DefenseStorm

DefenseStorm DefenseStorm serves US regional banks and credit unions exclusively. DefenseStorm is a NAFCU Preferred Partner for cloud cybersecurity.

Our GRID Active platform unifies MDR, risk and governance, backed by our 24×7 SOC of banking experts who act as an extension of your staff. Operating both as a technology system and as a service supported by experts in FI security and compliance, the GRID watches everything on a bank or credit union’s network and matches it to defined policies for real time, complete and proactive cyber exposure readiness, keeping security teams smart and executives accountable. FFIEC CAT and ACET requirements are built-in and automated, as can be other frameworks and an FI’s own policies, to achieve Active Compliance™. A Threat Ready Active Compliance (TRAC) Team™ augments a bank or credit union’s internal team to protect business continuity and skills availability while also ensuring cost-effective coverage and management.

Some of the best people in cybersecurity work at DefenseStorm, and this month we’re celebrating a few of them. 🎉Congratu...
10/23/2026

Some of the best people in cybersecurity work at DefenseStorm, and this month we’re celebrating a few of them. 🎉

Congratulations to our October work anniversaries:

Matt Craft: 7 years
Brandan Hunter: 7 years
Ian Gibson: 7 years
Ashley Rademacher: 7 years
Brent Jordan: 7 years
Anthony Pham: 7 years
Jessica Caballero: 6 years
Garrett Donovan: 4 years

Banks and credit unions count on us to show up every day, and this team does exactly that. Thank you for your dedication, your expertise, and everything you do for our customers and each other.

Board minutes are where examiners judge the quality of your oversight.A board package that doesn't tie metrics to risk a...
10/21/2026

Board minutes are where examiners judge the quality of your oversight.

A board package that doesn't tie metrics to risk appetite, or show real substantive challenge and discussion, is exactly where a 2026 exam finding starts.

Our checklist covers what examiners expect from board-level reporting this year, along with supervisory posture, vendor risk, and framework adoption.

Pull your last board package. If it can't survive that kind of scrutiny, this checklist is your fix. Grab it here: utm_source=linkedin&utm_medium=organic-social&utm_campaign=bank-exam-checklist-2026&utm_content=post1-four-areas

Happy International Credit Union Day! 🎉To every credit union that puts members first, every single day: thank you for wh...
10/15/2026

Happy International Credit Union Day! 🎉

To every credit union that puts members first, every single day: thank you for what you do for your communities.

We’re proud to protect the credit unions that protect them.

A public proof of concept for a 9.3 Atlassian flaw went live. Exploitation attempts started within hours.CVE-2026-21589 ...
10/14/2026

A public proof of concept for a 9.3 Atlassian flaw went live. Exploitation attempts started within hours.

CVE-2026-21589 hits Data Center products including Jira, Confluence, Bitbucket, and Bamboo. An unauthenticated attacker can read files in the web application root. Pair Jira with Crowd and plaintext credentials can lead straight to administrator access.

About 190 attempts from dozens of sources had been logged by October 8. CISA had not added it to the KEV catalog at the time of reporting.

Why FI teams should care: the exposed population is the development and service desk platforms many banks and credit unions run. Waiting for a KEV listing to start patching means starting after the attackers did.

Same week, CISA added five more actively exploited flaws (ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, ISC BIND) tied to the China-associated Flax Typhoon group. The federal deadline was October 11. Your exam-ready patching story shouldn't depend on a federal deadline.

We summarize stories like these for financial institutions every day in the DefenseStorm CTI bulletin. Short, FI-relevant, and built for lean security teams. Sign up for free here: https://www2.defensestorm.com/Up-To-Date

Four events. One packed week. A lot of great conversations.Thanks to everyone who connected with us at FINTOP Summit, Cu...
10/09/2026

Four events. One packed week. A lot of great conversations.

Thanks to everyone who connected with us at FINTOP Summit, Curql's Unboxed Event, our Charlotte Resilience Roadshow, and GoWest MAXX. We left each one with fresh ideas and new friends.

Thank you to everyone who stopped by, shared a story, or swapped ideas with us. Conversations like these remind us why we do what we do. See you at the next one!

Some of the best conversations happen in our customers’ own buildings.On Tuesday our CEO Steve Soukup joined Georgia’s O...
10/08/2026

Some of the best conversations happen in our customers’ own buildings.

On Tuesday our CEO Steve Soukup joined Georgia’s Own Credit Union and Curql for Unboxed at Georgia’s Own’s office. It was a day of credit union leaders and fintech partners talking about what’s next for the industry.

We’re proud to work with Georgia’s Own, and grateful to Curql for bringing this group together. Thanks for having us!

We're excited for our final Resilience Roadshow stop of the year tomorrow in Charlotte! Join us from 12–5 PM. We can't w...
10/07/2026

We're excited for our final Resilience Roadshow stop of the year tomorrow in Charlotte! Join us from 12–5 PM. We can't wait to meet our amazing customers and share what we've been building for banks and credit unions.

Nashville, we're coming your way!  Steve Soukup and Gina Hortatsos will be at FINTOP Summit 2026 from October 7–9, and t...
10/06/2026

Nashville, we're coming your way! Steve Soukup and Gina Hortatsos will be at FINTOP Summit 2026 from October 7–9, and they're looking forward to meeting the bankers who make this event what it is. If you're attending, come find us.

We're excited to be at GoWest MAXX26 in Denver this week! Stop by Booth 627 at Ga***rd Rockies, Oct 6–9, and say hello t...
10/05/2026

We're excited to be at GoWest MAXX26 in Denver this week! Stop by Booth 627 at Ga***rd Rockies, Oct 6–9, and say hello to the DefenseStorm team and chat cyber risk management. We hope to see you there!

Address

1725 Windward Concourse Suite 425
Alpharetta, GA
30005

Alerts

Be the first to know and let us send you an email when DefenseStorm posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.

Shortcuts

Share