KEV analyses, threat-informed prioritization notes and lab write-ups on cyber risk management, GRC and vulnerability and exposure management.https://mosslab.me/en-ushttps://mosslab.me/writing/kev-under-bod-26-04/https://mosslab.me/writing/kev-under-bod-26-04/Since CISA's BOD 26-04 took effect, 82% of new KEV entries carry a three-day remediation window. A look at every addition from June 11 to October 16, 2026, what changed, and which product classes keep landing on the short clock.Sat, 17 Oct 2026 15:00:00 GMTCISA KEVBOD 26-04exposure managementthreat-informed prioritizationdatamoss@mosslab.me (Mostafa Negm)https://mosslab.me/writing/flax-typhoon-kev-batch/https://mosslab.me/writing/flax-typhoon-kev-batch/CISA added five CVEs from 2015 to 2023 to the KEV catalog on October 8, 2026, tied to activity consistent with Flax Typhoon. What each one is, why four are flagged for forensic triage, and how I would work the batch.Sat, 17 Oct 2026 14:00:00 GMTCISA KEVthreat intelligenceFlax TyphoonBOD 26-04vulnerability managementmoss@mosslab.me (Mostafa Negm)https://mosslab.me/writing/ai-prediction-market-trading-bot/https://mosslab.me/writing/ai-prediction-market-trading-bot/How I architected a dual-AI pipeline with Gemini 2.5 Pro and Claude Sonnet 4.6 to autonomously analyze and trade on Polymarket, with real-time dashboards, multi-layer risk management, and a backtesting engine.Sun, 15 Mar 2026 00:00:00 GMTpythonaitradingarchitecturepolymarketmoss@mosslab.me (Mostafa Negm)