<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"
        xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
  <url>
    <loc>https://top10.dev/story/zod-466-pulled-after-malware-slipped-into-npm-release-2111</loc>
    <news:news>
      <news:publication>
        <news:name>top10.dev</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-13T00:00:00.000Z</news:publication_date>
      <news:title>Zod 4.6.6 pulled after malware slipped into npm release</news:title>
      <news:keywords>Open Source, Security / Privacy</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://top10.dev/story/codex-cli-quietly-installs-a-self-updating-daemon-by-default-2112</loc>
    <news:news>
      <news:publication>
        <news:name>top10.dev</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-13T00:00:00.000Z</news:publication_date>
      <news:title>Codex CLI quietly installs a self-updating daemon — by default</news:title>
      <news:keywords>Security / Privacy, DevOps / Platform Engineering</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://top10.dev/story/the-attack-surface-was-the-fridge-ransomware-thaws-europes-cold-chain-2113</loc>
    <news:news>
      <news:publication>
        <news:name>top10.dev</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-13T00:00:00.000Z</news:publication_date>
      <news:title>The attack surface was the fridge: ransomware thaws Europe&apos;s cold chain</news:title>
      <news:keywords>Cloud / Infrastructure, Security / Privacy</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://top10.dev/story/census-kills-differential-privacy-the-reconstruction-attack-is-back-on-the-menu-2114</loc>
    <news:news>
      <news:publication>
        <news:name>top10.dev</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-13T00:00:00.000Z</news:publication_date>
      <news:title>Census kills differential privacy — the reconstruction attack is back on the menu</news:title>
      <news:keywords>Politics / Regulation, Security / Privacy</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://top10.dev/story/ai-bypass-repos-are-climbing-github-trending-and-staying-there-2115</loc>
    <news:news>
      <news:publication>
        <news:name>top10.dev</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-13T00:00:00.000Z</news:publication_date>
      <news:title>AI bypass repos are climbing GitHub trending — and staying there</news:title>
      <news:keywords>Open Source, AI / ML</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://top10.dev/story/organic-maps-the-osm-app-that-ships-because-nobody-owns-it-2116</loc>
    <news:news>
      <news:publication>
        <news:name>top10.dev</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-13T00:00:00.000Z</news:publication_date>
      <news:title>Organic Maps: the OSM app that ships because nobody owns it</news:title>
      <news:keywords>Frontend / UI, Open Source</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://top10.dev/story/a-repo-called-openclaw-claims-283k-github-stars-trending-is-broken-2117</loc>
    <news:news>
      <news:publication>
        <news:name>top10.dev</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-13T00:00:00.000Z</news:publication_date>
      <news:title>A repo called &apos;openclaw&apos; claims 283k GitHub stars. Trending is broken.</news:title>
      <news:keywords>Security / Privacy, AI / ML, Open Source</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://top10.dev/story/carplay-doesnt-replace-your-cars-software-it-just-projects-a-screen-2118</loc>
    <news:news>
      <news:publication>
        <news:name>top10.dev</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-13T00:00:00.000Z</news:publication_date>
      <news:title>CarPlay doesn&apos;t replace your car&apos;s software. It just projects a screen.</news:title>
      <news:keywords>Frontend / UI, Hardware / Chips</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://top10.dev/story/virginia-just-outlawed-selling-precise-location-data-heres-who-breaks-2119</loc>
    <news:news>
      <news:publication>
        <news:name>top10.dev</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-13T00:00:00.000Z</news:publication_date>
      <news:title>Virginia just outlawed selling precise location data. Here&apos;s who breaks.</news:title>
      <news:keywords>Security / Privacy, Politics / Regulation</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://top10.dev/story/ledgers-hidden-chip-isnt-a-backdoor-but-the-trust-math-just-changed-2120</loc>
    <news:news>
      <news:publication>
        <news:name>top10.dev</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-13T00:00:00.000Z</news:publication_date>
