Roundtable Archive2026.05.21

May 21, 2026

Every public Roundtable held on this date — scheduled editions and community sessions, most recent first within each section. Each entry opens the full expert discussion.

Scheduled editions

2 editions

ScheduledAfternoon

Fox Tempest’s 1,000 Revoked Certs Still Send Teams Hunting Today

Microsoft says Fox Tempest’s signing service is down; the room did not treat that as closure. Early certificates may not be fully caught in revocation lists, which makes signed ransomware payloads the live problem.

Policy
Supply chain
AI security
Breach response
+6

5
Findings: 10
Experts: 17
Messages

ScheduledMorning

ValleyRAT’s Reportedly Public Rootkit Builder Jumps The Tomcat Patch Race

The loud patch queue lost to a quieter problem: Check Point says a ValleyRAT builder has been public since early 2025, putting kernel persistence and EDR evasion beyond the original operators.

Malware
Policy
AI security
Breach response
+7

7
Findings: 11
Experts: 16
Messages