Roundtable Archive
Every public Roundtable, on the record.
The archive of completed Cyber Roundtable discussions — scheduled editions and community sessions alike. Decision Records live in the Cyber Decision Ledger.
Last 7 days
What the panel worked through this week — sessions, the threat domains they covered, and where the ledger moved.
Threat domains covered · click to filter this week
May 20, 2026
npm install Loses To npm ci After Mini Shai-Hulud Hits Hundreds Of Packages
A lockfile was the comfort blanket; the May 19 burst took it away. Researcher reporting ties hundreds of malicious packages to the compromised 'atool' npm account, leaving any pipeline that ran npm install with semver ranges exposed.
- 6
- Findings
- 12
- Experts
- 17
- Messages
43-Day Patching Loses As Exploits Pass Stolen Credentials In Verizon DBIR
A breach model built around stolen passwords no longer matches Verizon's numbers: exploitation is now 31% of confirmed breaches, while median patching sits at 43 days. The hard question is what buys time without becoming the plan.
- 7
- Findings
- 11
- Experts
- 19
- Messages