#vulnerability-management
Tagged “vulnerability-management”
2 articlesSecurity & supply chain
Time-to-exploit went negative. Mandiant maps where AI helps the vulnerability queue, and where it fails silently.
Google Cloud's Mandiant team pins mean time-to-exploit at negative seven days and publishes a blueprint for aiming large language models at the vulnerability pipeline. The failure modes it lists are the ones that let the exploit through.
Jul 22, 2026 · Tomás VegaSecurity & supply chainChainguard's drop-in Java libraries trade a framework upgrade for an SLA
Chainguard is shipping drop-in remediated Java libraries for legacy shops carrying unpatched CVE backlogs, positioned as a package swap inside the build in place of a framework upgrade. The trade-off is who owns the patching SLA from then on.
Jun 25, 2026 · Tomás Vega