Monday 10/26
CTO Tech Talk: Rethinking Software Supply Chain Security
On October 22, 2026, Gotham's CTO, Ken Phelan, was joined by ReversingLabs' Vice President, Product Management, Erik Thoen, to discuss how the Software Bill of Materials (SBOM) you received might not be telling you the full story and how AI is rapidly changing software supply chain attacks.
Click the link below for the full video:
https://www.youtube.com/watch?v=B3PoBMbZ9Mg
Tuesday 10/27
CIS Safeguard 16.2: Establish and Maintain a Process to Address Software Vulns.
https://www.gothamtg.com/blog/cis-safeguard-162-establish-and-maintain-a-process-to-address-software-vulns
This past weekend, Gotham was the Presenting Sponsor for Step Up for The Arc Rockland Walk at Boulder Stadium. We’re honored to support The Arc of Rockland and its continued efforts to create a more inclusive community for all.
Click the link to learn more about The Arc of Rockland: https://arcofrockland.org
Wednesday 10/28
Securing the agentic insider (Microsoft)
Agents have been unleashed in the enterprise, at scale, and their numbers are growing rapidly. These agents are frequently overprivileged, have access to data, tools and systems and can take actions and make decisions in critical processes. They have become active participants in the enterprise. They are agentic insiders.
https://blogs.microsoft.com/blog/2026/10/19/securing-the-agentic-insider/
Sun Tzu and the Art of AI Warfare
AI is changing the rules of cybersecurity. Passing audits and conducting periodic reviews are no longer enough when attackers use AI to outpace human defenders. In his latest blog, "Sun Tzu and the Art of AI Warfare," Gotham CTO Ken Phelan explores how security teams can adapt ancient strategy to today's cybersecurity challenges.
Click below to read the full article.
https://www.gothamtg.com/blog/sun-tzu-and-the-art-of-ai-warfare
Thursday 10/29
PHP2Shell: Critical PHP Vulnerabilities Enable Unauthenticated Remote Code Execution (Arctic Wolf)
The vulnerabilities affect PHP installations that process web requests, including PHP-FPM, Apache deployments using mod_php, php-cgi, FrankenPHP, and LiteSpeed. The PHP security team considers Apache mod_php the highest-risk configuration because researchers demonstrated exploitation through a single unauthenticated request before application code begins executing.
https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/
The Death Star Problem in Cybersecurity
Without accurate, continuously updated attack surface management—and a disciplined, consistent way to operationalize this management—weaknesses stay invisible until they’re exploited. The Death Star Problem doesn’t come about because you lack data; it happens when you lack dependable, continuous processes to turn fragmented data into verified truth and sustained remediation.
https://www.gothamtg.com/blog/the-death-star-problem-in-cybersecurity
Friday 10/30
New Prompt Injection Techniques Cover Agent-Planning Attacks (CrowdStrike)
Prompt injection started as a simple idea during its initial chatbot phase: Tell the model to ignore its instructions and return information in violation of its guardrails. Now, prompt injection attacks can aim at something harder to see: how an agent plans, and how a model reasons and decides which rules apply.
https://www.crowdstrike.com/en-us/blog/new-prompt-injection-techniques-cover-agent-planning-attacks/
Locked Down and Connected Webinar
Security and IT leaders are being asked to do more with less, making it increasingly challenging to maintain an effective security program.
Join Gotham experts Steven Gold, Jason Santamaria, and Robert Serra on Thursday, November 5, at 1:30 PM to learn how our RemoteAdmin for Firewall and Managed SASE services can help strengthen your network and simplify operations.
Click below to reserve your spot:
https://www.eventbrite.com/e/locked-down-and-connected-managed-firewall-sase-webinar-tickets-2002566655775