<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>Cybersecurity on Po-Wei Chen, MD — Physiatrist &amp; Builder</title><link>https://drpwchen.com/en/tags/cybersecurity/</link><description>Recent content in Cybersecurity on Po-Wei Chen, MD — Physiatrist &amp; Builder</description><image><title>Po-Wei Chen, MD — Physiatrist &amp; Builder</title><url>https://drpwchen.com/og-default.png</url><link>https://drpwchen.com/og-default.png</link></image><generator>Hugo</generator><language>en</language><lastBuildDate>Thu, 09 Jul 2026 10:45:00 +0800</lastBuildDate><atom:link href="https://drpwchen.com/en/tags/cybersecurity/index.xml" rel="self" type="application/rss+xml"/><item><title>My Open-Source Tool Was Targeted by a Bot Marketer!</title><link>https://drpwchen.com/en/posts/github-bot-marketing/</link><pubDate>Thu, 09 Jul 2026 10:45:00 +0800</pubDate><guid>https://drpwchen.com/en/posts/github-bot-marketing/</guid><description>My open-source paper tool received a GitHub issue full of sincere praise. After checking, I found it was automated marketing spammed by a bot to 26 repos within two minutes. This post breaks down its tactics, the paid marketplace model behind it, and why running it with your own subscription is a better deal.</description></item><item><title>When AI Can Do It All, I Double-Check My Keys at Home</title><link>https://drpwchen.com/en/posts/ai-agent-secrets-audit/</link><pubDate>Sun, 28 Jun 2026 01:30:00 +0800</pubDate><guid>https://drpwchen.com/en/posts/ai-agent-secrets-audit/</guid><description>After handing over permissions to read files, execute commands, and connect to the internet to an AI assistant, I went back to inventory, lock, and revoke my scattered keys and tokens, putting together a few security habits for using AI.</description></item></channel></rss>