https://www.security-threat.com/ 2026-07-05 weekly 1.0 https://www.security-threat.com/secure-authentication-session-architecture/ 2026-07-05 weekly 0.8 https://www.security-threat.com/secure-authentication-session-architecture/mfa-enforcement-patterns/ 2026-07-05 weekly 0.7 https://www.security-threat.com/secure-authentication-session-architecture/mfa-enforcement-patterns/implementing-webauthn-fido2-in-typescript/ 2026-07-05 weekly 0.6 https://www.security-threat.com/secure-authentication-session-architecture/mfa-enforcement-patterns/step-up-authentication-for-high-value-operations/ 2026-07-31 weekly 0.6 https://www.security-threat.com/secure-authentication-session-architecture/mfa-enforcement-patterns/totp-enrollment-and-verification-flow/ 2026-07-05 weekly 0.6 https://www.security-threat.com/secure-authentication-session-architecture/oauth2-oidc-implementation/ 2026-07-05 weekly 0.7 https://www.security-threat.com/secure-authentication-session-architecture/oauth2-oidc-implementation/pkce-authorization-code-flow-for-spas/ 2026-07-05 weekly 0.6 https://www.security-threat.com/secure-authentication-session-architecture/oauth2-oidc-implementation/validating-oidc-id-tokens-in-nodejs/ 2026-07-05 weekly 0.6 https://www.security-threat.com/secure-authentication-session-architecture/password-storage-and-credential-hygiene/ 2026-07-31 weekly 0.7 https://www.security-threat.com/secure-authentication-session-architecture/password-storage-and-credential-hygiene/argon2id-parameter-tuning/ 2026-07-31 weekly 0.6 https://www.security-threat.com/secure-authentication-session-architecture/password-storage-and-credential-hygiene/breached-password-screening-with-k-anonymity/ 2026-07-31 weekly 0.6 https://www.security-threat.com/secure-authentication-session-architecture/password-storage-and-credential-hygiene/password-reset-flows-that-resist-takeover/ 2026-07-31 weekly 0.6 https://www.security-threat.com/secure-authentication-session-architecture/session-fixation-prevention/ 2026-07-05 weekly 0.7 https://www.security-threat.com/secure-authentication-session-architecture/session-fixation-prevention/regenerating-session-ids-in-express/ 2026-07-05 weekly 0.6 https://www.security-threat.com/secure-authentication-session-architecture/session-fixation-prevention/session-revocation-and-logout-across-devices/ 2026-07-31 weekly 0.6 https://www.security-threat.com/secure-authentication-session-architecture/token-storage-patterns/ 2026-07-05 weekly 0.7 https://www.security-threat.com/secure-authentication-session-architecture/token-storage-patterns/binding-refresh-tokens-to-a-device/ 2026-07-31 weekly 0.6 https://www.security-threat.com/secure-authentication-session-architecture/token-storage-patterns/httponly-cookies-vs-localstorage-for-jwts/ 2026-07-05 weekly 0.6 https://www.security-threat.com/supply-chain-dependency-security/ 2026-07-05 weekly 0.8 https://www.security-threat.com/supply-chain-dependency-security/automated-dependency-updates-policy/ 2026-07-05 weekly 0.7 https://www.security-threat.com/supply-chain-dependency-security/automated-dependency-updates-policy/dependabot-auto-merge-policy-as-code/ 2026-07-05 weekly 0.6 https://www.security-threat.com/supply-chain-dependency-security/build-pipeline-hardening/ 2026-07-31 weekly 0.7 https://www.security-threat.com/supply-chain-dependency-security/build-pipeline-hardening/oidc-federation-instead-of-cloud-keys/ 2026-07-31 weekly 0.6 https://www.security-threat.com/supply-chain-dependency-security/build-pipeline-hardening/pinning-github-actions-to-a-commit-sha/ 2026-07-31 weekly 0.6 https://www.security-threat.com/supply-chain-dependency-security/build-pipeline-hardening/verifying-container-signatures-with-cosign/ 2026-07-31 weekly 0.6 https://www.security-threat.com/supply-chain-dependency-security/dependency-scanning-ci-gates/ 2026-07-05 weekly 0.7 https://www.security-threat.com/supply-chain-dependency-security/dependency-scanning-ci-gates/failing-npm-audit-builds-on-high-severity/ 2026-07-05 weekly 0.6 https://www.security-threat.com/supply-chain-dependency-security/dependency-scanning-ci-gates/gating-pip-audit-in-python-ci/ 2026-07-05 weekly 0.6 https://www.security-threat.com/supply-chain-dependency-security/software-bill-of-materials-sbom/ 2026-07-05 weekly 0.7 https://www.security-threat.com/supply-chain-dependency-security/software-bill-of-materials-sbom/generating-cyclonedx-sbom-in-github-actions/ 2026-07-05 