<?xml version="1.0" encoding="UTF-8"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9" xmlns:xhtml="http://www.w3.org/1999/xhtml" xmlns:image="http://www.google.com/schemas/sitemap-image/1.1" xmlns:video="http://www.google.com/schemas/sitemap-video/1.1"><url><loc>https://thecyberinstructor.substack.com/archive</loc><changefreq>daily</changefreq></url><url><loc>https://thecyberinstructor.substack.com/about</loc><changefreq>weekly</changefreq></url><url><loc>https://thecyberinstructor.substack.com/p/the-myth-of-the-security-aware-employee</loc><lastmod>2026-05-27</lastmod><changefreq>monthly</changefreq></url><url><loc>https://thecyberinstructor.substack.com/p/why-soft-skills-are-the-new-hard</loc><lastmod>2026-05-20</lastmod><changefreq>monthly</changefreq></url><url><loc>https://thecyberinstructor.substack.com/p/the-department-of-no</loc><lastmod>2026-05-13</lastmod><changefreq>monthly</changefreq></url><url><loc>https://thecyberinstructor.substack.com/p/the-death-of-the-password</loc><lastmod>2026-04-15</lastmod><changefreq>monthly</changefreq></url><url><loc>https://thecyberinstructor.substack.com/p/zero-trust-is-a-strategy-not-a-product</loc><lastmod>2026-04-08</lastmod><changefreq>monthly</changefreq></url><url><loc>https://thecyberinstructor.substack.com/p/the-blameless-post-mortem</loc><lastmod>2026-04-01</lastmod><changefreq>monthly</changefreq></url><url><loc>https://thecyberinstructor.substack.com/p/roi-is-a-lie-measuring-the-value</loc><lastmod>2026-03-25</lastmod><changefreq>monthly</changefreq></url><url><loc>https://thecyberinstructor.substack.com/p/building-a-cybersecurity-program</loc><lastmod>2026-03-18</lastmod><changefreq>monthly</changefreq></url><url><loc>https://thecyberinstructor.substack.com/p/the-verified-output-rule-defending</loc><lastmod>2026-05-13</lastmod><changefreq>monthly</changefreq></url><url><loc>https://thecyberinstructor.substack.com/p/securing-the-shadow-ai-managing-token</loc><lastmod>2026-05-13</lastmod><changefreq>monthly</changefreq></url><url><loc>https://thecyberinstructor.substack.com/p/death-by-1000-exemptions</loc><lastmod>2026-05-13</lastmod><changefreq>monthly</changefreq></url><url><loc>https://thecyberinstructor.substack.com/p/transitioning-from-security-engineer</loc><lastmod>2026-05-13</lastmod><changefreq>monthly</changefreq></url><url><loc>https://thecyberinstructor.substack.com/p/the-sociology-of-incident-response</loc><lastmod>2026-05-13</lastmod><changefreq>monthly</changefreq></url><url><loc>https://thecyberinstructor.substack.com/p/navigating-rag-vulnerabilities</loc><lastmod>2026-05-13</lastmod><changefreq>monthly</changefreq></url><url><loc>https://thecyberinstructor.substack.com/p/signal-over-volume-the-engineering</loc><lastmod>2026-05-13</lastmod><changefreq>monthly</changefreq></url><url><loc>https://thecyberinstructor.substack.com/p/injecting-stress-into-executive-tabletop</loc><lastmod>2026-05-13</lastmod><changefreq>monthly</changefreq></url><url><loc>https://thecyberinstructor.substack.com/p/hardening-the-build-server-securing</loc><lastmod>2026-05-13</lastmod><changefreq>monthly</changefreq></url><url><loc>https://thecyberinstructor.substack.com/p/dlp-reality-check-stop-blocking-everything</loc><lastmod>2026-05-13</lastmod><changefreq>monthly</changefreq></url><url><loc>https://thecyberinstructor.substack.com/p/the-unloved-vulnerability-addressing</loc><lastmod>2026-05-13</lastmod><changefreq>monthly</changefreq></url><url><loc>https://thecyberinstructor.substack.com/p/why-mfa-isnt-enough-anymore</loc><lastmod>2026-05-13</lastmod><changefreq>monthly</changefreq></url><url><loc>https://thecyberinstructor.substack.com/p/the-8-words-that-cause-more-breaches</loc><lastmod>2026-05-13</lastmod><changefreq>monthly</changefreq></url><url><loc>https://thecyberinstructor.substack.com/p/biggest-black-friday-cybersecurity</loc><lastmod>2026-05-13</lastmod><changefreq>monthly</changefreq></url><url><loc>https://thecyberinstructor.substack.com/p/security-roadmaps-that-actually-work</loc><lastmod>2026-05-13</lastmod><changefreq>monthly</changefreq></url><url><loc>https://thecyberinstructor.substack.com/p/your-security-architecture-has-a</loc><lastmod>2026-05-13</lastmod><changefreq>monthly</changefreq></url><url><loc>https://thecyberinstructor.substack.com/p/security-debt-the-interest-you-keep</loc><lastmod>2026-05-13</lastmod><changefreq>monthly</changefreq></url><url><loc>https://thecyberinstructor.substack.com/p/the-human-patch-why-security-training</loc><lastmod>2026-05-13</lastmod><changefreq>monthly</changefreq></url><url><loc>https://thecyberinstructor.substack.com/p/interested-in-learning-cybersecurity</loc><lastmod>2026-05-13</lastmod><changefreq>monthly</changefreq></url><url><loc>https://thecyberinstructor.substack.com/p/ai-in-security-amplifier-or-amplified</loc><lastmod>2026-05-13</lastmod><changefreq>monthly</changefreq></url><url><loc>https://thecyberinstructor.substack.com/p/your-threat-model-is-stuck-in-2015</loc><lastmod>2026-05-13</lastmod><changefreq>monthly</changefreq></url><url><loc>https://thecyberinstructor.substack.com/p/shift-left-without-burning-bridges</loc><lastmod>2026-05-13</lastmod><changefreq>monthly</changefreq></url><url><loc>https://thecyberinstructor.substack.com/p/fom-gatekeeper-to-enabler</loc><lastmod>2026-05-13</lastmod><changefreq>monthly</changefreq></url><url><loc>https://thecyberinstructor.substack.com/p/defense-in-depth-or-complexity-in</loc><lastmod>2026-05-13</lastmod><changefreq>monthly</changefreq></url><url><loc>https://thecyberinstructor.substack.com/p/the-real-cost-of-free-security-tools</loc><lastmod>2026-05-13</lastmod><changefreq>monthly</changefreq></url><url><loc>https://thecyberinstructor.substack.com/p/your-tooling-stack-is-not-a-strategy</loc><lastmod>2026-05-13</lastmod><changefreq>monthly</changefreq></url><url><loc>https://thecyberinstructor.substack.com/p/incident-response-is-not-a-fire-drill</loc><lastmod>2026-05-13</lastmod><changefreq>monthly</changefreq></url><url><loc>https://thecyberinstructor.substack.com/p/the-case-of-security-controls</loc><lastmod>2026-05-13</lastmod><changefreq>monthly</changefreq></url><url><loc>https://thecyberinstructor.substack.com/p/announcing-the-coding-bootcamp-for</loc><lastmod>2026-05-13</lastmod><changefreq>monthly</changefreq></url><url><loc>https://thecyberinstructor.substack.com/p/what-cisos-are-whispering-about-behind</loc><lastmod>2026-05-13</lastmod><changefreq>monthly</changefreq></url><url><loc>https://thecyberinstructor.substack.com/p/the-false-sense-of-secure</loc><lastmod>2026-05-13</lastmod><changefreq>monthly</changefreq></url><url><loc>https://thecyberinstructor.substack.com/p/confessions-of-a-security-leader</loc><lastmod>2026-05-13</lastmod><changefreq>monthly</changefreq></url><url><loc>https://thecyberinstructor.substack.com/p/the-cybersecurity-stack-for-2025</loc><lastmod>2026-05-13</lastmod><changefreq>monthly</changefreq></url></urlset>