<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
  <url>
    <loc>https://hackyjs.com/posts/certificate-revocation-is-a-release-engineering-problem-not-a-pki-team-problem</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-23T00:00:00.000Z</news:publication_date>
      <news:title>Certificate Revocation Is a Release-Engineering Problem, Not a PKI Team Problem</news:title>
      <news:keywords>pki, certificate-revocation, release-engineering, fedora, software-supply-chain</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/from-sql-injection-to-edge-compromise-a-hunt-checklist-for-on-prem-velocloud-orchestrator</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-23T00:00:00.000Z</news:publication_date>
      <news:title>From SQL Injection to Edge Compromise: A Hunt Checklist for On-Prem VeloCloud Orchestrator</news:title>
      <news:keywords>security, sql-injection, arista, velocloud, incident-response</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/what-the-agentic-ai-foundations-four-agent-projects-solve-and-what-they-leave-open</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-23T00:00:00.000Z</news:publication_date>
      <news:title>What the Agentic AI Foundation&apos;s Four Agent Projects Solve, and What They Leave Open</news:title>
      <news:keywords>ai-agents, interoperability, standards, developer-tools</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/when-janks-native-c-interop-beats-jvm-clojure-and-when-it-doesnt</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-23T00:00:00.000Z</news:publication_date>
      <news:title>When Jank&apos;s Native C++ Interop Beats JVM Clojure and When It Doesn&apos;t</news:title>
      <news:keywords>jank, clojure, c, jit, interop</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/inside-the-litellm-11070-pypi-compromise-infostealer-ci-secrets-and-where-verification-failed</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-22T00:00:00.000Z</news:publication_date>
      <news:title>Inside the LiteLLM 1.107.0 PyPI Compromise: Infostealer, CI Secrets, and Where Verification Failed</news:title>
      <news:keywords>supply-chain, pypi, security, python, ci-cd</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/nodejs-brotli-rce-what-to-check-in-your-runtime-lockfile-and-pipeline</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-22T00:00:00.000Z</news:publication_date>
      <news:title>Node.js Brotli RCE: What to Check in Your Runtime, Lockfile, and Pipeline</news:title>
      <news:keywords>nodejs, security, brotli, rce, devops</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/testing-coding-agents-for-monitor-tampering-with-a-javascript-red-team-harness</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-22T00:00:00.000Z</news:publication_date>
      <news:title>Testing Coding Agents for Monitor Tampering With a JavaScript Red-Team Harness</news:title>
      <news:keywords>javascript, ai-agents, red-teaming, security, testing</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/when-google-cloud-fails-card-authorization-needs-a-degraded-mode-contract</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-22T00:00:00.000Z</news:publication_date>
      <news:title>When Google Cloud Fails, Card Authorization Needs a Degraded-Mode Contract</news:title>
      <news:keywords>cloud-resilience, fintech, card-payments, degraded-mode</news:keywords>
    </news:news>
  </url>
</urlset>
