DefenseStorm

Some of the best conversations happen in our customers’ own buildings.

On Tuesday our CEO Steve Soukup joined Georgia’s Own Credit Union and Curql for Unboxed at Georgia’s Own’s office. It was a day of credit union leaders and fintech partners talking about what’s next for the industry.

We’re proud to work with Georgia’s Own, and grateful to Curql for bringing this group together. Thanks for having us!

We're excited for our final Resilience Roadshow stop of the year tomorrow in Charlotte! Join us from 12–5 PM. We can't wait to meet our amazing customers and share what we've been building for banks and credit unions.

Nashville, we're coming your way! Steve Soukup and Gina Hortatsos will be at FINTOP Summit 2026 from October 7–9, and they're looking forward to meeting the bankers who make this event what it is. If you're attending, come find us.

We're excited to be at GoWest MAXX26 in Denver this week! Stop by Booth 627 at Ga***rd Rockies, Oct 6–9, and say hello to the DefenseStorm team and chat cyber risk management. We hope to see you there!

October is Cybersecurity Awareness Month 🔐

It's a good time for every bank and credit union to check the basics: strong passwords, MFA everywhere, and teams who know a phishing email when they see one.

For community financial institutions, security protects more than data. It protects the trust your community places in you.

And we're starting the month on the road! Find the our team next week at:

📍 GoWest MAXX– Denver, CO
📍 FINTOP Summit – Nashville, TN
📍 DefenseStorm's Resilience Roadshow – Charlotte, SC

Stop by and say hello. We'd love to talk about how you're building resilience.

Examiners reviewing your MDR program ask three things: how detection and investigation get demonstrated, whether response actions were timely, and whether there's documented oversight behind it all.
Our new guide to exam ready MDR breaks down what each question requires and how to answer with evidence, not assurances.
https://www2.defensestorm.com/mdr-choices-impact-exams-and-audits-for-banks-and-credit-unions?utm_source=linkedin&utm_medium=organic-social&utm_campaign=mdr-exam-readiness-wp&utm_content=post3-guide

CISA gave federal agencies until September 30 to patch two Citrix NetScaler flaws under active exploitation.

That deadline doesn't apply to your institution. The threat does.

CVE-2026-88771 and CVE-2026-88772 let unauthenticated attackers run commands or achieve full remote code ex*****on on ADC and Gateway devices, the same appliances a lot of banks and credit unions use for remote access. If it's on your network and it's unpatched, an examiner asking about your vulnerability management program is the least of your problems.

Same week, Google flagged ShinyHunters running a new mass-exploitation campaign against Oracle PeopleSoft, deploying web shells and backdoors through a modified exploit that slips past standard WAF protections.

Two live campaigns, two patch windows, one common thread: attackers don't wait for your next change window.

If your team is triaging both of these on top of everything else, that's exactly the kind of workload a Collaborative SOC should be absorbing, not adding to.

We publish a daily CTI bulletin with exactly this kind of financial-sector-relevant threat intel, patch priorities, and context your team can act on the same day. Link in the comments if you want it in your inbox.

Peace of mind is the whole point.

One customer told us: "I feel better now. I can sleep at night."

That's not a tagline we came up with. That's an ISO at a community bank, describing what it means to finally have backup.

We're proud to be that backup, for every bank and credit union who lets us.

More customer stories here: https://www2.defensestorm.com/we-show-up-twenty-four-seven-mdr-for-banks-and-credit-unions?utm_source=facebook&utm_medium=social&utm_campaign=customer-voice

We are excited to be heading to Denver for GoWest MAXX 2026!

Oct 6–9, Ga***rd Rockies. Find our booth if you want to talk about cybersecurity that's actually built for banking — not retrofitted from generic MDR.

Contact us to grab time before the show - https://defensestorm.com/company/contact-us/

AI can now find software vulnerabilities and turn them into working exploits on its own. For the teams defending community banks and credit unions, that raises a fair question: how much of the AI threat conversation is real, and how much is hype?

We had to push this session back due to some last-minute technical issues — good news is it's back on for tomorrow. Our CISO William Wetherill tackles exactly that question. He'll cover what genuinely changes when AI creates the exploits, how to judge any AI security claim you hear, and why defenders still hold an early advantage worth protecting.

It's built for information security leaders at community banks and credit unions, and it's just as useful for anyone working to separate real AI risk from the noise.

Save your seat below. https://cvent.me/xDgQxX