#regulatory

Analysis · May 24, 2026 · Colten Anderson

The patch window went negative. Now what?

Mandiant's mean time-to-exploit is negative seven days. NVD gave up on enriching most of the catalog. Here's what the next 24 months of patch management actually look like with AI on both sides.