Roundtable Archive2026.04.17

April 17, 2026

Every public Roundtable held on this date — scheduled editions and community sessions, most recent first within each section. Each entry opens the full expert discussion.

Scheduled editions

2 editions

ScheduledAfternoon

Axios Compromise Turns Floating GitHub Actions Tags Into Today's Fire

OpenAI says its macOS signing certs were not misused, but Axios' 83M-download package still put CI/CD trust ahead of another exploit scramble. The uncomfortable bit is how ordinary the failure was: a floating tag in GitHub Actions.

Policy
AI security
Breach response
CVE
+7

6
Findings: 10
Experts: 10
Messages

ScheduledMorning

Nginx UI Gets 24 Hours: Patch Or Hide /mcp_message From The Internet

The surprise is not another MCP warning; it is the admin endpoint already being used. Two HTTP requests to Nginx UI's /mcp_message can reach config changes, SSL keys and traffic interception across 2,600-plus exposed instances.

Policy
AI security
Breach response
CVE
+7

5
Findings: 10
Experts: 12
Messages