Tag: backup
-
Gefährliche Backup-Lücke: Warum gesicherte Kubernetes-Daten im Ernstfall nicht ausreichen
Kubernetes-Backup: Warum VM-Backups und PV-Snapshots nicht ausreichen. HYCU erklärt fünf Herausforderungen und typische Fehler bei der Datensicherung. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/gefaehrliche-backup-luecke-warum-gesicherte-kubernetes-daten-im-ernstfall-nicht-ausreichen/a47010/
-
Microsoft Authenticator’s Android Backup Switch Is Coming in January, Google One Takes Over
Microsoft Authenticator’s Android backup switch is coming in January. Existing recovery settings may not carry over automatically. The post Microsoft Authenticator’s Android Backup Switch Is Coming in January, Google One Takes Over appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-microsoft-authenticator-android-google-one-backup/
-
Philippine Migrant Worker Data Likely Leaked in 69GB Government Breach
An unknown operator appears to have exfiltrated SQL Server backups from the Philippine Overseas Employment Administration in under a half hour. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/philippine-migrant-worker-data-69gb-government-breach
-
DHS Orders Civilian Agencies to Purge Acronis Software
DHS Cites Root Access in Barring Swiss Firm From Federal Networks. The U.S. Department of Homeland Security has ordered civilian agencies to stop buying and remove Acronis backup and security products, extending a ban that already covered intelligence and defense systems – though the order’s public rationale rests on the access the Swiss company’s tools…
-
ConnectWise CTO: We ‘Threw The Big Kill Switch.’ Now Cloud Backup Is Back.
ConnectWise restored Cloud Backup after a cyberattack, with CTO David Raissipour detailing security enhancements, partner impact and key lessons learned. First seen on crn.com Jump to article: www.crn.com/news/security/2026/connectwise-cto-we-threw-the-big-kill-switch-now-cloud-backup-is-back
-
Critical Veeam Backup Replication Flaw Allows Unauthenticated Attackers to Bypass Authorization
Veeam has released security updates to address a critical authorization bypass vulnerability in Backup & Replication. This flaw, tracked as CVE-2026-108142, allows an unauthenticated attacker to bypass authorization on the CDP Coordinator Service. The vulnerability has a CVSS v4.0 score of 9.1 and affects both Windows deployments and the Veeam Software Appliance. The company disclosed…
-
Warum Unternehmen ihre M365-Konfigurationen sichern müssen – Das übersehene Backup
Tags: backupFirst seen on security-insider.de Jump to article: www.security-insider.de/das-uebersehene-backup-a-4de068f0f36dccbd287f17f91c5ed1b7/
-
Hackers Abuse ConnectWise Cloud Backup Credentials to Launch AI-Driven Microsoft 365 Attacks
Tags: access, ai, attack, authentication, backup, china, cloud, credentials, cyber, data, framework, hacker, microsoft, open-source, threatHackers abused compromised ConnectWise Cloud Backup application credentials to access Microsoft 365 environments, escalate privileges, and plant persistent credentials. Microsoft attributed the campaign to Storm-0940, a China-state-aligned threat actor using ARTEX, an open-source agentic AI framework, to accelerate downstream attacks against more than 2,250 tenants. Successful authentication, however, does not establish data theft. Huntress initially…
-
Cyberresilienz ist mehr als nur ein paar Security-Produkte
Cyberrisiken treffen nicht nur Konzerne, sondern insbesondere auch den Mittelstand. Entscheidend ist nicht allein, ob Firewall, Virenschutz und Backups vorhanden sind. Über das Überleben nach einem Angriff entscheidet, wie planvoll und effektiv ein Unternehmen reagiert. Sonntagabend, 22:40 Uhr: Das ERP fällt aus, E-Mail und Dateiserver sind nicht mehr erreichbar, Produktionsdaten und Auftragsverwaltung… First seen on…
-
11 Backup Recovery Solutions: The 2026 Buyer’s Verdict Guide
Ransomware rewrote backup’s job description attackers delete recovery points before encrypting production so 2026’s buying criteria are security properties: immutability stolen credentials can’t untick, isolation from your blast radius, and restores proven by stopwatch rather than dashboard. One roster note: our sheet listed Cohesity and Veritas separately, but their completed merger makes them one vendor…
-
Microsoft Links ConnectWise Breach to China-Linked Group Using AI Pentesting Tool ARTEX
Tags: ai, attack, backup, breach, china, cloud, credentials, exploit, framework, group, microsoft, open-source, penetration-testing, supply-chain, toolChina-linked Storm-0940 used AI tool ARTEX to target 2,250 Microsoft 365 tenants, exploiting stolen ConnectWise credentials at machine speed. Microsoft published a detailed technical report naming Storm-0940, a China state-aligned group, as the actor behind the ConnectWise Cloud Backup supply chain compromise. The group used ARTEX, an open-source AI-driven penetration testing framework, to run attacks…
-
China-nexus actor linked to attack on ConnectWise Cloud Backup
Researchers said the hackers employed a powerful AI tool to accelerate and scale the attacks against hundreds of Microsoft 365 users. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/china-nexus-actor-attack-connectwise-cloud-backup/833727/
-
Ransomware-Recovery – Wenn Backups die Schwachstellen wiederherstellen
First seen on security-insider.de Jump to article: www.security-insider.de/ransomware-recovery-identity-governance-backup-risiko-a-40ff7d926c375f0bbb11660fdcbea9ae/
