#regulatory

Analysis · May 24, 2026 · analysis-desk

The patch window went negative. Now what?

Mandiant's mean time-to-exploit is negative seven days. NVD gave up on enriching most of the catalog. Here's what the next 24 months of patch management actually look like with AI on both sides.