<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
  <url>
    <loc>https://hackyjs.com/posts/a-cost-aware-model-router-in-javascript-routing-between-local-mac-mini-models-and-cheap-cloud-tiers</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-27T00:00:00.000Z</news:publication_date>
      <news:title>A Cost-Aware Model Router in JavaScript: Routing Between Local Mac Mini Models and Cheap Cloud Tiers</news:title>
      <news:keywords>javascript, model-routing, local-inference, llm-cost, apple-silicon</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-ai-browsing-agents-for-confused-deputy-failures-before-production</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-27T00:00:00.000Z</news:publication_date>
      <news:title>Auditing AI Browsing Agents for Confused Deputy Failures Before Production</news:title>
      <news:keywords>ai-agents, security, confused-deputy, authorization, audit-logging</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/detecting-netscaler-rce-exploitation-on-citrix-adc-before-a-patch-exists</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-27T00:00:00.000Z</news:publication_date>
      <news:title>Detecting NetScaler RCE Exploitation on Citrix ADC Before a Patch Exists</news:title>
      <news:keywords>netscaler, citrix, zero-day, detection-engineering, incident-response</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/the-golden-spike-what-emitting-rust-instead-of-llvm-ir-buys-and-breaks</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-27T00:00:00.000Z</news:publication_date>
      <news:title>The Golden Spike: What Emitting Rust Instead of LLVM IR Buys and Breaks</news:title>
      <news:keywords>rust, compilers, programming-languages, llvm, toolchains</news:keywords>
    </news:news>
  </url>
</urlset>
