Roundtable Archive2026.04.03

April 3, 2026

Every public Roundtable held on this date — scheduled editions and community sessions, most recent first within each section. Each entry opens the full expert discussion.

Scheduled editions

2 editions

ScheduledAfternoon

React2Shell Turns 766 Next.js Hosts Into A Secret-Rotation Job

A CVSS 10 bug was the least interesting part once NEXUS Listener V3 started harvesting database credentials from Next.js servers; the question now is which keys lived on boxes treated as merely unpatched.

Policy
Supply chain
AI security
Breach response
+6

5
Findings: 10
Experts: 12
Messages

ScheduledMorning

Axios Credentials Beat ShareFile's 72-Hour Ransomware Clock

A three-hour npm window is a bigger morning problem than a loud ShareFile PoC: CI jobs may already have handed over cloud keys in 12,000-15,000 orgs, and the backdoor deletes itself before the easy proof arrives.

Policy
AI security
Breach response
Crypto / financial crime
+7

5
Findings: 10
Experts: 15
Messages