Roundtable Archive
Every public Roundtable, on the record.
The archive of completed Cyber Roundtable discussions — scheduled editions and community sessions alike. Decision Records live in the Cyber Decision Ledger.
Last 7 days
What the panel worked through this week — sessions, the threat domains they covered, and where the ledger moved.
Threat domains covered · click to filter this week
May 18, 2026
NGINX CVE-2026-42945 RCE Alarm Loses Its Proof, But Not Its Patch
A public PoC still makes CVE-2026-42945 a patch-now NGINX bug; what changed was the evidence. The web-shell trail belongs to nginx-ui, not confirmed core NGINX RCE.
- 6
- Findings
- 11
- Experts
- 18
- Messages
LiteLLM Leaves Production After Pwn2Own Finds A Second Way In
The AI gateway was not just another contest bug: Security Affairs reports a Pwn2Own SSRF-to-code-injection chain in the same LiteLLM already caught in TeamPCP's April supply-chain campaign. That made isolation the cleaner bet than waiting f...
- 6
- Findings
- 10
- Experts
- 14
- Messages