I wrote up a recap of VulnCon 2026 for the HeroDevs blog: HeroDevs at VulnCon 2026.

VulnCon is an annual conference for people who work on vulnerability management. I went with a focus on how vulnerabilities affect the open source community.

The recap covers growing international support for the CVE program, changes to how the NVD enriches CVE records, the push for better quality CVE data, how AI is increasing the volume of vulnerability disclosures, and supply chain malware campaigns. It ends with what those trends mean for teams that depend on open source software.