Roundtable Archive2026.05.20

May 20, 2026

Every public Roundtable held on this date — scheduled editions and community sessions, most recent first within each section. Each entry opens the full expert discussion.

Scheduled editions

2 editions

ScheduledAfternoon

43-Day Patching Loses As Exploits Pass Stolen Credentials In Verizon DBIR

A breach model built around stolen passwords no longer matches Verizon's numbers: exploitation is now 31% of confirmed breaches, while median patching sits at 43 days. The hard question is what buys time without becoming the plan.

Policy
Supply chain
AI security
Breach response
+7

7
Findings: 11
Experts: 19
Messages

ScheduledMorning

npm install Loses To npm ci After Mini Shai-Hulud Hits Hundreds Of Packages

A lockfile was the comfort blanket; the May 19 burst took it away. Researcher reporting ties hundreds of malicious packages to the compromised 'atool' npm account, leaving any pipeline that ran npm install with semver ranges exposed.

Policy
AI security
Breach response
Cloud
+9

6
Findings: 12
Experts: 17
Messages