      <news:title>Ledger&apos;s &apos;hidden chip&apos; isn&apos;t a backdoor — but the trust math just changed</news:title>
      <news:keywords>Security / Privacy, Hardware / Chips, Crypto / Web3</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://top10.dev/story/how-a-10k-bounty-hunter-turned-youtubes-recommender-into-a-private-video-oracle-2101</loc>
    <news:news>
      <news:publication>
        <news:name>top10.dev</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-12T00:00:00.000Z</news:publication_date>
      <news:title>How a $10K bounty hunter turned YouTube&apos;s recommender into a private-video oracle</news:title>
      <news:keywords>Security / Privacy, AI / ML</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://top10.dev/story/adrafinil-the-lid-closed-mac-problem-finally-has-a-real-fix-2102</loc>
    <news:news>
      <news:publication>
        <news:name>top10.dev</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-12T00:00:00.000Z</news:publication_date>
      <news:title>Adrafinil: the lid-closed Mac problem finally has a real fix</news:title>
      <news:keywords>AI / ML, DevOps / Platform Engineering</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://top10.dev/story/smarter-models-dumber-tools-the-hidden-tax-on-your-agent-stack-2103</loc>
    <news:news>
      <news:publication>
        <news:name>top10.dev</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-12T00:00:00.000Z</news:publication_date>
      <news:title>Smarter models, dumber tools: the hidden tax on your agent stack</news:title>
      <news:keywords>Backend / APIs, AI / ML</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://top10.dev/story/xbox-resets-microsoft-admits-the-console-war-is-over-2104</loc>
    <news:news>
      <news:publication>
        <news:name>top10.dev</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-12T00:00:00.000Z</news:publication_date>
      <news:title>Xbox &apos;resets&apos;: Microsoft admits the console war is over</news:title>
      <news:keywords>Startups / Launches, Career / Industry</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://top10.dev/story/google-fired-the-guy-who-built-the-workspace-cli-they-never-shipped-2105</loc>
    <news:news>
      <news:publication>
        <news:name>top10.dev</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-12T00:00:00.000Z</news:publication_date>
      <news:title>Google fired the guy who built the Workspace CLI they never shipped</news:title>
      <news:keywords>Career / Industry, Open Source</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://top10.dev/story/the-quiet-exodus-from-github-codeberg-forgejo-and-the-self-host-revival-2106</loc>
    <news:news>
      <news:publication>
        <news:name>top10.dev</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-12T00:00:00.000Z</news:publication_date>
      <news:title>The quiet exodus from GitHub: Codeberg, Forgejo, and the self-host revival</news:title>
      <news:keywords>Open Source, DevOps / Platform Engineering</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://top10.dev/story/the-papers-please-web-how-age-gate-laws-killed-anonymous-browsing-2107</loc>
    <news:news>
      <news:publication>
        <news:name>top10.dev</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-12T00:00:00.000Z</news:publication_date>
      <news:title>The &apos;Papers, Please&apos; web: how age-gate laws killed anonymous browsing</news:title>
      <news:keywords>Security / Privacy, Politics / Regulation</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://top10.dev/story/carmack-the-engine-licensing-trap-that-gutted-id-after-quake-2108</loc>
    <news:news>
      <news:publication>
        <news:name>top10.dev</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-12T00:00:00.000Z</news:publication_date>
      <news:title>Carmack: the engine licensing trap that gutted id after Quake</news:title>
      <news:keywords>Startups / Launches, Career / Industry</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://top10.dev/story/a-100k-tax-on-hiring-your-next-engineer-2109</loc>
    <news:news>
      <news:publication>
        <news:name>top10.dev</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-12T00:00:00.000Z</news:publication_date>
      <news:title>A $100k tax on hiring your next engineer</news:title>
      <news:keywords>Career / Industry, Politics / Regulation</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://top10.dev/story/ford-swapped-humans-for-ai-then-quietly-hired-the-humans-back-2110</loc>
    <news:news>
      <news:publication>
        <news:name>top10.dev</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-12T00:00:00.000Z</news:publication_date>
      <news:title>Ford swapped humans for AI. Then quietly hired the humans back.</news:title>
