Gotham Social Media Recap

Gotham Social Media Recap

By Eric Corcoran
Posted in Technology Week in Review
On October 23, 2026

Monday 10/19

Inside the Q3 2026 Brand Phishing Report: Microsoft Now Accounts for One in Three Brand Impersonation (Check Point)

In Q3 2026, Microsoft was the most impersonated brand in phishing attacks, accounting for 33% of all brand impersonation attempts tracked by Check Point Research, up from 23% in Q2. Attackers favor Microsoft because stolen Microsoft credentials can unlock an entire corporate environment.

https://blog.checkpoint.com/security/inside-the-q3-2026-brand-phishing-report-microsoft-now-accounts-for-one-in-three-brand-impersonation/

Attack Surface Management Assessment

How well do you know your attack surface? Gotham’s complimentary Attack Surface Management Assessment, powered by Axonius, provides a comprehensive view of the potential entry points attackers could use to access your digital assets. Going beyond traditional vulnerability scans, we help uncover exposed and overlooked assets that may otherwise go unnoticed.

Visit https://www.gothamtg.com/pub/itempdf/20260528095350_GothamAttackSurfaceManagementAssessment.pdf to learn how Gotham helps IT teams gain clearer visibility into the entry points attackers may try to exploit.

Tuesday 10/20

Simplify Multi-Hypervisor Protection With Unified Policy and Layered Security (Rubrik)

Investments in automated policy consistency and layered security are foundational to hypervisor modernization. All other efforts, from threat detection to recovery, depend on these two conditions. 

https://www.rubrik.com/blog/technology/26/10/simplify-multi-hypervisor-protection-with-unified-policy-and-layered-security

CIS Safeguard 16.1: Establish and Maintain a Secure AppDev Process

https://www.gothamtg.com/blog/cis-safeguard-161-establish-and-maintain-a-secure-appdev-process

Wednesday 10/21

What Is Autonomous Endpoint Management? A Quick Guide for IT Leaders (ControlUp)

Autonomous endpoint management (AEM) is a new approach to managing laptops, desktops, mobile devices, and servers that combines real-time visibility, intelligent decisioning, and automated action. Instead of waiting for users to report problems or IT to work through another ticket queue, AEM identifies issues and handles routine fixes automatically within the policies and guardrails IT defines.

https://www.controlup.com/blog/what-is-autonomous-endpoint-management/

CIS Benchmark Compliance

CIS benchmarks are one of the best ways to harden your environment, but applying hundreds of system-specific settings by hand is slow, error-prone, and nearly impossible to keep current.

Gotham's Managed CIS Benchmark Compliance Service, powered by Senteon Managed Endpoint Hardening, assesses your security posture, automatically applies CIS-recommended configurations across your workstations and servers, and monitors for drift, so your systems stay hardened without adding to your IT team's workload.

Be audit-ready without the manual work. Learn more: https://www.gothamtg.com/pub/itempdf/20260527153039_GothamManagedCISBenchmarkCompliance.pdf

Thursday 10/22

As AI Is Reshaping the Data Center, Security Has to Keep Up. (Check Point)

As data centers support more sensitive information, regulated workloads, and proprietary AI systems, security teams need consistent policy, clean audit trails, and evidence that controls remain active across the environment.

https://blog.checkpoint.com/hybrid-mesh/as-ai-is-reshaping-the-data-center-security-has-to-keep-up/

Friday 10/23

Why valid permissions aren’t enough to secure AI (Cyera)

Network controls and identity checks alone are not enough. An agent can have valid permissions and still access sensitive data it does not need. To control what an agent can access, you need to know three things: which data is sensitive, who is allowed to see it, and whether the agent needs it to do its job.

https://www.cyera.com/blog/why-valid-permissions-arent-enough-to-secure-ai

What Security Metrics Actually Matter? (Horizon3)

Organizations should measure whether proven attack paths are decreasing across testing cycles and, more importantly, whether the impacts those paths produce are being reduced. One path to a business-critical system may matter more than dozens of exploitable vulnerabilities that lead nowhere consequential.

https://horizon3.ai/intelligence/blogs/ctem-security-metrics-that-matter/