In the Wild with VulnCheck

Topic: Regulation, Data Gaps, and AI Are Colliding

Date: Wednesday, August 26th - 12pm CT/1pm ET

2026 didn't bring one change to vulnerability management. It brought three, all at once.

NIST has scaled back CVE enrichment to a narrow slice of the catalog. CISA's BOD 26-04 and the EU's Cyber Resilience Act are compressing remediation and reporting timelines. And AI-assisted coding is generating vulnerable code faster than any manual review process was built to handle.

In this month's In the Wild with VulnCheck, Patrick Garrity, Security Researcher, and Kimber Duke, Principal Product Manager, break down how these three forces are converging, and what it means for how security teams prioritize, report, and keep pace.

We'll cover:

• Government regulation: how CRA's September 11 reporting clock and CISA's BOD 26-04 are changing what "fast enough" means

• Impacted services: what NIST's pullback on NVD enrichment (29,000+ CVEs moved to "Not Scheduled" in a single week) actually leaves uncovered, and how CISA's own data is affected

• AI and mass adoption: why AI-generated code is outpacing manual security review, and what that does to the volume side of the equation

• A full timeline of what's changed in 2026 and why it matters now, not eventually

Past Topics:

January 28th: Tales from the Exploit Mines

February 25th: Inside the Exploitation Files

March 25th: Expectations vs Reality

April 29th: CISA, NIST, and Mythos — oh my

May 27th:  Fuzzers to Frameworks: Hot takes on the new AI-Powered Vulnerability Discovery Stack

June 24th: BOD 26-04, Decoded: What It Means for Federal Agencies and Everyone Else

July 29th: A First Look at the 1H 2026 State of Exploitation Report

August 26th: Regulation, Data Gaps, and AI Are Colliding