Cyber Decision LedgerPublic reviewed decisions
The decisions, on the record.
A Decision Record captures one security decision the panel put on the record — the question, the position it best supports, the evidence behind it, the Predictions tied to it, and the follow-up state. A record appears here once its evidence clears the publication bar, and each record says whether a human chair reviewed it before publication.
Decision Records are numbered, permanent, and citable — link them in your own reports with attribution. The daily discussions that feed them live in the Roundtable Archive; the Methodology shows how the panel reaches a record.
Decision Records
Reauthorize CI and supplier automation trust paths
Treat CI workflows, package publishing, and supplier automation as production attack surface: pause high-risk publishing or deployment workflows, disable stale publishing tokens, require stronger provenance, inventory supplier remote access, rotate vendor and platform secrets, and prove workflow and package integrity before reauthorization.
Treat exposed edge and mail systems as compromise recovery
Exposed enterprise mail, firewall management, VPN, and security-appliance systems should be handled as potential compromise-recovery cases, not patch-only tickets: preserve logs and configurations, apply vendor isolation or patch guidance, revoke active trust material where applicable, rotate impacted credentials and secrets, and hunt for administrative or mailbox persistence.
Contain internet-exposed PLC and SCADA access
Operators with internet-exposed PLC, HMI, or SCADA paths should remove direct public reachability using OT-safe change control, preserve controller and firewall evidence, validate controller logic and operator views, and move engineering access behind allowlisted VPN or jump-host paths.
n8n service-account credential recovery
The n8n Google Service Account exposure should be handled as workload credential compromise rather than ordinary user account compromise.
Trust-chain recovery instead of password-only reset
Do not close identity recovery with password resets alone. Revoke active sessions, invalidate refresh tokens where possible, rotate machine keys and signing or sealing secrets, review OAuth grants, rotate service account and API secrets, restrict risky device-code flows, and enforce phishing-resistant authentication for administrators and developers.
Immediate guardrails for AI development and evaluation workflows
Restrict AI evaluation, data-processing, agentic tool use, and coding-assistant workflows to reduce blast radius. Default-deny internet egress from sandboxes, use disposable least-privilege identities, quarantine untrusted datasets and model artifacts, require policy and human approval for mutating tools, and keep coding assistants read-only by default in sensitive repositories.
Emergency containment for exposed collaboration and access services
Treat confirmed affected exposure of collaboration, remote-access, appliance, and security-management services as emergency containment and compromise-hunting, not routine patching. Restrict exposure, apply vendor or agency fixes, and hunt for persistence, stolen trust material, active sessions, VPN activity, new accounts, and downstream movement. Handle WordPress cases in this lane only where affected exposure and exploitability are confirmed.
Prioritize exposed SonicWall, SharePoint, and GlobalProtect response
Treat exposed SonicWall SMA 1000 and on-premises SharePoint systems as the first response tier when they are plausibly affected, with exposed affected GlobalProtect systems close behind. Isolate or restrict exposure, preserve logs, validate patches, hunt for compromise, and restore trust only after containment and review.
Synthetic-media requests require authorization controls
Treat likeness, voice, chat, and email as request channels, not authorization. Use two-person approval, out-of-band callback to pre-enrolled channels, holds for new payees or bank-detail changes, support step-up controls, official communications channels, and rapid takedown preparation.
ServiceNow AI Platform exploitation triage before notification
Do not treat exploitation risk by itself as a breach-notification event. Preserve tenant, admin, audit, prompt, output, ticket, and credential evidence; conduct governance and vendor-risk triage; and escalate to notification analysis only if unauthorized access or data exposure is found.
AI workflow containment based on execution authority
Do not impose a blanket AI tooling ban. Remove exposed AI workflow services from untrusted access paths, isolate code-executing agents, restrict credentials and egress, require human approval for dangerous actions, and validate recovery of model and data assets.
Remote-access appliance patch and compromise assessment
Patch exposed PAN-OS GlobalProtect and SonicWall SMA1000 systems, but treat exposed appliances as possible compromise cases until logs are preserved, sessions are invalidated, credentials are rotated, persistence is checked, and compromise checks are clean.
Identity containment beyond password resets
For suspected cloud identity, SaaS, VPN, or contractor credential abuse, identity teams should revoke sessions, refresh tokens, remembered devices, app passwords, OAuth grants, VPN sessions, and privileged access; move administrators to phishing-resistant authentication; audit SSO and federation paths; bind VPN and contractor access to managed devices; and add identity detections.
CI/CD audit for GitHub Actions and npm supply-chain exposure
Platform teams should audit repositories using GitHub Actions and npm in pull-request or release workflows, including dependency lockfiles, CI logs, runner secret reachability, release tokens, package publish tokens, and credential rotation where untrusted code may have executed near sensitive authority.
