<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
  <url>
    <loc>https://startwithidentity.com/blog/2026-11-05-half-of-identity-funding-rounds-pitch-ai-agents/</loc>
    <news:news>
      <news:publication>
        <news:name>Start with Identity</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-05T02:00:00Z</news:publication_date>
      <news:title>Half of identity funding rounds pitch AI agents, but agent startups raise no bigger checks</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://startwithidentity.com/blog/2026-11-05-digicert-says-self-registered-accounts-read-archived-customer-data-including-id-documents/</loc>
    <news:news>
      <news:publication>
        <news:name>Start with Identity</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-05T02:00:00Z</news:publication_date>
      <news:title>DigiCert says self-registered accounts read archived customer data, including some ID documents</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://startwithidentity.com/blog/2026-11-05-openssh-10-6p2-fixes-password-bypass-on-musl-systems-such-as-alpine-with-pam-off/</loc>
    <news:news>
      <news:publication>
        <news:name>Start with Identity</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-05T02:00:00Z</news:publication_date>
      <news:title>OpenSSH 10.6p2 fixes a password bypass on musl systems such as Alpine when PAM is off</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://startwithidentity.com/blog/2026-11-05-trigger-dev-says-attacker-read-environment-variables-for-a-subset-of-organizations/</loc>
    <news:news>
      <news:publication>
        <news:name>Start with Identity</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-05T02:00:00Z</news:publication_date>
      <news:title>Trigger.dev says an attacker read environment variables for a subset of customer organizations</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://startwithidentity.com/blog/october-2026-in-identity/</loc>
    <news:news>
      <news:publication>
        <news:name>Start with Identity</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-05T02:00:00Z</news:publication_date>
      <news:title>October 2026 in identity: edge zero-days, leaked developer tokens, and the fake help desk</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://startwithidentity.com/blog/2026-11-04-one-of-123-ai-agent-identity-drafts-adopted/</loc>
    <news:news>
      <news:publication>
        <news:name>Start with Identity</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-04T02:00:00Z</news:publication_date>
      <news:title>1 of 123 AI agent identity drafts at the IETF has been adopted, and 7 of 11 agent problems already have a standard</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://startwithidentity.com/blog/2026-11-04-apache-ofbiz-24-09-08-fixes-a-hard-coded-jwt-key-and-a-password-reset-account-takeover/</loc>
    <news:news>
      <news:publication>
        <news:name>Start with Identity</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-04T02:00:00Z</news:publication_date>
      <news:title>Apache OFBiz 24.09.08 fixes a hard-coded JWT key, a password reset takeover and default-open REST auth</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://startwithidentity.com/blog/2026-11-04-chainalysis-now-says-password-hashes-and-live-tokens-for-all-users-were-exposed/</loc>
    <news:news>
      <news:publication>
        <news:name>Start with Identity</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-04T02:00:00Z</news:publication_date>
      <news:title>Chainalysis now says password hashes and live tokens for all users were exposed</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://startwithidentity.com/blog/2026-11-04-digid-ddos-shows-how-little-headroom-the-dutch-national-login-has-left/</loc>
    <news:news>
      <news:publication>
        <news:name>Start with Identity</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-04T02:00:00Z</news:publication_date>
      <news:title>DigiD DDoS shows how little availability headroom the Dutch national login has left</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://startwithidentity.com/blog/2026-11-04-dreamhost-says-file-manager-attacker-took-ftp-passwords-and-webmail-sessions-for-ten-weeks/</loc>
    <news:news>
      <news:publication>
        <news:name>Start with Identity</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-04T02:00:00Z</news:publication_date>
      <news:title>DreamHost says File Manager attacker took FTP passwords and webmail sessions for about ten weeks</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://startwithidentity.com/blog/2026-11-04-kantara-risk-group-says-ai-agents-need-their-own-identity-risk-framework/</loc>
    <news:news>
      <news:publication>
        <news:name>Start with Identity</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-04T02:00:00Z</news:publication_date>
      <news:title>Kantara risk group says AI agents need their own identity risk framework, not an extension of the human one</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://startwithidentity.com/blog/2026-11-04-vercel-starts-binding-dashboard-sessions-to-devices-with-dbsc-in-chrome/</loc>
    <news:news>
      <news:publication>
        <news:name>Start with Identity</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-04T02:00:00Z</news:publication_date>
      <news:title>Vercel starts binding dashboard sessions to devices with DBSC in Chrome</news:title>
    </news:news>
  </url>
</urlset>
