The vulnerability was fixed months ago. The challenge is proving what happened between discovery and remediation. Doug Drew explains how security teams are automating audit evidence so the timeline is already there when auditors ask for it. Read more: hubs.la/Q04yqCFf0

BOD 26-04 is here. The hard part is operationalizing it. Join former CISA CIO Bob Costello and Nucleus CPO & Co-founder Scott Kuffer on Oct. 27 for a practical discussion on implementing BOD 26-04 in the real world. Register here: hubs.la/Q04y6G8f0

eBook launch: It's here: "From Mandate to Operating Model. A Federal Leader's Guide to CISA BOD 26-04." The four decision variables explained, what changes at 3/14/60 days, and how to turn a directive into a program you can defend at audit. hubs.la/Q04xv9m90

AI is accelerating vulnerability discovery. The bottleneck is no longer finding issues, it's fixing them. Scott Kuffer shares why exposure management must scale beyond manual processes and the thinking behind Nucleus Helix: hubs.la/Q04x4NDB0

Nucleus Security is heading to Fal.Con 2026. Join Scott Kuffer on Sept. 2 at 11:15 AM for From Findings to Fixes: Why AI Alone Isn’t Enough, then visit Nucleus at Booth #1513. Aug. 31–Sept. 2 | Las Vegas hubs.la/Q04vJKXw0

Trend Micro projects nearly 66,000 CVEs in 2026. As disclosure volume grows, security teams spend more time deciding which findings matter, who owns them, and how hey move through remediation. Those decisions increasingly define how exposure management programs perform.

Black Kite's latest report narrowed 48,000 published CVEs to 58 genuine supply chain threats. Prioritization became much more precise by combining exploitability, supply chain context, and threat intelligence rather than relying on a single signal.

For the third consecutive year, Nucleus Security has been named to the Inc. 5000 on the 2026 list of America's fastest growing private companies. Grateful to our customers and our team for making this possible. Still building.

Nucleus Security has been named in three Gartner Hype Cycles for 2026. The environments may be different, but the operational work is increasingly the same: understanding exposures, assigning ownership, and moving remediation forward across IT, OT, and industrial networks.

Mythos changed the pace of discovery. It did not change where VM programs break down. Scott Kuffer on why the pressure lands on remediation infrastructure, and what that means for teams already managing six-figure backlogs. hubs.la/Q04rKf1r0

Scott Kuffer in Last Watchdog's Black Hat roundtable on the Hugging Face breach: the real change is sophistication. A machine discovering new exploitation chains without a pre-programmed path accelerates an existing problem. It doesn't create a new one. hubs.la/Q04r_0Lv0

Steve Carter in AI Risk Summit: Mythos makes attackers faster. It doesn't change the blast radius of a bad remediation decision. The line between what you automate and what you gate was drawn on reversibility. Mythos raises the stakes on getting it right. hubs.la/Q04rt_C30

Black Hat is one week away. Join us at 𝗚𝗿𝗮𝗻𝗱 𝗣𝗿𝗶𝘅 𝗣𝗹𝗮𝘇𝗮 𝗼𝗻 𝗔𝘂𝗴𝘂𝘀𝘁 𝟰 𝗳𝗿𝗼𝗺 𝟳–𝟵 𝗣𝗠 for food, drinks, Formula 1 racing, and conversations with security leaders before the conference begins. Spots are limited. hubs.la/Q04qBP260

Stop by Booth 5533 to meet @RobertHansen and @JeremiahGrossman and get a signed copy of 𝗧𝗵𝗲 𝗘𝗻𝗱 𝗼𝗳 𝗚𝘂𝗲𝘀𝘀𝗶𝗻𝗴. Aug. 5, 2:00 to 3:00 PM Aug. 6, 10:00 to 11:00 AM. hubs.la/Q04qBMxC0

𝗧𝗼𝗱𝗮𝘆 𝗮𝘁 𝟭𝟭:𝟬𝟬 𝗔𝗠 𝗣𝗧 / 𝟮:𝟬𝟬 𝗣𝗠 𝗘𝗧 Nucleus on what Mythos-scale discovery means for VM teams and how security programs stay ahead when findings arrive faster than remediation workflows were built to handle. hubs.la/Q04pQd8L0

𝗧𝗼𝗺𝗼𝗿𝗿𝗼𝘄, 𝗝𝘂𝗹𝘆 𝟮𝟯 𝗮𝘁 𝟮 𝗽𝗺 𝗘𝗧 Nucleus is hosting a conversation on what Mythos-scale discovery means for VM teams and how security programs decide what to act on first when findings arrive faster than teams can absorb them. hubs.la/Q04pQsG60

Mythos surfaces vulnerabilities at a scale most programs were never built to absorb. The harder question is what happens after. Join us 𝟳/𝟮𝟯 𝟮 𝗽𝗺 𝗘𝗧 to talk through how security teams prioritize and act when discovery runs faster than remediation. hubs.la/Q04pQVbv0

In Las Vegas for Black Hat? Nucleus is hosting an evening at 𝗚𝗿𝗮𝗻𝗱 𝗣𝗿𝗶𝘅 𝗣𝗹𝗮𝘇𝗮 𝗼𝗻 𝗔𝘂𝗴𝘂𝘀𝘁 𝟰 𝗙𝗼𝗿𝗺𝘂𝗹𝗮 𝟭 𝗿𝗮𝗰𝗶𝗻𝗴, 𝗳𝗼𝗼𝗱, 𝗱𝗿𝗶𝗻𝗸𝘀, 𝗮𝗻𝗱 𝗴𝗼𝗼𝗱 𝗰𝗼𝗻𝘃𝗲𝗿𝘀𝗮𝘁𝗶𝗼𝗻. Space is limited. Reserve your spot. hubs.la/Q04pR7lb0