weekly 0.6 https://www.security-threat.com/supply-chain-dependency-security/software-bill-of-materials-sbom/license-and-vex-gates-from-an-sbom/ 2026-07-31 weekly 0.6 https://www.security-threat.com/threat-modeling-fundamentals-methodology/ 2026-07-31 weekly 0.8 https://www.security-threat.com/threat-modeling-fundamentals-methodology/attack-surface-mapping-techniques/ 2026-06-21 weekly 0.7 https://www.security-threat.com/threat-modeling-fundamentals-methodology/attack-surface-mapping-techniques/automated-attack-surface-discovery-with-owasp-zap/ 2026-06-21 weekly 0.6 https://www.security-threat.com/threat-modeling-fundamentals-methodology/defining-trust-boundaries/ 2026-06-21 weekly 0.7 https://www.security-threat.com/threat-modeling-fundamentals-methodology/defining-trust-boundaries/mapping-trust-boundaries-in-cloud-native-apps/ 2026-07-31 weekly 0.6 https://www.security-threat.com/threat-modeling-fundamentals-methodology/security-requirements-and-abuse-cases/ 2026-07-31 weekly 0.7 https://www.security-threat.com/threat-modeling-fundamentals-methodology/security-requirements-and-abuse-cases/attack-trees-vs-stride-for-feature-design/ 2026-07-31 weekly 0.6 https://www.security-threat.com/threat-modeling-fundamentals-methodology/security-requirements-and-abuse-cases/security-acceptance-criteria-in-agile-tickets/ 2026-07-31 weekly 0.6 https://www.security-threat.com/threat-modeling-fundamentals-methodology/security-requirements-and-abuse-cases/writing-abuse-cases-for-user-stories/ 2026-07-31 weekly 0.6 https://www.security-threat.com/threat-modeling-fundamentals-methodology/stride-framework-implementation/ 2026-07-31 weekly 0.7 https://www.security-threat.com/threat-modeling-fundamentals-methodology/stride-framework-implementation/how-to-apply-stride-to-microservices-architecture/ 2026-06-21 weekly 0.6 https://www.security-threat.com/threat-modeling-fundamentals-methodology/threat-model-documentation-patterns/ 2026-06-21 weekly 0.7 https://www.security-threat.com/threat-modeling-fundamentals-methodology/threat-model-documentation-patterns/markdown-templates-for-agile-threat-modeling/ 2026-06-21 weekly 0.6 https://www.security-threat.com/threat-modeling-fundamentals-methodology/threat-prioritization-risk-scoring/ 2026-07-05 weekly 0.7 https://www.security-threat.com/threat-modeling-fundamentals-methodology/threat-prioritization-risk-scoring/cvss-vs-epss-for-vulnerability-triage/ 2026-07-05 weekly 0.6 https://www.security-threat.com/threat-modeling-fundamentals-methodology/threat-prioritization-risk-scoring/dread-vs-epss-for-threat-prioritization/ 2026-07-31 weekly 0.6 https://www.security-threat.com/vulnerability-patterns-web-mitigation-strategies/ 2026-06-21 weekly 0.8 https://www.security-threat.com/vulnerability-patterns-web-mitigation-strategies/access-control-and-idor-prevention/ 2026-07-31 weekly 0.7 https://www.security-threat.com/vulnerability-patterns-web-mitigation-strategies/access-control-and-idor-prevention/preventing-idor-in-rest-apis/ 2026-07-31 weekly 0.6 https://www.security-threat.com/vulnerability-patterns-web-mitigation-strategies/access-control-and-idor-prevention/row-level-security-for-multi-tenant-postgres/ 2026-07-31 weekly 0.6 https://www.security-threat.com/vulnerability-patterns-web-mitigation-strategies/access-control-and-idor-prevention/scope-based-vs-role-based-api-authorization/ 2026-07-31 weekly 0.6 https://www.security-threat.com/vulnerability-patterns-web-mitigation-strategies/api-rate-limiting-and-abuse-prevention/ 2026-07-31 weekly 0.7 https://www.security-threat.com/vulnerability-patterns-web-mitigation-strategies/api-rate-limiting-and-abuse-prevention/rate-limiting-login-endpoints/ 2026-07-31 weekly 0.6 https://www.security-threat.com/vulnerability-patterns-web-mitigation-strategies/api-rate-limiting-and-abuse-prevention/token-bucket-vs-sliding-window-rate-limiting/ 2026-07-31 weekly 0.6 https://www.security-threat.com/vulnerability-patterns-web-mitigation-strategies/cross-site-request-forgery-csrf-defense/ 2026-07-05 weekly 0.7 https://www.security-threat.com/vulnerability-patterns-web-mitigation-strategies/cross-site-request-forgery-csrf-defense/csrf-token-vs-samesite-cookie-defense/ 2026-07-05 weekly 0.6 https://www.security-threat.com/vulnerability-patterns-web-mitigation-strategies/cross-site-request-forgery-csrf-defense/implementing-double-submit-cookie-pattern-in-nodejs/ 2026-06-21 weekly 0.6 