<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
  <url>
    <loc>https://hackyjs.com/posts/auditing-zammad-after-an-autonomous-agent-chained-zero-days-against-divd</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-01T00:00:00.000Z</news:publication_date>
      <news:title>Auditing Zammad After an Autonomous Agent Chained Zero-Days Against DIVD</news:title>
      <news:keywords>zammad, zero-day, ai-agents, vulnerability-management, incident-response</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/patching-nextjs-imageresponse-svg-to-rce-and-axios-http2-ssrf-in-a-nodejs-service</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-01T00:00:00.000Z</news:publication_date>
      <news:title>Patching Next.js ImageResponse SVG-to-RCE and Axios HTTP/2 SSRF in a Node.js Service</news:title>
      <news:keywords>nextjs, axios, nodejs, security, ssrf</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/reddit-is-killing-rss-and-unauthenticated-api-endpoints-what-breaks-in-your-stack</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-01T00:00:00.000Z</news:publication_date>
      <news:title>Reddit Is Killing RSS and Unauthenticated API Endpoints: What Breaks in Your Stack</news:title>
      <news:keywords>reddit, api, rss, web-scraping, developer-platforms</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/why-leaderboard-wins-fail-in-production-auditing-the-gemini-4-argon-13-of-19-claim</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-01T00:00:00.000Z</news:publication_date>
      <news:title>Why Leaderboard Wins Fail in Production: Auditing the Gemini 4 Argon 13-of-19 Claim</news:title>
      <news:keywords>ai-benchmarks, llm-evaluation, model-selection, gemini, benchmark-maxxing</news:keywords>
    </news:news>
  </url>
</urlset>