      <news:keywords>AI / ML, Career / Industry</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://top10.dev/story/the-open-weights-gap-is-no-longer-about-capability-its-about-who-runs-the-gpus-2091</loc>
    <news:news>
      <news:publication>
        <news:name>top10.dev</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-11T00:00:00.000Z</news:publication_date>
      <news:title>The open-weights gap is no longer about capability. It&apos;s about who runs the GPUs.</news:title>
      <news:keywords>AI / ML, Open Source</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://top10.dev/story/if-you-cant-chmod-it-you-dont-own-it-2092</loc>
    <news:news>
      <news:publication>
        <news:name>top10.dev</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-11T00:00:00.000Z</news:publication_date>
      <news:title>If You Can&apos;t `chmod` It, You Don&apos;t Own It</news:title>
      <news:keywords>Open Source, DevOps / Platform Engineering</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://top10.dev/story/cratesio-still-requires-a-github-account-thats-a-supply-chain-problem-2093</loc>
    <news:news>
      <news:publication>
        <news:name>top10.dev</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-11T00:00:00.000Z</news:publication_date>
      <news:title>crates.io still requires a GitHub account. That&apos;s a supply chain problem.</news:title>
      <news:keywords>Security / Privacy, Open Source</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://top10.dev/story/ke-mv-the-quadratic-that-quietly-governs-your-rate-limiter-2094</loc>
    <news:news>
      <news:publication>
        <news:name>top10.dev</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-11T00:00:00.000Z</news:publication_date>
      <news:title>KE = ½mv²: the quadratic that quietly governs your rate limiter</news:title>
      <news:keywords>DevOps / Platform Engineering, Backend / APIs</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://top10.dev/story/anonymous-exploitarium-repo-dumps-undisclosed-0-days-now-what-2095</loc>
    <news:news>
      <news:publication>
        <news:name>top10.dev</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-11T00:00:00.000Z</news:publication_date>
      <news:title>Anonymous &apos;exploitarium&apos; repo dumps undisclosed 0-days. Now what?</news:title>
      <news:keywords>Open Source, Security / Privacy</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://top10.dev/story/cryptos-189m-midterm-buy-regulatory-capture-as-a-line-item-2096</loc>
    <news:news>
      <news:publication>
        <news:name>top10.dev</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-11T00:00:00.000Z</news:publication_date>
      <news:title>Crypto&apos;s $189M midterm buy: regulatory capture as a line item</news:title>
      <news:keywords>Crypto / Web3, Politics / Regulation</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://top10.dev/story/the-claude-directory-is-the-new-dotfiles-2097</loc>
    <news:news>
      <news:publication>
        <news:name>top10.dev</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-11T00:00:00.000Z</news:publication_date>
      <news:title>The .claude directory is the new dotfiles</news:title>
      <news:keywords>AI / ML, Open Source</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://top10.dev/story/wikipedias-uk-workers-file-the-first-union-recognition-bid-in-its-25-year-histor-2098</loc>
    <news:news>
      <news:publication>
        <news:name>top10.dev</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-11T00:00:00.000Z</news:publication_date>
      <news:title>Wikipedia&apos;s UK workers file the first union recognition bid in its 25-year history</news:title>
      <news:keywords>Career / Industry, Open Source</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://top10.dev/story/jane-street-tries-autoregressive-diffusion-on-market-data-2099</loc>
    <news:news>
      <news:publication>
        <news:name>top10.dev</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-11T00:00:00.000Z</news:publication_date>
      <news:title>Jane Street tries autoregressive diffusion on market data</news:title>
      <news:keywords>Data / Analytics, AI / ML</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://top10.dev/story/cloudflares-oauth-for-all-turns-its-edge-into-your-auth-server-2100</loc>
    <news:news>
      <news:publication>
        <news:name>top10.dev</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-11T00:00:00.000Z</news:publication_date>
      <news:title>Cloudflare&apos;s OAuth-for-all turns its edge into your auth server</news:title>
      <news:keywords>Security / Privacy, Cloud / Infrastructure</news:keywords>
    </news:news>
  </url>
</urlset>