<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url><loc>https://www.infosec.mn/</loc><changefreq>weekly</changefreq><priority>1.0</priority></url>
  <url><loc>https://www.infosec.mn/blog/</loc><changefreq>daily</changefreq><priority>0.8</priority></url>
  <url><loc>https://www.infosec.mn/blog/post.html?slug=cve-2026-18577-n-able-n-centrals-incomplete-patch-and-the-third-party-risk-most-assessments-miss</loc><lastmod>2026-08-10</lastmod><changefreq>monthly</changefreq><priority>0.6</priority></url>
  <url><loc>https://www.infosec.mn/blog/post.html?slug=cve-2026-8037-and-cve-2025-68686-why-patching-your-fortinet-firewall-is-not-enough</loc><lastmod>2026-08-10</lastmod><changefreq>monthly</changefreq><priority>0.6</priority></url>
  <url><loc>https://www.infosec.mn/blog/post.html?slug=iso-270012022-statement-of-applicability-soa-a-practical-guide-to-selecting-and-excluding-controls</loc><lastmod>2026-02-25</lastmod><changefreq>monthly</changefreq><priority>0.6</priority></url>
  <url><loc>https://www.infosec.mn/blog/post.html?slug=why-every-mongolian-business-needs-pentest-2026</loc><lastmod>2026-02-26</lastmod><changefreq>monthly</changefreq><priority>0.6</priority></url>
  <url><loc>https://www.infosec.mn/blog/post.html?slug=understanding-pci-dss-4-what-changed</loc><lastmod>2026-02-26</lastmod><changefreq>monthly</changefreq><priority>0.6</priority></url>
  <url><loc>https://www.infosec.mn/blog/post.html?slug=top-5-cloud-security-mistakes-mongolian-companies</loc><lastmod>2026-02-26</lastmod><changefreq>monthly</changefreq><priority>0.6</priority></url>
  <url><loc>https://www.infosec.mn/blog/post.html?slug=how-we-stopped-2m-ransomware-attack-mongolian-bank</loc><lastmod>2026-02-26</lastmod><changefreq>monthly</changefreq><priority>0.6</priority></url>
</urlset>