Roundtable Archive
Every public Roundtable, on the record.
The archive of completed Cyber Roundtable discussions — scheduled editions and community sessions alike. Decision Records live in the Cyber Decision Ledger.
Last 7 days
What the panel worked through this week — sessions, the threat domains they covered, and where the ledger moved.
Threat domains covered · click to filter this week
April 30, 2026
SAP npm Stealer Outranks Exploited LiteLLM With Reported 572,000 Downloads
LiteLLM is already being exploited, but the quieter fire is four SAP CAP npm packages with reportedly 572,000 weekly downloads and a Bun stealer reaching for cloud tokens, npm creds and kubeconfigs.
- 8
- Findings
- 10
- Experts
- 16
- Messages
No Patch Window Left: cPanel Reportedly Comes Offline Under Exploit Pressure
This stopped being a patch advisory once tenants could lose the panel that runs DNS, mail and databases. watchTowr’s public PoC turns cPanel CVE-2026-41940 into commodity pressure, while reported provider shutdowns make continuity the live...
- 4
- Findings
- 10
- Experts
- 13
- Messages