<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"
        xmlns:news="http://www.google.com/schemas/sitemap-news/0.9"
        xmlns:xhtml="http://www.w3.org/1999/xhtml"
        xmlns:mobile="http://www.google.com/schemas/sitemap-mobile/1.0"
        xmlns:image="http://www.google.com/schemas/sitemap-image/1.1"
        xmlns:video="http://www.google.com/schemas/sitemap-video/1.1">
  
  <!-- Homepage -->
  <url>
    <loc>https://aliazlan.net/</loc>
    <lastmod>2026-04-03</lastmod>
    <changefreq>weekly</changefreq>
    <priority>1.0</priority>
  </url>
  
  <!-- Blog listing page -->
  <url>
    <loc>https://aliazlan.net/blog</loc>
    <lastmod>2026-04-03</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.9</priority>
  </url>
  
  <!-- Static pages -->
  <url>
    <loc>https://aliazlan.net/about</loc>
    <lastmod>2026-04-03</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  
  <url>
    <loc>https://aliazlan.net/portfolio</loc>
    <lastmod>2026-04-03</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  
  <url>
    <loc>https://aliazlan.net/education</loc>
    <lastmod>2026-04-03</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  
  <url>
    <loc>https://aliazlan.net/skills</loc>
    <lastmod>2026-04-03</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  
  <url>
    <loc>https://aliazlan.net/experience</loc>
    <lastmod>2026-04-03</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  
  <url>
    <loc>https://aliazlan.net/achievements</loc>
    <lastmod>2026-04-03</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  
  <url>
    <loc>https://aliazlan.net/contact</loc>
    <lastmod>2026-04-03</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  
  <!-- Blog Posts -->
  <url>
    <loc>https://aliazlan.net/blog/axios-npm-supply-chain-compromise-malicious-packages-delivering-a-rat</loc>
    <lastmod>2026-04-03</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.9</priority>
    <image:image>
      <image:loc>https://aliazlan.net/uploads/1775011451716-973113294.png</image:loc>
      <image:title>Axios npm Supply Chain Compromise: RAT via Hi... | Ali Azlan</image:title>
      <image:caption>Analysis of the axios npm supply chain attack where malicious versions 1.14.1 and 0.30.4 delivered a cross-platform RAT via a hijacked maintainer account. Cover</image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://aliazlan.net/blog/generative-ai-risks-in-social-engineering-deepfakes-phishing-and-voice-cloning</loc>
    <lastmod>2026-04-01</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.9</priority>
    <image:image>
      <image:loc>https://aliazlannet-production.up.railway.app/uploads/generative-ai-risks-in-social-engineering-deepfakes-phishing-and-voice-cloning-featured.png</image:loc>
      <image:title>AI Social Engineering Risks &amp; Defences</image:title>
      <image:caption>Learn how deepfakes, AI phishing, and voice cloning drive modern social engineering, plus practical verification, approval, and response controls for SMEs.</image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://aliazlan.net/blog/deepfake-detection-is-not-an-ml-problem-its-a-defence-problem</loc>
    <lastmod>2026-04-01</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.9</priority>
    <image:image>
      <image:loc>https://aliazlan.net/uploads/1774248784580-72976070.png</image:loc>
      <image:title>Deepfake Detection Is Not an ML Problem</image:title>
      <image:caption>Design a multi-modal deepfake detector using attention-based fusion across video, temporal cues and audio, with explainability, attacks testing, and deployment.</image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://aliazlan.net/blog/the-gap-between-academic-security-research-and-industry-practice</loc>
    <lastmod>2026-03-31</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.9</priority>
    <image:image>
      <image:loc>https://aliazlannet-production.up.railway.app/uploads/the-gap-between-academic-security-research-and-industry-practice-featured.png</image:loc>
      <image:title>Academic vs Industry Security Research Gap</image:title>
      <image:caption>Learn why security research often fails in production and how to bridge it with better metrics, datasets, integration paths, and practical pilot programmes.</image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://aliazlan.net/blog/adversarial-attacks-on-ai-security-tools-when-defenders-become-targets</loc>
    <lastmod>2026-04-01</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.9</priority>
    <image:image>
