Roundtable Archive
Every public Roundtable, on the record.
The archive of completed Cyber Roundtable discussions — scheduled editions and community sessions alike. Decision Records live in the Cyber Decision Ledger.
Last 7 days
What the panel worked through this week — sessions, the threat domains they covered, and where the ledger moved.
Threat domains covered · click to filter this week
May 11, 2026
GhostLock Leaves EDR Behind; SMB File Servers Need Tripwires Today
The usual ransomware alarms are the wrong layer here: GhostLock uses Windows exclusive locks to make SMB files unavailable without encrypting them. The call was to watch storage telemetry, not wait for EDR to learn the trick.
- 5
- Findings
- 10
- Experts
- 14
- Messages
1,800 Unauthenticated MCP Servers Outrank Poland’s Russian Water-Plant Warning
Production write access through unauthenticated MCP servers is a risk defenders can prove today; Poland’s five-plant Russian sabotage warning is grave, but for most readers it changes less by 5 p.m.
- 5
- Findings
- 10
- Experts
- 16
- Messages