<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
<url>
<loc>https://cloudsecuritydesk.com/</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/topics</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/methodology</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/editorial-policy</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/corrections</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/about</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications?page=2</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications?page=3</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/qwen38-flash-next-glm53-flash-architecture</loc>
<lastmod>2026-08-26T19:38:21.279Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/the-permission-path</loc>
<lastmod>2026-08-15T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/cloud-logs-that-never-arrive</loc>
<lastmod>2026-08-07T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/when-static-keys-disappear</loc>
<lastmod>2026-07-30T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/kubernetes-detection-gaps</loc>
<lastmod>2026-07-21T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/threat-modeling-ai-workloads</loc>
<lastmod>2026-07-14T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/control-plane-recovery</loc>
<lastmod>2026-07-03T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/database-safe-application-rollback</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/private-ai-endpoint-data-paths</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/azure-storage-private-endpoint-validation</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/azure-activity-resource-log-evidence</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/google-service-account-impersonation-hops</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/retry-amplification-and-idempotency</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/ai-prompt-logging-boundaries</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/aws-lambda-reuse-tenant-data</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/guardduty-runtime-resource-coverage</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/aws-scp-rcp-principal-resource-guardrails</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/backup-encryption-key-recovery</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/agent-tool-policy-boundaries</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/container-image-digest-provenance-verification</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/google-audit-log-coverage-retention</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/entra-app-consent-authority-review</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/regional-failover-static-stability</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/model-artifact-supply-chain</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/ec2-imdsv2-container-migration</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/entra-application-grants-signin-investigation</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/entra-pim-activation-expiry-evidence</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/application-restore-validation</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/mcp-resource-bound-authorization</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/kubernetes-networkpolicy-egress-tests</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/cloudtrail-digest-validation-evidence</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/revoke-existing-aws-role-sessions</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/backup-isolation-and-retention-locks</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/rag-document-permissions</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/kubernetes-pod-security-admission-rollout</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/s3-object-event-selector-evidence</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/github-oidc-deployment-trust-boundaries</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/enterprise-passkey-deployment-recovery</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/multicloud-workload-federation-token-boundaries</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/kev-cloud-vulnerability-patch-queue</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/kubernetes-tenant-isolation-architecture</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/ai-security-evaluation-release-gates</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/cloud-recovery-objective-design</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/entra-emergency-access-recovery-validation</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/cloud-forensic-volatile-evidence</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/application-secret-rotation-reload</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/coding-benchmark-evidence-limits</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/sqs-dead-letter-redrive-safety</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/entra-application-certificate-rotation</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/sigma-detection-backend-validation</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/ssrf-outbound-fetch-boundaries</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/fine-tuning-data-poisoning-controls</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/error-budgets-controlled-degradation</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/ssh-certificate-access-lifecycle</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/cloud-incident-severity-decisions</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/sbom-vex-vulnerability-triage</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/ai-inference-resource-budgets</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/tls-certificate-renewal-lifecycle</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/scim-offboarding-application-access</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/opentelemetry-collector-evidence-trust</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/hybrid-post-quantum-tls-rollout</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/ai-incident-evidence-reporting</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/ddos-bottleneck-response-planning</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/attack-cloud-detection-strategies</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/aws-kms-envelope-encryption-boundaries</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/model-output-validation-boundaries</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/publications/dns-failover-cache-boundaries</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/topics/identity-access</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/topics/detection-response</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/topics/workload-security</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/topics/ai-systems</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://cloudsecuritydesk.com/topics/resilience</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
</url>
</urlset>
