Blog

By Eric Corcoran, Posted in Technology Week in Review

Monday 10/19 Inside the Q3 2026 Brand Phishing Report: Microsoft Now Accounts for One in Three Brand Impersonation (Check Point) In Q3 2026, Microsoft was the most impersonated brand in phishing attacks, accounting for 33% of all brand impersonation attempts tracked by Check Point Research, up from 23% in Q2. Attackers favor Microsoft because stolen Microsoft credentials can unlock an entire corporate environment. https://blog.checkpoint.com/security/inside-the-q3-2026-brand-phishing-report-microsoft-now... read more.

• October 23, 2026

By Steve Gold, Posted in Security

Watch Andor on Disney+ and pay close attention to how Luthen Rael runs the Rebellion. He does not wing it. Every cell has defined procedures, defined limits, and defined checks. Security is not something he layers on after the operation is planned. It is built into how every mission runs from the first conversation. Your software development process should work exactly the same way. What Is Establish and Maintain a Secure Application Development Process? It means security is part of how you build software... read more.

• October 20, 2026

By Eric Corcoran, Posted in Technology Week in Review

Monday 10/12 Solving the Continuous Authorization Conundrum (CrowdStrike) Organizations have realized they must move from a “walled garden” security model, in which all computers inside a firewall or accessing via VPN are assumed to be trusted, to a Zero Trust model in which every access is independently evaluated. https://www.crowdstrike.com/en-us/blog/solving-the-continuous-authorization-conundrum/ Gotham Managed Vulnerability & Prioritization Managed Service With new vulnerabilities... read more.

• October 16, 2026

By Ed Bratter, Posted in Infrastructure, Security, Support

You wake up one morning, grab your coffee, and sign in to Microsoft Outlook (or any other app secured by Microsoft Entra ID). You enter your username and password, approve the usual MFA prompt, and expect to see your inbox. Instead, you get an unfamiliar screen: "Let's keep your account secure." If you're seeing this, keep reading to learn what's going on and what to do about it. For many organizations, this prompt started appearing in September 2026. It's the first phase of Microsoft's plan to retire S... read more.

• October 15, 2026

By Ken Phelan, Posted in Security

I've been reading about drones. I recommend it, in the way I'd recommend a horror movie. Here's the short version. In Ukraine right now, drones cause 70 to 80 percent of all battlefield casualties. Not artillery. Not tanks. Quadcopters. Russia claims production rates approaching seven million of them a year. Ukraine builds four million. The drone that's winning the war costs roughly a thousand dollars and kills a five-million-dollar tank. The most advanced militaries on earth spent eighty years and trillio... read more.

• October 14, 2026

By Bert Amodol, Posted in Security

What two real incidents taught us about keeping pace with an AI-speed adversary. Three weeks ago, I wrote that your SOC isn't slow; the fight has simply gotten faster. I ended with a question: what was the first thing your team changed when AI appeared on the other side of that fight? I didn't expect my own colleagues to prove the point just days later, and in public. Within days of that post, Gotham engineers were responding to live incidents. Brian Wagner spent a week investigating the NetScaler® a... read more.

• October 13, 2026

By Steve Gold, Posted in Security

In John Wick: Chapter 4 (2023), the High Table does not operate on goodwill. Every obligation is written, formalized, and binding. The marker system works because the terms are explicit and non-negotiable. Nobody at the High Table closes a deal with a handshake and a smile, because a vague agreement in that world gets you killed. Your vendor contracts work the same way: if security requirements are not in writing, they do not exist. What Is Ensure Service Provider Contracts Include Security Requirements? ... read more.

• October 13, 2026

By Eric Corcoran, Posted in Technology Week in Review

Monday 10/5 As AI agents take on a greater role across the enterprise, building trust requires a clear approach to risk, security, and governance. Join Gotham CTO Ken Phelan at the 2026 WLDA AI Summit on Friday, October 30, at the New York Stock Exchange. Ken will lead a discussion with Straiker CEO Ankur Shah and BMO EVP and Head of Financial Crime and Security Larry Zelvin on building trust in the agentic enterprise. Click the link below to learn more and register: https://wlda.tech/2026-wlda-summit-a... read more.

• October 09, 2026

By Pablo Vidal, Posted in Security

In my last post I wrote about how AI has changed day-to-day perimeter work: policy cleanup, onboarding new services, all the documentation around a change. This time I want to talk about the part of the job where speed matters most: the moment something looks wrong and you need to know, right now, whether it's real, how far it went, and what to block. If you read Ken Phelan's recent post, Twenty-Three Hours, you already know the story. We patched our remote-access gateways on a Saturday, and about 23 hours... read more.

• October 08, 2026

By Steve Gold, Posted in Security

In Dune: Part Two, Paul Atreides does not treat every alliance the same way. The Fremen are strategic partners with deep access to his plans and survival. The Spacing Guild controls critical infrastructure that nothing in the known universe moves without. House Corrino is a threat dressed up as diplomacy. Paul classifies each relationship by what it controls and what risk it carries, because treating them equally would get him killed. Your vendor ecosystem works exactly the same way. What Is Classify Servi... read more.

• October 06, 2026