Buyer's guide ranks 12 DFIR firms; Coveware now under Veeam
The guide matches firms to breach lanes and flags Coveware's acquisition by Veeam as a procurement issue.
The guide matches firms to breach lanes and flags Coveware's acquisition by Veeam as a procurement issue.
None of the vendors reports exploitation; fixes cover cross-tenant code execution in Veeam and unauthenticated command execution in Session Smart.
The Canadian Cyber Centre lists affected builds of Agent for Linux, Backup and Replication, Backup for Microsoft 365 and Veeam ONE.
Unauthenticated attackers can bypass CDP Coordinator checks; fixed builds are 13.1.2.57 and 13.0.3.63, with no exploitation reported.
CVE-2026-108142 hits 13.0 and 13.1 branches; fixes are 13.0.3.63 and 13.1.2.57, and 12.x is unaffected.
Editorial scores, not lab tests, put Rubrik at 9.1, Veeam at 8.9 and HPE Zerto at 8.7.
Veeam leads at 9.1, Rubrik at 8.9 and merged Cohesity-Veritas at 8.7; scores are editorial, not lab tests.
Products are compared on capabilities such as cleanroom staging, journal-based rewind, SaaS-app coverage and immutable repositories.
The guide evaluates eleven backup solutions on immutability, ransomware detection and verified restore speed, noting Cohesity-Veritas merger.
Unit 42 says the GlobalProtect cookie bug yielded VPN access and later ransomware across several sectors since early June 2026.
Unit 42 says attackers forged authentication-override cookies, then pulled domain credentials from a VMware virtual disk offline.
Huntress details Microsoft VSS limits, including a 64TB cap and ransomware deletion of local snapshots.
Check Point's weekly report covers a Denmark registry breach of 8.8 million people, ransomware, and exploited enterprise flaws.
Canada’s Cyber Centre urges updates for vulnerabilities in Veeam Backup & Replication.
Veeam fixed a critical Backup & Replication flaw letting Backup Viewer users run remote code.
Veeam Backup & Replication 12.3.2 P4 fixes four flaws, including critical RCE CVE-2025-64393.
Guidance says AI-agent Zero Trust needs inventory first, citing shadow agents and a $600,000 METR token theft.
Public PoC for CVE-2026-32996 lets local users escalate to SYSTEM through Veeam Agent for Windows.
Public PoC for CVE-2026-32996 lets local users escalate to SYSTEM on vulnerable Veeam Agent for Windows.
Zyxel disclosed an active exploitation of a stack-based buffer overflow in its GS1900 switch firmware (CVE-2026-7273), enabling OS command execution.
Canada's Cyber Centre warns CVE-2026-32996 is being exploited and urges Veeam updates.
Veeam patched critical CVE-2026-65641 (CVSS 9.3) in Veeam ONE, exploitable by unauthenticated network attackers to coerce SMB authentication from the service account.
Canada's Cyber Centre advisory AV26-855 says Veeam Backup & Replication and Veeam ONE vulnerabilities are resolved in 13.0.3 and 13.1 updates.
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.
Today 1.5K readers · 3K views · 2.2K reads · all time 161K views