<?xml version="1.0" encoding="UTF-8"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9" xmlns:xhtml="http://www.w3.org/1999/xhtml" xmlns:image="http://www.google.com/schemas/sitemap-image/1.1" xmlns:video="http://www.google.com/schemas/sitemap-video/1.1"><url><loc>https://mikeystrauss.com/</loc></url><url><loc>https://mikeystrauss.com/about/</loc></url><url><loc>https://mikeystrauss.com/posts/a-one-tap-token-drain-in-unstoppable-wallet-and-the-20-bug-bounty-it-earned/</loc></url><url><loc>https://mikeystrauss.com/posts/a-zero-day-in-androids-on-device-ai-any-app-can-open-a-door-to-gemini-nano/</loc></url><url><loc>https://mikeystrauss.com/posts/a-zero-day-in-androids-wi-fi-direct-any-app-can-steal-your-password-zero-permissions/</loc></url><url><loc>https://mikeystrauss.com/posts/a-zero-day-in-googles-confidential-computing-your-phone-can-be-fooled-into-trusting-a-fake-enclave/</loc></url><url><loc>https://mikeystrauss.com/posts/a-zero-day-screen-hijack-in-androids-tap-to-pay-the-grant-that-never-expires/</loc></url><url><loc>https://mikeystrauss.com/posts/a-zero-day-that-lets-any-app-rewrite-what-your-screen-reader-says/</loc></url><url><loc>https://mikeystrauss.com/posts/achieving-sp-800-190-continuous-container-compliance-with-scribe-security/</loc></url><url><loc>https://mikeystrauss.com/posts/adapting-cars-for-children-with-disabilities-the-gobabygo-core-build-kit/</loc></url><url><loc>https://mikeystrauss.com/posts/cyclonedx-dependency-graphs/</loc></url><url><loc>https://mikeystrauss.com/posts/from-chaos-to-clarity-how-to-secure-your-supply-chain-with-attestations/</loc></url><url><loc>https://mikeystrauss.com/posts/from-chaos-to-clarity-navigating-policy-engine-for-compliance/</loc></url><url><loc>https://mikeystrauss.com/posts/inclusive-hacking-ride-on-cars-to-empower-children-with-disabilities/</loc></url><url><loc>https://mikeystrauss.com/posts/making-firmware-verifiable-not-just-signed/</loc></url><url><loc>https://mikeystrauss.com/posts/max/</loc></url><url><loc>https://mikeystrauss.com/posts/navigating-the-cve-maze-reflections-on-challenges-in-software-vulnerability-management/</loc></url><url><loc>https://mikeystrauss.com/posts/part-2-risks-and-vulnerabilities-in-hardware-systems/</loc></url><url><loc>https://mikeystrauss.com/posts/proactive-pipeline-security-applying-the-owasp-top-10-ci-cd-risks-with-scribe/</loc></url><url><loc>https://mikeystrauss.com/posts/risks-and-vulnerabilities-in-hardware-systems-a-case-for-greater-awareness/</loc></url><url><loc>https://mikeystrauss.com/posts/slsa-compliance-at-scale-provenance-generation-with-scribe/</loc></url><url><loc>https://mikeystrauss.com/posts/your-dmv-can-trigger-an-out-of-bounds-read-inside-google-wallet/</loc></url><url><loc>https://mikeystrauss.com/writing/</loc></url></urlset>