https://www.security-threat.com/vulnerability-patterns-web-mitigation-strategies/cross-site-scripting-xss-mitigation/ 2026-07-05 weekly 0.7 https://www.security-threat.com/vulnerability-patterns-web-mitigation-strategies/cross-site-scripting-xss-mitigation/escaping-user-input-in-react-and-vue-components/ 2026-06-21 weekly 0.6 https://www.security-threat.com/vulnerability-patterns-web-mitigation-strategies/cross-site-scripting-xss-mitigation/reflected-vs-stored-xss-mitigation/ 2026-07-05 weekly 0.6 https://www.security-threat.com/vulnerability-patterns-web-mitigation-strategies/cross-site-scripting-xss-mitigation/sanitizing-markdown-rendering-pipelines/ 2026-07-31 weekly 0.6 https://www.security-threat.com/vulnerability-patterns-web-mitigation-strategies/dom-based-vulnerability-sanitization/ 2026-06-21 weekly 0.7 https://www.security-threat.com/vulnerability-patterns-web-mitigation-strategies/dom-based-vulnerability-sanitization/dom-clobbering-and-prototype-pollution/ 2026-07-31 weekly 0.6 https://www.security-threat.com/vulnerability-patterns-web-mitigation-strategies/dom-based-vulnerability-sanitization/rolling-out-trusted-types/ 2026-07-31 weekly 0.6 https://www.security-threat.com/vulnerability-patterns-web-mitigation-strategies/file-upload-and-deserialization-security/ 2026-07-31 weekly 0.7 https://www.security-threat.com/vulnerability-patterns-web-mitigation-strategies/file-upload-and-deserialization-security/safe-deserialization-in-python-and-nodejs/ 2026-07-31 weekly 0.6 https://www.security-threat.com/vulnerability-patterns-web-mitigation-strategies/file-upload-and-deserialization-security/serving-user-uploads-from-a-sandboxed-origin/ 2026-07-31 weekly 0.6 https://www.security-threat.com/vulnerability-patterns-web-mitigation-strategies/file-upload-and-deserialization-security/validating-file-uploads-with-magic-bytes/ 2026-07-31 weekly 0.6 https://www.security-threat.com/vulnerability-patterns-web-mitigation-strategies/injection-attack-prevention/ 2026-07-05 weekly 0.7 https://www.security-threat.com/vulnerability-patterns-web-mitigation-strategies/injection-attack-prevention/parameterized-queries-for-sql-and-nosql-injection/ 2026-07-05 weekly 0.6 https://www.security-threat.com/vulnerability-patterns-web-mitigation-strategies/injection-attack-prevention/preventing-command-injection-in-nodejs/ 2026-07-31 weekly 0.6 https://www.security-threat.com/vulnerability-patterns-web-mitigation-strategies/injection-attack-prevention/preventing-ldap-injection/ 2026-07-05 weekly 0.6 https://www.security-threat.com/vulnerability-patterns-web-mitigation-strategies/injection-attack-prevention/preventing-nosql-injection-in-mongodb/ 2026-07-05 weekly 0.6 https://www.security-threat.com/vulnerability-patterns-web-mitigation-strategies/injection-attack-prevention/preventing-server-side-template-injection/ 2026-07-05 weekly 0.6 https://www.security-threat.com/vulnerability-patterns-web-mitigation-strategies/secure-http-header-configuration/ 2026-07-05 weekly 0.7 https://www.security-threat.com/vulnerability-patterns-web-mitigation-strategies/secure-http-header-configuration/configuring-hsts-and-x-frame-options-for-legacy-apps/ 2026-06-21 weekly 0.6 https://www.security-threat.com/vulnerability-patterns-web-mitigation-strategies/secure-http-header-configuration/content-security-policy-nonce-vs-hash/ 2026-07-05 weekly 0.6 https://www.security-threat.com/vulnerability-patterns-web-mitigation-strategies/secure-http-header-configuration/cors-misconfiguration-and-credentialed-requests/ 2026-07-31 weekly 0.6 https://www.security-threat.com/vulnerability-patterns-web-mitigation-strategies/secure-http-header-configuration/rolling-out-csp-report-only/ 2026-07-31 weekly 0.6 https://www.security-threat.com/vulnerability-patterns-web-mitigation-strategies/server-side-request-forgery-ssrf-prevention/ 2026-07-05 weekly 0.7 https://www.security-threat.com/vulnerability-patterns-web-mitigation-strategies/server-side-request-forgery-ssrf-prevention/blind-ssrf-detection-with-out-of-band-callbacks/ 2026-07-31 weekly 0.6 https://www.security-threat.com/vulnerability-patterns-web-mitigation-strategies/server-side-request-forgery-ssrf-prevention/dns-rebinding-and-ip-allowlist-bypass/ 2026-07-05 weekly 0.6 https://www.security-threat.com/vulnerability-patterns-web-mitigation-strategies/server-side-request-forgery-ssrf-prevention/ssrf-allowlists-and-metadata-service-protection/ 2026-06-21 weekly 0.6