Last Week in Remediation: Anthropic Project Glasswing, CISA Budget Cut Disaster, & EU Cyber Law

CISA pushes OpenEoX for end-of-support tracking—is it a solution or just 'compliance theater'? Then, we dive into Anthropic's Claude Code Security, asking why AI is brilliant at finding bugs but still struggles with fixing them at scale. Finally, we break down the UK Government's claim of cutting cyber fix times by 84%—a true breakthrough or a policy win?

Sagy and Agnayee talk ENISA's promotion to CVE Program Root, the case for making CVE funding a national security imperative, and the U.S. Department of Commerce's Vulnerability Disclosure Program (VDP) found "not fully effective".