<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
  <url>
    <loc>https://hackyjs.com/posts/auditing-zammad-after-an-autonomous-agent-chained-zero-days-against-divd</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-01T00:00:00.000Z</news:publication_date>
      <news:title>Auditing Zammad After an Autonomous Agent Chained Zero-Days Against DIVD</news:title>
      <news:keywords>zammad, zero-day, ai-agents, vulnerability-management, incident-response</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/patching-nextjs-imageresponse-svg-to-rce-and-axios-http2-ssrf-in-a-nodejs-service</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-01T00:00:00.000Z</news:publication_date>
      <news:title>Patching Next.js ImageResponse SVG-to-RCE and Axios HTTP/2 SSRF in a Node.js Service</news:title>
      <news:keywords>nextjs, axios, nodejs, security, ssrf</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/reddit-is-killing-rss-and-unauthenticated-api-endpoints-what-breaks-in-your-stack</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-01T00:00:00.000Z</news:publication_date>
      <news:title>Reddit Is Killing RSS and Unauthenticated API Endpoints: What Breaks in Your Stack</news:title>
      <news:keywords>reddit, api, rss, web-scraping, developer-platforms</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/why-leaderboard-wins-fail-in-production-auditing-the-gemini-4-argon-13-of-19-claim</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-01T00:00:00.000Z</news:publication_date>
      <news:title>Why Leaderboard Wins Fail in Production: Auditing the Gemini 4 Argon 13-of-19 Claim</news:title>
      <news:keywords>ai-benchmarks, llm-evaluation, model-selection, gemini, benchmark-maxxing</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-the-mcp-python-sdk-and-authlib-for-oauth-credential-leaks-and-missing-signature-checks</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-30T00:00:00.000Z</news:publication_date>
      <news:title>Auditing the MCP Python SDK and Authlib for OAuth Credential Leaks and Missing Signature Checks</news:title>
      <news:keywords>python, oauth, mcp, security, authlib</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/cve-2026-86950-auditing-the-coregraphics-image-and-font-decoding-path-after-an-in-the-wild-zero-day</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-30T00:00:00.000Z</news:publication_date>
      <news:title>CVE-2026-86950: Auditing the CoreGraphics Image and Font Decoding Path After an In-the-Wild Zero-Day</news:title>
      <news:keywords>apple, zero-day, coregraphics, memory-safety, spyware</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/measuring-eu-latency-to-alibaba-clouds-new-europe-regions-against-aws-and-azure</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-30T00:00:00.000Z</news:publication_date>
      <news:title>Measuring EU Latency to Alibaba Cloud&apos;s New Europe Regions Against AWS and Azure</news:title>
      <news:keywords>alibaba-cloud, aws, azure, latency, cloud-computing</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/metering-always-on-agents-in-nodejs-cost-per-task-across-gpt-61-sol-and-astra</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-30T00:00:00.000Z</news:publication_date>
      <news:title>Metering Always-On Agents in Node.js: Cost per Task Across GPT-6.1 Sol and Astra</news:title>
      <news:keywords>nodejs, ai-agents, llm-cost-optimization, observability, openai</news:keywords>
    </news:news>
  </url>
</urlset>
