<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url><loc>https://legacymfa.sucks/</loc><priority>1.0</priority><changefreq>daily</changefreq></url>
  <url><loc>https://legacymfa.sucks/posts/2026-08-04-ieh-m365-mailbox-phished-via-fake-login-page.html</loc><lastmod>2026-08-31</lastmod><priority>0.8</priority><changefreq>monthly</changefreq></url>
  <url><loc>https://legacymfa.sucks/posts/2026-08-10-gunra-fortinet-vpn-and-vdi-otp-backdoor-ttps.html</loc><lastmod>2026-08-31</lastmod><priority>0.8</priority><changefreq>monthly</changefreq></url>
  <url><loc>https://legacymfa.sucks/posts/2026-08-17-dgfip-breach-usurped-agent-and-third-party-logins-exposed.html</loc><lastmod>2026-02-18</lastmod><priority>0.8</priority><changefreq>weekly</changefreq></url>
  <url><loc>https://legacymfa.sucks/posts/2026-08-17-thehatman-lists-364m-entra-employee-dumps-tcs-filing-names.html</loc><lastmod>2026-08-31</lastmod><priority>0.8</priority><changefreq>monthly</changefreq></url>
  <url><loc>https://legacymfa.sucks/posts/2026-08-06-unc6671-vishing-stole-hedge-fund-mfa-sessions.html</loc><lastmod>2026-08-22</lastmod><priority>0.8</priority><changefreq>monthly</changefreq></url>
  <url><loc>https://legacymfa.sucks/posts/2026-08-07-five-week-vishing-harvested-mfa-codes-at-200-orgs.html</loc><lastmod>2026-08-28</lastmod><priority>0.8</priority><changefreq>weekly</changefreq></url>
  <url><loc>https://legacymfa.sucks/posts/2026-08-18-mirage2fa-aitm-stole-m365-mfa-and-session-cookies.html</loc><lastmod>2026-08-20</lastmod><priority>0.8</priority><changefreq>monthly</changefreq></url>
  <url><loc>https://legacymfa.sucks/posts/2026-08-06-payroll-pirates-aitm-users-finished-mfa-attackers-still.html</loc><lastmod>2026-08-18</lastmod><priority>0.8</priority><changefreq>weekly</changefreq></url>
  <url><loc>https://legacymfa.sucks/posts/2026-08-14-how-aitm-phishing-captured-a-live-microsoft-365-session-and.html</loc><lastmod>2026-08-17</lastmod><priority>0.8</priority><changefreq>monthly</changefreq></url>
  <url><loc>https://legacymfa.sucks/posts/2026-07-27-how-a-weak-employee-email-password-led-to-mass-file-theft.html</loc><lastmod>2026-08-12</lastmod><priority>0.8</priority><changefreq>monthly</changefreq></url>
  <url><loc>https://legacymfa.sucks/posts/2026-08-04-greatness-phaas-stole-mfa-approved-microsoft-365-tokens-via.html</loc><lastmod>2026-08-12</lastmod><priority>0.8</priority><changefreq>monthly</changefreq></url>
</urlset>
