Week ahead: NIST's AI-era vulnerability database comments close, ASML reports

Another short week ahead. Between Sunday, October 11 and Saturday, October 17 we found two items with a date confirmed in a primary document: a NIST comment deadline on how the National Vulnerability Database should work in an AI-shaped security landscape, which closes Tuesday, and ASML's third-quarter results on Wednesday. The bigger developer deadline lands the week after, and we flag it below because it needs work this week if it affects you.

Tuesday, October 13: comments close on NIST's plan to modernize the NVD

NIST runs the National Vulnerability Database, which NIST describes as the U.S. government repository of standards-based vulnerability management data. In August it opened a request for information on modernizing the NVD "in an evolving cybersecurity landscape increasingly shaped by artificial intelligence (AI) and machine-consumable security data." NIST says its goal is to improve the database's scalability, automation, interoperability, transparency and utility.

The Federal Register notice says comments must be received by October 13, 2026, at 11:59 p.m. Eastern Time (00:59 on October 14 in Buenos Aires), and that later submissions may not be considered. Comments go through regulations.gov under docket NIST-2026-0100.

Why it belongs here: this past week Promptea covered Anthropic's plan to send AI-generated bug reports to open-source maintainers. If models are going to find vulnerabilities faster than people can triage them, the public database that catalogues those vulnerabilities is where the bottleneck shows up. The notice itself does not say what NIST will change or when, so this is a deadline for input, not a decision.

Wednesday, October 14: ASML reports third-quarter results

ASML's 2026 statutory interim report, filed with the SEC in July, lists October 14, 2026 as the announcement date for its third-quarter results. ASML makes the lithography systems chipmakers use to produce advanced logic and memory chips, so its order commentary is one of the earliest reads on where chipmakers think AI demand is going.

The company's own bar for the quarter is public. In its second-quarter release on July 15, ASML guided third-quarter total net sales of €11.0 billion to €12.0 billion with a gross margin of 55% to 57%, and raised its full-year 2026 sales outlook to €43 billion to €45 billion. CEO Christophe Fouquet attributed the strength to AI-related investment driving demand for advanced logic and memory chips, and said ASML plans to add 30% to its low-NA EUV capacity for 2027. Those are company statements and guidance, not results; Wednesday is when they get tested.

Already on the calendar for the week after

These fall outside this week's window, but they come from primary documentation and are close enough that migration work has to start now.

• October 23, OpenAI: the API deprecations page lists shutdowns for a large set of legacy snapshots announced in April, including gpt-4, gpt-4-turbo, gpt-3.5-turbo, gpt-4o-2024-05-13, gpt-4.1-nano, o1, o1-pro, o3-mini, o4-mini and gpt-image-1, plus fine-tuned models built on several of them. OpenAI lists gpt-5.6-sol, gpt-5.6-terra or gpt-5.6-luna as replacements depending on the model.
• October 22–23, Google: the Gemini API deprecations page lists October 22 for the three Veo 3.1 preview models and gemini-omni-flash-preview (replacement: gemini-omni-1.1-flash), and October 23 for the deep-research-pro-preview-12-2025 agent (replacement: deep-research-preview-04-2026). Google notes these are the earliest possible shutdown dates.

If you still call any of the OpenAI snapshots, the swap is rarely just a string change. A replacement model can respond differently to the same system prompt, format structured output differently and cost a different amount per token, so prompts and parsers that were tuned against the old snapshot deserve a regression pass before the 23rd, not on it.

One date that is not a deadline

Anthropic's model deprecations page lists Claude Haiku 4.5 (claude-haiku-4-5-20251001) as Active with a tentative retirement date of "not sooner than" October 15, 2026. That is a floor, not a scheduled shutdown. No deprecation has been announced, and Anthropic says it gives at least 60 days' notice before retiring a publicly released model, so under its own policy Haiku 4.5 does not stop working this week.

What is not on this list

TSMC's third-quarter report is widely listed for this week, but we could not open TSMC's own investor pages or a reporting source from our research environment to confirm the date, so it is not included. As usual, we are not listing model launches nobody has dated. Anything that gets announced with a date during the week will show up in the daily editions.