08-29T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://threatpaper.com/cases/chinese-state-sponsored-qtfy-campaign-disruption-of-qscan-and-qtrouter</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://threatpaper.com/cases/shinyhunters-salesforce-data-extortion-and-saas-supply-chain-campaign</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://threatpaper.com/cases/operational-disruption-at-a-united-kingdom-peaker-plant-via-iranian-li</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://threatpaper.com/cases/chaindrop-and-the-shai-hulud-lineage-anatomy-of-a-self-propagating-npm</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://threatpaper.com/cases/openai-autonomous-ai-agent-breach-of-hugging-face-production-infrastru</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://threatpaper.com/cases/dismantling-ketamelon-darknet-narcotics-syndicate-takedown</loc>
<lastmod>2026-08-24T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://threatpaper.com/cases/klue-supply-chain-compromise-and-downstream-salesforce-data-exfiltrati</loc>
<lastmod>2026-08-24T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://threatpaper.com/cases/rust-ecosystem-supply-chain-attack-targeting-arrayref</loc>
<lastmod>2026-08-23T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://threatpaper.com/cases/cyberleek-gta-vi-leak</loc>
<lastmod>2026-08-23T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://threatpaper.com/cases/apollo-global-management-cloud-data-breach-via-voice-phishing</loc>
<lastmod>2026-08-23T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://threatpaper.com/cases/india-orders-google-firebase-fraud-takedown</loc>
<lastmod>2026-08-21T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://threatpaper.com/cases/github-actions-supply-chain-compromise-tj-actions-changed-files-cve-2025-30066</loc>
<lastmod>2025-03-15T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://threatpaper.com/cases/cdk-global-ransomware-black-suit-auto-dealership-disruption</loc>
<lastmod>2024-06-19T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://threatpaper.com/cases/snowflake-data-theft-campaign-unc5537-credential-stuffing-extortion</loc>
<lastmod>2024-06-10T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://threatpaper.com/cases/xz-utils-supply-chain-backdoor-cve-2024-3094</loc>
<lastmod>2024-03-29T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://threatpaper.com/cases/change-healthcare-optum-ransomware-alphv-blackcat-healthcare-payment-disruption</loc>
<lastmod>2024-02-21T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://threatpaper.com/cases/volt-typhoon-prc-pre-positioning-us-critical-infrastructure</loc>
<lastmod>2024-02-07T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://threatpaper.com/cases/midnight-blizzard-apt29-microsoft-corporate-breach</loc>
<lastmod>2024-01-19T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://threatpaper.com/cases/ivanti-connect-secure-mass-exploitation-cve-2024-21893-cve-2024-21887-chinese-apt</loc>
<lastmod>2024-01-11T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://threatpaper.com/claims/virtualizor-handful-of-servers</loc>
<lastmod>2026-09-02T15:34:51.542Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatpaper.com/claims/polyfill-us-sanctions-over-attack</loc>
<lastmod>2026-09-02T14:25:50.772Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatpaper.com/claims/polyfill-funnull-acquired-july-2024</loc>
<lastmod>2026-09-02T14:25:50.726Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatpaper.com/claims/polyfill-100000-sites-affected</loc>
<lastmod>2026-09-02T14:25:50.683Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatpaper.com/claims/event-stream-8-million-downloads</loc>
<lastmod>2026-09-02T13:54:38.519Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatpaper.com/claims/copay-private-keys-stolen</loc>
<lastmod>2026-09-02T13:54:38.468Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatpaper.com/claims/codecov-hundreds-of-networks-breached</loc>
<lastmod>2026-09-02T13:22:18.833Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatpaper.com/claims/codecov-attackers-replaced-ip-address</loc>
<lastmod>2026-09-02T13:22:18.760Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatpaper.com/claims/xz-jia-tan-timezone-location</loc>
<lastmod>2026-09-02T11:12:44.238Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatpaper.com/claims/3cx-apt43-infrastructure-overlap</loc>
<lastmod>2026-09-02T11:05:17.401Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatpaper.com/claims/3cx-600000-businesses-at-risk</loc>
<lastmod>2026-09-02T11:05:17.401Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatpaper.com/claims/3cx-macos-simplesea-poolrat</loc>
<lastmod>2026-09-02T10:34:01.365Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatpaper.com/claims/3cx-north-korea-attribution-confirmed</loc>
<lastmod>2026-09-02T10:34:01.324Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatpaper.com/page/2</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.3</priority>
</url>
<url>
<loc>https://threatpaper.com/categories/data-breach</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://threatpaper.com/categories/ransomware</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://threatpaper.com/categories/financial-fraud</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://threatpaper.com/categories/state-sponsored</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://threatpaper.com/categories/social-engineering</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://threatpaper.com/categories/malware</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://threatpaper.com/categories/supply-chain-attack</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://threatpaper.com/categories/darknet-illicit-markets</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://threatpaper.com/categories/cryptocurrency-web3</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://threatpaper.com/categories/identity-theft</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://threatpaper.com/categories/extortion-blackmail</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://threatpaper.com/categories/ai-machine-learning</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://threatpaper.com/categories/ot-industrial-systems</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://threatpaper.com/tags/backdoor</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatpaper.com/tags/china</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatpaper.com/tags/ci-cd</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatpaper.com/tags/cloud-security</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatpaper.com/tags/code-signing</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatpaper.com/tags/credential-theft</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatpaper.com/tags/critical-infrastructure</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatpaper.com/tags/cryptocurrency</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatpaper.com/tags/data-breach</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatpaper.com/tags/dprk</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatpaper.com/tags/extortion</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatpaper.com/tags/github-actions</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatpaper.com/tags/india</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatpaper.com/tags/infostealer</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatpaper.com/tags/javascript</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatpaper.com/tags/law-enforcement</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatpaper.com/tags/nation-state</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatpaper.com/tags/npm</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatpaper.com/tags/open-source</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatpaper.com/tags/ot-security</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatpaper.com/tags/phishing</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatpaper.com/tags/ransomware</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatpaper.com/tags/saas</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatpaper.com/tags/salesforce</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatpaper.com/tags/secret-exfiltration</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatpaper.com/tags/shinyhunters</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatpaper.com/tags/social-engineering</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatpaper.com/tags/supply-chain</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatpaper.com/tags/unattributed</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://threatpaper.com/tags/vishing</loc>
<lastmod>2026-09-02T22:00:22.848Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
</urlset>
