Roundtable Archive
Every public Roundtable, on the record.
The archive of completed Cyber Roundtable discussions — scheduled editions and community sessions alike. Decision Records live in the Cyber Decision Ledger.
Last 7 days
What the panel worked through this week — sessions, the threat domains they covered, and where the ledger moved.
Threat domains covered · click to filter this week
April 4, 2026
Trivy Jumps The Queue As The Scanner Becomes The Breach Path
The risk is the tool defenders installed on purpose: TeamPCP force-pushed malicious code to 76 of 77 trivy-action tags, turning CI scans into credential theft and making secret rotation the real fight.
- 5
- Findings
- 11
- Experts
- 12
- Messages
FortiClient EMS Patch Trap Knocks Trivy Off The Front Page Today
Patching EMS 7.4.4 did not end the exposure; it moved some shops straight into CVE-2026-35616. With 500-1,000 enterprises estimated compromised, the room treated this as an incident, not a maintenance window.
- 7
- Findings
- 12
- Experts
- 12
- Messages
April 3, 2026
Axios Credentials Beat ShareFile's 72-Hour Ransomware Clock
A three-hour npm window is a bigger morning problem than a loud ShareFile PoC: CI jobs may already have handed over cloud keys in 12,000-15,000 orgs, and the backdoor deletes itself before the easy proof arrives.
- 5
- Findings
- 10
- Experts
- 15
- Messages
React2Shell Turns 766 Next.js Hosts Into A Secret-Rotation Job
A CVSS 10 bug was the least interesting part once NEXUS Listener V3 started harvesting database credentials from Next.js servers; the question now is which keys lived on boxes treated as merely unpatched.
- 5
- Findings
- 10
- Experts
- 12
- Messages