-
China-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain Attack
Microsoft on Wednesday disclosed that a China state-aligned actor dubbed Storm-0940 was behind the recent supply chain compromise of the ConnectWise Cloud Backup application.During the incident, Storm-0940 used ARTEX, a Go-based agentic AI penetration testing framework that was made closed-source in the wake of its abuse against South Korean financial institutions, to speed up scanning…
-
US, UK and Germany Warn of Active SafePay Ransomware
Vertically Integrated Double-Extortion Group Hacks 13 Victims in 12 Days. U.S., U.K. and German agencies warned that SafePay ransomware has compromised at least 600 organizations since August 2024, exploiting VPN, firewall and backup software vulnerabilities to steal data and encrypt systems, often within 24 hours of initial access. First seen on govinfosecurity.com Jump to article:…
-
US, UK and Germany Warn of Active SafePay Ransomware
Vertically Integrated Double-Extortion Group Hacks 13 Victims in 12 Days. U.S., U.K. and German agencies warned that SafePay ransomware has compromised at least 600 organizations since August 2024, exploiting VPN, firewall and backup software vulnerabilities to steal data and encrypt systems, often within 24 hours of initial access. First seen on govinfosecurity.com Jump to article:…
-
ConnectWise Aims To Get Cloud BackUp For Microsoft 365 Up And Running By End Of This Week: CTO David Raissipour
Here is a look at how ConnectWise is aiming to provide thousands of its MSPs access by the end of this week to ConnectWise Cloud BackUp for Microsoft 365 and other services impacted by a security breach. First seen on crn.com Jump to article: www.crn.com/news/security/2026/connectwise-aims-to-get-cloud-backup-for-microsoft-365-up-and-running-by-end-of-this-week-cto-david-raissipour
-
CISA Warns SafePay Ransomware Has Hit 600+ Organizations and Destroyed Backup Systems
Tags: advisory, attack, backup, cisa, cyber, data, encryption, infrastructure, ransomware, theft, usaCISA has warned that SafePay ransomware actors have compromised at least 600 organizations across multiple critical infrastructure sectors, combining data theft and encryption with deliberate attacks on backup systems to obstruct recovery. The October 20, 2026, joint advisory describes operations spanning North America, South America, Europe, and Australia since August 2024. Published with the FBI,…
-
Stolen UpdraftCentral keys used to backdoor WordPress sites
A threat actor breached TeamUpdraft’s website, a developer of popular WordPress backup and security plugins, potentially compromising UpdraftCentral connection keys that can send commands to connected websites. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/stolen-updraftcentral-keys-used-to-backdoor-wordpress-sites/
-
Arctic Wolf und Veeam wollen gemeinsam blinde Flecken in ihrer Sicherheitsüberwachung von Backups reduzieren
Arctic Wolf gibt eine strategische Partnerschaft mit Veeam bekannt. Veeam bietet Lösungen für vertrauenswürdige Daten und KI an. Ziel der Zusammenarbeit ist es, Informationen zu Datensicherung und Wiederherstellung in die Aurora-Superintelligence-Platform zu integrieren. Die KI-native Security-Operations-Plattform von Arctic Wolf soll Unternehmen dabei unterstützen, ihre Sicherheit und Cyberresilienz zu stärken. Ereignisdaten werden dazu aus der Veeam-Data-Platform…
-
ConnectWise Disables Cloud Backups Amid Concerns for Downstream MSPs
Researchers say attackers authenticated into Microsoft 365 tenants using ConnectWise credentials; ConnectWise says customer impact remains unconfirmed. First seen on darkreading.com Jump to article: www.darkreading.com/identity-access-management-security/connectwise-disables-cloud-backups-downstream-msps
-
Hackers hijack AOMEI update servers to secretly spread malware
Hackers reportedly compromised AOMEI’s servers to distribute malware through a built-in promotional feature in its backup software, briefly tampering with configuration files before restoring them to their original state to hide the attacks.a First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hackers-hijack-aomei-update-servers-to-secretly-spread-malware/
-
ConnectWise CTO Sees ‘Light At End Of Tunnel’ In Bid To Restore ConnectWise Cloud Backup Microsoft 365 Access
ConnectWise CTO David Raissipour says the company has made “significant progress” in its bid to restore ConnectWise Cloud Backup access for Microsoft 365 to more than several thousand MSPs. First seen on crn.com Jump to article: www.crn.com/news/security/2026/connectwise-cto-sees-light-at-end-of-tunnel-in-bid-to-restore-connectwise-cloud-backup-microsoft-365-access
-
ConnectWise suspends Cloud Backup service as hacker targets Microsoft 365 users
Managed service providers said an attacker used compromised credentials to gain access to tenants. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/connecwise-suspends-cloud-backup-hacker-microsoft-365/833345/
-
ConnectWise suspends Cloud Backup service after attackers abuse its Microsoft 365 access
American software company ConnectWise is contending with a security incident that has allowed unknown attackers to use its application identities to break into organizations’ … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/19/connectwise-cloud-backup-suspended-security-incident/