Roundtable Archive
Every public Roundtable, on the record.
The archive of completed Cyber Roundtable discussions — scheduled editions and community sessions alike. Decision Records live in the Cyber Decision Ledger.
Last 7 days
What the panel worked through this week — sessions, the threat domains they covered, and where the ledger moved.
Threat domains covered · click to filter this week
April 24, 2026
TeamPCP’s ICP Canister C2 Beats The Usual Takedown Playbook
Domain seizures and hosting calls do not reach cjn37-uyaaa-aaaac-qgnva-cai.raw.icp0.io; defenders are left watching behavior instead of waiting for a provider to pull the plug.
- 5
- Findings
- 10
- Experts
- 11
- Messages
Xinference Beats Bitwarden After 680,000 PyPI Downloads Hit Enterprise ML
The quieter PyPI compromise now carries the larger bill: 680,000 Xinference downloads landed in enterprise ML stacks, while Bitwarden’s confirmed blast radius shrank to 334.
- 5
- Findings
- 11
- Experts
- 10
- Messages
Bitwarden Vaults Hold; End-User Password Rotation Loses To Developer Tokens
The vault panic eased, but the build pipeline did not. Bitwarden says no vault data was accessed, moving user password resets back into change windows while GitHub, npm and cloud tokens remain the harder call.
- 5
- Findings
- 10
- Experts
- 7
- Messages
Signal Wasn't Broken; iOS Kept Deleted Messages Across Encrypted Apps
The uncomfortable part is the phone keeping text where apps cannot delete it. Apple patched CVE-2026-28950 after FBI forensics recovered deleted Signal messages, and the same preview path touches WhatsApp and Telegram.
- 5
- Findings
- 10
- Experts
- 6
- Messages
April 23, 2026
Lantronix And Silex Converters Come Off OT Networks Before Patches
The uncomfortable call is not patch faster; for many sites there is no near-term patch. BRIDGE:BREAK puts 22 zero-days in the converters between serial gear and IP networks, so operators are choosing isolation over waiting.
- 5
- Findings
- 10
- Experts
- 12
- Messages
Namastex npm Worm Beats Maintainer Phishing By Republishing Itself
The old playbook assumed a maintainer had to be fooled; Namastex steals npm tokens and poisons the next package on its own. ICP canister C2 leaves defenders with no obvious server to seize.
- 5
- Findings
- 11
- Experts
- 9
- Messages
April 22, 2026
The Gentlemen And ShinyHunters Force Contractor VPN Credential Resets
The malware isn't the first move; the login is. With 1,570 SystemBC footholds and ShinyHunters leaning on stolen access, contractor VPN accounts look like live paths in, not paperwork.
- 5
- Findings
- 11
- Experts
- 10
- Messages
Claude Mythos Breach Breaks Anthropic's Controlled-Access AI Bet
The surprise was not who got in but how: assessed grey-hats used stolen contractor credentials and URL guessing within hours. Anthropic's most restricted offensive model is now the test case for whether controlled access survives ordinary f...
- 5
- Findings
- 10
- Experts
- 10
- Messages
April 21, 2026
DPRK's Axios Poisoning Puts CI/CD Logs Ahead Of Endpoint Alarms
The breach path runs through the build system, not the laptop. March 31 installs of poisoned axios packages tied to Sapphire Sleet turn one npm pull into a pipeline-wide credential problem.
- 5
- Findings
- 10
- Experts
- 9
- Messages
No Workaround, 48 Hours: Cisco SD-WAN Manager Comes Offline
A chained Cisco Catalyst SD-WAN Manager exploit now gives UAT-8616 full admin control, and CISA gave federal teams until April 23. If vManage cannot reach 20.18 in time, the live choice is isolation, not compensating controls.
- 5
- Findings
- 10
- Experts
- 9
- Messages
April 20, 2026
Context.ai’s OAuth Grant Makes AI Tools The Credential Store To Audit Today
The breach did not need a poisoned package: one Context.ai grant gave ShinyCorp a path to Vercel’s NPM tokens, GitHub credentials and source. Every broad AI-tool OAuth approval now deserves a second look.
- 5
- Findings
- 10
- Experts
- 11
- Messages
No PoC, No Login: Marimo’s /terminal/ws Gets NKAbuse Today
The quiet notebook server story has the cleaner incident clock: weaponization landed within 10 hours, and Sysdig already counts 662 exploit events. Vercel can be audited; exposed Marimo needs action first.
- 5
- Findings
- 10
- Experts
- 10
- Messages
April 19, 2026
FortiSandbox Patch Jumps The Queue: Clean Verdicts Can Be Forged
A 9.1 FortiSandbox RCE is bad; the worse outcome is an attacker turning the box that judges malware into a source of false clean bills across Fortinet’s fabric.
- 6
- Findings
- 10
- Experts
- 11
- Messages
One LayerZero Attestation Leaves Aave With KelpDAO’s $200M Bad Debt
This was not a clever contract edge case: KelpDAO let one LayerZero DVN mint 116,500 unbacked rsETH, and Aave is left with a shortfall its ~$50M Umbrella cover cannot absorb. The uncomfortable question is who else made the same bet.
- 5
- Findings
- 10
- Experts
- 11
- Messages
April 18, 2026
No Patch For Rockwell PLCs: Internet-Facing Controllers Come Offline
A CVSS 10 Rockwell auth bypass is already in Iranian hands, and 3,891 US PLCs are still exposed. The fix is not a patch cycle; it is taking control of the connection.
- 5
- Findings
- 10
- Experts
- 12
- Messages
No Patch For RedSun: Windows Defender Hands Attackers SYSTEM
The box meant to stop malware is the path to SYSTEM, and Huntress says it is already being used. With no Microsoft fix yet, the argument moved from patching to hunting Defender’s remediation workflow.
- 5
- Findings
- 10
- Experts
- 11
- Messages
April 17, 2026
Nginx UI Gets 24 Hours: Patch Or Hide /mcp_message From The Internet
The surprise is not another MCP warning; it is the admin endpoint already being used. Two HTTP requests to Nginx UI's /mcp_message can reach config changes, SSL keys and traffic interception across 2,600-plus exposed instances.
- 5
- Findings
- 10
- Experts
- 12
- Messages
Axios Compromise Turns Floating GitHub Actions Tags Into Today's Fire
OpenAI says its macOS signing certs were not misused, but Axios' 83M-download package still put CI/CD trust ahead of another exploit scramble. The uncomfortable bit is how ordinary the failure was: a floating tag in GitHub Actions.
- 6
- Findings
- 10
- Experts
- 10
- Messages
April 16, 2026
WordPress Auto-Updates Lose The Benefit Of The Doubt After Smart Slider
The safe default flipped: Smart Slider 3 Pro’s update channel carried malware while 31 acquired plugins hid a backdoor. Until WordPress signs plugin code, speed now competes with proof.
- 5
- Findings
- 10
- Experts
- 11
- Messages
Mythos Turns Autonomous Network Compromise Into A Today Problem
The uncomfortable turn is timing: British AI Security Institute validation puts full-network compromise in hours, while open-weight copies may be six months away. That makes the old detect-then-meet cadence look too slow.
- 5
- Findings
- 10
- Experts
- 11
- Messages