      <image:loc>https://aliazlannet-production.up.railway.app/uploads/adversarial-attacks-on-ai-security-tools-when-defenders-become-targets-featured.png</image:loc>
      <image:title>Adversarial Attacks on AI Security Tools</image:title>
      <image:caption>Understand evasion, poisoning, and model extraction against AI security tools, plus practical controls, testing methods, and vendor questions for safer rollout.</image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://aliazlan.net/blog/web-scraping-in-2026-ethical-automation-with-python</loc>
    <lastmod>2026-03-31</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.9</priority>
    <image:image>
      <image:loc>https://aliazlan.net/uploads/1771800099011-115907118.png</image:loc>
      <image:title>Ethical Web Scraping with Python in 2026</image:title>
      <image:caption>Learn ethical web scraping in 2026 with Python: robots.txt, rate limiting, Playwright vs HTTPX, resilient pipelines, and secure data handling.</image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://aliazlan.net/blog/ai-code-review-automating-quality-checks-without-losing-engineering-judgement</loc>
    <lastmod>2026-03-31</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.9</priority>
    <image:image>
      <image:loc>https://aliazlan.net/uploads/1770516694643-980003688.png</image:loc>
      <image:title>AI Code Review for Automated Quality Checks</image:title>
      <image:caption>Learn how to automate code quality checks with AI: CI quality gates, PR summaries, SAST triage, and security guardrails. Practical workflow included.</image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://aliazlan.net/blog/cross-site-scripting-xss-prevention-a-complete-guide-for-2026</loc>
    <lastmod>2026-04-03</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.9</priority>
    <image:image>
      <image:loc>https://aliazlan.net/uploads/1770086190166-708170664.png</image:loc>
      <image:title>XSS Prevention Guide 2026: CSP, Encoding, TT</image:title>
      <image:caption>Learn modern XSS prevention for 2026: context-aware encoding, safe rich text sanitisation, CSP nonces, Trusted Types, and testing to stop attacks.</image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://aliazlan.net/blog/secure-coding-in-php-avoiding-common-vulnerabilities</loc>
    <lastmod>2026-04-01</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.9</priority>
    <image:image>
      <image:loc>https://aliazlan.net/uploads/1769560496922-868711488.jpg</image:loc>
      <image:title>Secure Coding in PHP: Prevent Common Attacks</image:title>
      <image:caption>Learn secure PHP coding to prevent SQL injection, XSS, CSRF, insecure uploads, and auth flaws. Practical patterns, headers, and examples.</image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://aliazlan.net/blog/ai-coding-assistants-in-2026-cursor-claude-github-copilot-and-beyond</loc>
    <lastmod>2026-03-30</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.9</priority>
    <image:image>
      <image:loc>https://aliazlannet-production.up.railway.app/uploads/ai-coding-assistants-in-2026-cursor-claude-github-copilot-and-beyond.jpg</image:loc>
      <image:title>AI Coding Assistants 2026: Cursor vs Copilot</image:title>
      <image:caption>Learn how Cursor, Claude and GitHub Copilot compare in 2026. Practical workflows, evaluation criteria, and security controls for real teams.</image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://aliazlan.net/blog/api-security-best-practices-authentication-rate-limiting-and-owasp-top-10</loc>
    <lastmod>2026-04-02</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.9</priority>
    <image:image>
      <image:loc>https://aliazlan.net/uploads/1769257291368-702001025.jpg</image:loc>
      <image:title>API Security Best Practices: Auth, Rate Limits, OWASP TOP 10</image:title>
      <image:caption>Practical API security best practices: robust authentication, strict authorisation, rate limiting strategies, and mitigations for OWASP API Top 10 risks.</image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://aliazlan.net/blog/sql-injection-in-2026-modern-prevention-techniques</loc>
    <lastmod>2026-03-27</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
    <image:image>
      <image:loc>https://aliazlannet-production.up.railway.app/uploads/1769041427481-344285223.jpg</image:loc>
      <image:title>SQL Injection in 2026: How to Secure Your Database</image:title>
      <image:caption>Learn how SQL injection works in 2026 and how to stop it using prepared statements, ORMs, and modern secure coding practices.</image:caption>
    </image:image>
  </url>
  
</urlset>