Gotham + ReversingLabs Present

RL NYC Roadshow

Third-Party Risk: The Hidden Threat in Commercial Software

Gotham-and-RL-NYC-Roadshow_logos

Date: October 16, 2025 at 5:00pm

Location: Café Boulud - Maison Barnes

100 E 63rd St

New York, NY 10065

Third-party software breaches are now one of the fastest-growing attack vectors for businesses. The 2025 Verizon DBIR reports a 100% increase in third-party incidents, making them the #2 method of attack—driven heavily by malware hidden in commercial software. This is a new trend Verizon only began tracking last year, thanks to data from ReversingLabs.

The warnings are clear:

  • JPMC recently sounded the alarm in an open letter, citing multiple third-party software compromises impacting their environment.
  • Gartner reports a 300% rise in software supply chain incidents tied to both open-source and commercial components.
  • Only 46% of software vendors can currently produce a complete SBOM to show what’s inside their products.

Legacy security tools are not full protecting the vendors that supply you. Now, every enterprise needs a comprehensive control to ensure that the commercial software you purchase and deploy is trustworthy - and compliant.

Join the Conversation

Please join Ken Phelan, CTO, Gotham Technology Group and Saša Zdjelar, Chief Trust Officer, ReversingLabs for this invite-only session will unpack the hidden risks in the third-party and commercial software you rely on—and provide actionable strategies to answer:

  • Do you really know what’s in the software you acquire and deploy?
  • How do you uncover hidden malware or embedded AI components?
  • What compensating controls can reduce third-party exposure?
  • How do you manage the growing regulatory pressure tied to commercial software risks?

Key Topics

  • Closing the gap in third-party software risk management
  • Securing the producer-to-buyer relationship in software acquisition
  • Turning the SBOM from static artifact into strategic control
  • Addressing the rise of AI in commercial and third-party software security
Request Your Seat
Back to Top