<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
  <url>
    <loc>https://hackyjs.com/posts/chaining-three-ivanti-connect-secure-zero-days-to-root-a-fully-patched-vpn</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-14T00:00:00.000Z</news:publication_date>
      <news:title>Chaining Three Ivanti Connect Secure Zero-Days to Root a Fully Patched VPN</news:title>
      <news:keywords>ivanti, zero-day, vpn-security, edge-device-exploitation, root-access</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/from-applisten-to-function-urls-a-hands-on-express-migration-to-lambda-web-functions</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-14T00:00:00.000Z</news:publication_date>
      <news:title>From app.listen() to Function URLs: A Hands-On Express Migration to Lambda Web Functions</news:title>
      <news:keywords>aws-lambda, express, serverless, nodejs, aws</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/how-cloudflare-d1-scales-to-a-million-databases-without-a-hot-path-directory</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-14T00:00:00.000Z</news:publication_date>
      <news:title>How Cloudflare D1 Scales to a Million Databases Without a Hot-Path Directory</news:title>
      <news:keywords>cloudflare, d1, sqlite, serverless, databases</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/testing-rag-agents-for-adversarial-retrieval-and-post-release-drift</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-14T00:00:00.000Z</news:publication_date>
      <news:title>Testing RAG Agents for Adversarial Retrieval and Post-Release Drift</news:title>
      <news:keywords>rag, evaluation, llm-agents, benchmarks, testing</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/from-trace-spans-to-chargeback-attributing-inference-costs-per-agent</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-13T00:00:00.000Z</news:publication_date>
      <news:title>From Trace Spans to Chargeback: Attributing Inference Costs per Agent</news:title>
      <news:keywords>ai-agents, observability, llm-costs, opentelemetry, finops</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/gitlabs-two-99-regex-rce-flaws-a-cicd-maintainers-patch-and-verify-playbook</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-13T00:00:00.000Z</news:publication_date>
      <news:title>GitLab&apos;s Two 9.9 Regex RCE Flaws: A CI/CD Maintainer&apos;s Patch and Verify Playbook</news:title>
      <news:keywords>gitlab, ci-cd, security, regex, rce</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/testing-react-193s-browser-against-useeffect-and-dynamic-imports</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-13T00:00:00.000Z</news:publication_date>
      <news:title>Testing React 19.3&apos;s browser() Against useEffect and Dynamic Imports</news:title>
      <news:keywords>react, react-19, client-only-rendering, hydration, ssr</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/why-waf-rules-alone-miss-the-bricksforge-wordpress-plugin-rce</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-13T00:00:00.000Z</news:publication_date>
      <news:title>Why WAF Rules Alone Miss the Bricksforge WordPress Plugin RCE</news:title>
      <news:keywords>wordpress-security, remote-code-execution, waf-bypass, vulnerability-exploitation, incident-response</news:keywords>
    </news:news>
  </url>
</urlset>
