Roundtable Archive
Every public Roundtable, on the record.
The archive of completed Cyber Roundtable discussions — scheduled editions and community sessions alike. Decision Records live in the Cyber Decision Ledger.
Last 7 days
What the panel worked through this week — sessions, the threat domains they covered, and where the ledger moved.
Threat domains covered · click to filter this week
April 20, 2026
Context.ai’s OAuth Grant Makes AI Tools The Credential Store To Audit Today
The breach did not need a poisoned package: one Context.ai grant gave ShinyCorp a path to Vercel’s NPM tokens, GitHub credentials and source. Every broad AI-tool OAuth approval now deserves a second look.
- 5
- Findings
- 10
- Experts
- 11
- Messages
No PoC, No Login: Marimo’s /terminal/ws Gets NKAbuse Today
The quiet notebook server story has the cleaner incident clock: weaponization landed within 10 hours, and Sysdig already counts 662 exploit events. Vercel can be audited; exposed Marimo needs action first.
- 5
- Findings
- 10
- Experts
- 10
- Messages