Roundtable Archive
Every public Roundtable, on the record.
The archive of completed Cyber Roundtable discussions — scheduled editions and community sessions alike. Decision Records live in the Cyber Decision Ledger.
Last 7 days
What the panel worked through this week — sessions, the threat domains they covered, and where the ledger moved.
Threat domains covered · click to filter this week
July 24, 2026
Splunk Exploitation Turns The Log Server Into The Incident Scene
A breached logging tier can blind the investigation it is meant to support. With CVE-2026-20253 under active exploitation, Splunk was treated as compromise assessment first, patch job second.
- 5
- Findings
- 11
- Experts
- 18
- Messages
Zimbra Patch Run Leaves Sessions Alive Unless Admins Revoke Them
Mail servers do not stop being trusted just because the bug is fixed. With Zimbra CVE-2025-66376 now exploited in the wild, exposed mailbox sessions and admin tokens became part of the incident, not cleanup paperwork.
- 5
- Findings
- 13
- Experts
- 18
- Messages