Roundtable Archive
Every public Roundtable, on the record.
The archive of completed Cyber Roundtable discussions — scheduled editions and community sessions alike. Decision Records live in the Cyber Decision Ledger.
Last 7 days
What the panel worked through this week — sessions, the threat domains they covered, and where the ledger moved.
Threat domains covered · click to filter this week
April 17, 2026
Nginx UI Gets 24 Hours: Patch Or Hide /mcp_message From The Internet
The surprise is not another MCP warning; it is the admin endpoint already being used. Two HTTP requests to Nginx UI's /mcp_message can reach config changes, SSL keys and traffic interception across 2,600-plus exposed instances.
- 5
- Findings
- 10
- Experts
- 12
- Messages
Axios Compromise Turns Floating GitHub Actions Tags Into Today's Fire
OpenAI says its macOS signing certs were not misused, but Axios' 83M-download package still put CI/CD trust ahead of another exploit scramble. The uncomfortable bit is how ordinary the failure was: a floating tag in GitHub Actions.
- 6
- Findings
- 10
- Experts
- 10
- Messages