Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

BOD 26-04 changes how federal agencies and FedRAMP providers handle vulnerabilities. It moves away from severity-based, 30-day patching and toward risk-based prioritization. In this webinar, Bob Costello (former CIO of CISA, strategic advisor to Nucleus Security, and Chief Digital and Information Officer at The Merlin Group) and Scott Kuffer (Co-founder and CPO at Nucleus Security) explain what the directive requires, why CISA built it on the SSVC decision-tree framework, and how to put it into practice.

Everyone is talking about using AI to fight AI. But when it comes to vulnerability management, is that really the answer? In this presentation from Black Hat USA 2026, Nucleus Security Co-founder and Chief Product Officer Scott Kuffer challenges the industry's growing obsession with AI-first security outcomes and explains why organizations need more than autonomous agents, AI-generated prioritization, and endless vulnerability discovery to reduce risk.

During our recent webinar, Co-founder and CPO Scott Kuffer explains how a text from an unexpected source brought home how AI and Claude Mythos have elevated the visibility of the vulnerability problem in the public sphere.

In our recent webinar on how Claude Mythos will affect vulnerability and exposure management, guest speaker Jerry Hoff talks about what the ramifications are for discovering masses of new vulnerabilities in your environment.

Artificial intelligence is transforming cybersecurity at an unprecedented pace, but is it making organizations safer or simply exposing more vulnerabilities?

In this webinar, Nucleus Security CEO Steve Carter and Product Marketing Lead Tally Netzer break down the growing “exploitability intelligence gap” and what it means for modern vulnerability and exposure management programs. Drawing from six months of research and real-world vulnerability data, they explore how attacker timelines have compressed, why traditional reactive workflows are struggling to keep pace, and where organizations are missing critical signals before exploitation begins.

AI is becoming table stakes in vulnerability and exposure management. In this candid webinar conversation, Chris Ray, Field CTO at GigaOm, and Will Gorman, CTO and leader of AI initiatives at Nucleus Security, challenge the assumption that more AI automatically leads to better outcomes.

Nucleus R&D Engineer Ryan Cribelar assesses where internet exposure ranks amongst all of the factors involved when prioritizing vulnerabilities.

R&D Engineer Ryan Cribelar explains how internet exposure is a factor in risk management related to vulnerabilities and exposures.

Nucleus Security's Adam Dudley talks about the platform's place in a highly functioning CTEM approach during a joint webinar with Cycode and HackerOne.