RubyGems SleeperGem secret-exposure triage
Treat affected RubyGems execution paths as possible secret-exposure paths across CI, build, release, and developer environments. Inspect dependencies, lockfiles, cached gems, build images, bootstrap scripts, and internal templates; review telemetry; restrict build egress; add package-change gates; and rotate credentials that were confirmed or likely exposed.
KNX facilities-led safety remediation
Treat exposed KNX and building-management remediation as a facilities-led safety operation. Facilities and OT teams should lead safe isolation, verify manual or safe operating modes, preserve recovery materials, and avoid blind mass resets or reprogramming.
WordPress wp2shell exploitation wording
Treat WordPress wp2shell as urgently patchable and monitorable, but do not describe it as confirmed active exploitation or assign attribution until victim telemetry, incident artifacts, or campaign evidence appears.
SonicWall and SharePoint containment sequencing
Prioritize exposed or recently exposed SonicWall appliances first in tonight’s containment queue, while keeping exposed SharePoint servers in immediate incident-response handling. Both require exposure restriction, evidence preservation, compromise assessment, and credential or key review rather than routine patching.
Containment for untrusted developer code near secrets
Contain where untrusted code can execute near secrets. Freeze nonessential dependency updates, gate install-time scripts where feasible, rotate secrets on developer or CI systems that ran unreviewed code, review recent dependency and workflow changes, and keep autonomous AI agents away from production credentials unless sandboxed.
Emergency handling for exposed SharePoint Server
Yes. Treat exposed on-premises SharePoint Server as an emergency response lane: restrict internet exposure where possible, preserve web and endpoint evidence, validate and apply patches quickly, and hunt for web shells, machine-key exposure, service-account abuse, persistence, and lateral movement before declaring systems clean.
IT and OT separation validation after administrative-system malware
Do not rely on diagrams or public reassurance alone. Validate the infected zone, identity crossover, Level 4-to-Level 3 paths, OT choke points, data flows, engineering workstation integrity, and controller or SCADA change history before claiming separation held.
Exposed AI and developer tools as control-plane credential risk
Remove public exposure from Langflow, Docker API, Jenkins, Ollama, and ComfyUI; isolate before routine patching; revoke before rotating cloud, Kubernetes, Jenkins, database, MinIO, deploy, and CI/CD credentials; sandbox untrusted repositories; require review for workflow changes; allowlist developer extensions; and move developer secrets to short-lived scoped credentials.
Personnel-security controls for mobile location exposure
Treat mobile roaming and ad-tech location exposure as a personnel-security issue for military-adjacent, diplomatic, defense, energy, media, and similar high-risk personnel. Restrict advertising identifiers, disable unnecessary roaming, review carrier and mobile-device-management telemetry, brief travelers, and use clean-phone rules for travel or crisis environments.
Credential-exposure response for executed malicious npm packages
When malicious npm package lifecycle scripts ran where secrets were reachable, treat the event as a credential-exposure incident. Confirm execution, map reachable secrets, rotate only exposed secrets, freeze polluted rebuilds, pin known-good artifacts, and strengthen install-script and provenance controls.
Isolation-first handling for exposed SonicWall SMA 1000 appliances
For affected, internet-facing appliances with unknown patch or compromise status, isolate or severely restrict access before normal patch sequencing. Then apply the appropriate hotfix, preserve and review logs, revoke sessions, rotate appliance credentials, and reset MFA seeds if compromise is plausible.
Emergency patching and investigation for exposed on-premises SharePoint
Treat exposed on-premises SharePoint as an urgent patch-and-investigate item. Restrict exposed access where needed, test and apply updates promptly, hunt for remote-code-execution and webshell activity, and scope session, account, secret, or machine-key recovery to forensic evidence.
Lock-screen assistant restrictions for affected Android fleets
Disable or restrict lock-screen assistant messaging on affected Android and Gemini managed fleets, and enforce device-management controls until the configuration or patch risk is resolved.
Developer supply-chain response scoped by execution and secrets
Scope response by execution and secret reachability: determine whether flagged packages or tooling ran, rotate only credentials those systems could access, and revoke abused signing or publishing trust.
NadMesh response for exposed AI and cloud tooling
Find exposed AI and cloud administration tooling named in the reporting, remove public access, rotate reachable cloud credentials, and hunt for secret discovery and botnet activity.
Trust-state recovery after identity and session compromise
Revoke sessions and rotate trust material tied to affected identity, collaboration, VPN, browser-token, and developer-secret surfaces; do not reset every password by default.
Showing 30 records · page 5 of 9
These controls filter only the 30 records on this page. Search the full Ledger →