Articles by 'Eric Corcoran'

By Eric Corcoran, Posted in Technology Week in Review

Monday 11/2 Beyond the edge: Limiting the impact of a compromised application session (Citrix) Treat each published application as a workload with an explicit security contract. Define what it can reach, who can use and administer it, what can run inside it, how data can leave, what evidence it produces, and how responders can contain it. Then prove those decisions with representative users, real workflows, and safe negative tests. https://www.citrix.com/blogs/2026-10/beyond-the-edge-limiting-the-impact-... read more.

• November 06, 2026

By Eric Corcoran, Posted in Technology Week in Review

Monday 10/26 CTO Tech Talk: Rethinking Software Supply Chain Security On October 22, 2026, Gotham's CTO, Ken Phelan, was joined by ReversingLabs' Vice President, Product Management, Erik Thoen, to discuss how the Software Bill of Materials (SBOM) you received might not be telling you the full story and how AI is rapidly changing software supply chain attacks. Click the link below for the full video: https://www.youtube.com/watch?v=B3PoBMbZ9Mg Tuesday 10/27 CIS Safeguard 16.2: Establish and Maintain a... read more.

• October 30, 2026

By Eric Corcoran, Posted in Technology Week in Review

Monday 10/19 Inside the Q3 2026 Brand Phishing Report: Microsoft Now Accounts for One in Three Brand Impersonation (Check Point) In Q3 2026, Microsoft was the most impersonated brand in phishing attacks, accounting for 33% of all brand impersonation attempts tracked by Check Point Research, up from 23% in Q2. Attackers favor Microsoft because stolen Microsoft credentials can unlock an entire corporate environment. https://blog.checkpoint.com/security/inside-the-q3-2026-brand-phishing-report-microsoft-now... read more.

• October 23, 2026

By Eric Corcoran, Posted in Technology Week in Review

Monday 10/12 Solving the Continuous Authorization Conundrum (CrowdStrike) Organizations have realized they must move from a “walled garden” security model, in which all computers inside a firewall or accessing via VPN are assumed to be trusted, to a Zero Trust model in which every access is independently evaluated. https://www.crowdstrike.com/en-us/blog/solving-the-continuous-authorization-conundrum/ Gotham Managed Vulnerability & Prioritization Managed Service With new vulnerabilities... read more.

• October 16, 2026

By Eric Corcoran, Posted in Technology Week in Review

Monday 10/5 As AI agents take on a greater role across the enterprise, building trust requires a clear approach to risk, security, and governance. Join Gotham CTO Ken Phelan at the 2026 WLDA AI Summit on Friday, October 30, at the New York Stock Exchange. Ken will lead a discussion with Straiker CEO Ankur Shah and BMO EVP and Head of Financial Crime and Security Larry Zelvin on building trust in the agentic enterprise. Click the link below to learn more and register: https://wlda.tech/2026-wlda-summit-a... read more.

• October 09, 2026

By Eric Corcoran, Posted in Technology Week in Review

Monday 9/21 Two zones or three? A design framework for zone-resilient Azure workloads (Microsoft) Zone resiliency is not a property you switch on for an entire workload. It’s a set of decisions you make component by component. Some components are fully protected across two zones. Some genuinely need a third. And for a growing number, Azure manages zone redundancy for you, and the best decision is to let it. This post is about how to tell the difference. https://azure.microsoft.com/en-us/blog/two-zo... read more.

• September 25, 2026

By Eric Corcoran, Posted in Technology Week in Review

Tuesday 9/8 CIS Safeguard 13.6: Collect Network Traffic Flow Logs https://www.gothamtg.com/blog/cis-safeguard-136-collect-network-traffic-flow-logs Wednesday 9/9 Most staffing firms match resumes to job descriptions. We match technical talent to real technical environments. Why? Staffing at Gotham isn't standalone. It's built on the same technical foundation as our Professional Services organization. Our recruiters aren't screening in a vacuum. They're backed by a team that lives inside tech stacks and... read more.

• September 18, 2026

By Eric Corcoran, Posted in Technology Week in Review

Monday 8/31 Rethink Hybrid Identity: It Is Not the Destination (HYPR) Hybrid identity persists not because modern workforces require it, but because many organizations continue to support legacy applications, legacy infrastructure, legacy authorization models, and operational processes that predate cloud computing. The continued existence of those dependencies should not be mistaken for validation of hybrid identity as a long-term strategy. https://www.hypr.com/blog/rethink-hybrid-identity-it-is-not-the-... read more.

• September 04, 2026

By Eric Corcoran, Posted in Technology Week in Review

Monday 8/24 How to Spot and Stop Rogue Device Joins (Wiz) Once a rogue device is successfully registered, attackers typically move on to the objectives that matter most, accessing Microsoft 365 resources, exfiltrating emails, maintaining persistence or expanding their foothold within the tenant. https://www.wiz.io/blog/detecting-entra-device-registration-abuse No Phishing Email Required: How Attackers Compromise the IT Helpdesk (Abnormal AI) As attackers continue to refine their tactics, the helpdesk d... read more.

• August 28, 2026

By Eric Corcoran, Posted in Technology Week in Review

Monday 8/17 Ransomware Didn’t Slow Down in Q2 2026. It Just Spread Out. (Check Point) In Q1, the top 10 groups controlled 71% of victims across just 71 active groups, a tight, top heavy market. By Q2, that eased to 57.6%, and active groups climbed to 93, the highest on record. https://blog.checkpoint.com/security/ransomware-didnt-slow-down-in-q2-2026-it-just-spread-out/ The AI You Can't See: Why Shadow AI Is a Visibility Problem, Not a Blocking Problem (Island) Most security teams believe they kn... read more.

• August 21, 2026