Veeam warns critical Linux kernel flaw could crash backup appliances
Veeam identifies use-after-free in Linux kernel affecting backup appliances; patched kernel available for 13.1 versions.
Stories per day · 30 days
2 RSS
Relatedveeam7ahsaycbs6rubrik4xmrig4disaster-recovery3webshell3ahsay2commvault2kev2microsoft-3652ransomware-recovery2veritas2advisory1api1authenticated1authentication-bypass1authorization-bypass1aws1
39 stories, newest first · one card per story
Stories tagged #backup
EventSourcingDB 1.3.0 adds a v2 API and faster queries
v1 stays until January 31, 2027, but a data directory opened by 1.3 cannot be opened by earlier versions.
Rubrik adds recovery features for Azure DevOps and GitHub
The announced DevOps cyber recovery capabilities are expected to reach general availability in the coming months.
Dreeze raises $33 million to automate full cloud application recovery
Application Revival is generally available on AWS; Azure support stays in early access ahead of a planned early 2027 release.
1
Attackers exploit AhsayCBS flaws to hide code in PNGs and plant backdoors
Three servers in one organization were hit October 8–11, 2026, via auth bypass and unauthenticated SYSTEM RCE before hotfixes.
Druva adds backup and recovery for Copilot Studio agents
Power Apps support and a Microsoft 365 Copilot backup agent are generally available; Azure SRE Agent integration comes at the end of November.
1
Commvault launches Recovery Studio for runbook-driven restoration
Early access is planned for December, and analysts say accuracy depends on a customer-maintained dependency map, not AI.
Veeam backup products affected by vulnerabilities ahead of fixes
The Canadian Cyber Centre lists affected builds of Agent for Linux, Backup and Replication, Backup for Microsoft 365 and Veeam ONE.
Veeam patches critical Backup & Replication authorization bypass
Unauthenticated attackers can bypass CDP Coordinator checks; fixed builds are 13.1.2.57 and 13.0.3.63, with no exploitation reported.
Rubrik, Veeam and Zerto top 2026 ransomware recovery ranking
Editorial scores, not lab tests, put Rubrik at 9.1, Veeam at 8.9 and HPE Zerto at 8.7.
1
2026 ranking scores nine backup and recovery platforms
Veeam leads at 9.1, Rubrik at 8.9 and merged Cohesity-Veritas at 8.7; scores are editorial, not lab tests.
2026 Backup Recovery Buyer’s Guide Verdict
The guide evaluates eleven backup solutions on immutability, ransomware detection and verified restore speed, noting Cohesity-Veritas merger.
1
BlackBox Hosting CEO explains RPO and RTO with a recovery example
A customer with more than 1,200 virtual machines had a one-second RPO and started in about 90 minutes in tests.
[0day-rubbish] Synametrics Syncrify 6.2 build 1178 authenticated PublicLink chunk-upload path traversal to /etc/cron.d and root command execution (7.5)
Authenticated Syncrify 6.2 path traversal can write cron jobs and execute commands as root.
Microsoft VSS: Still Essential, But Not the Whole Story
Huntress details Microsoft VSS limits, including a 64TB cap and ransomware deletion of local snapshots.
CISA lists AhsayCBS authentication flaw in KEV (CVE-2026-105133)
Manipulating the random argument in checkSysPwd bypasses API authentication on AhsayCBS through 10.3.2; 10.3.4 is the fix.
CISA lists AhsayCBS command injection in KEV (CVE-2026-105134)
AhsayCBS through 10.3.2 allows remote OS command injection via UpdateReceivers.do; version 10.3.4 fixes it, with a federal due date of October 17.
Commvault security advisory (AV26-1033)
Canada's Cyber Centre warns Commvault Cloud and CVFS versions need updates under advisory AV26-1033.
Critical Veeam Backup & Replication Flaw Allows Low-Privileged Users to Execute Remote Code
Veeam fixed a critical Backup & Replication flaw letting Backup Viewer users run remote code.
Microsoft Enables Windows 11 Backup Setting by Default for Organizations
Microsoft enables Windows 11 26H2 settings backup by default when the policy is left unconfigured.
4
Microsoft enables Windows settings backup by default for orgs
Microsoft now enables Windows settings backup by default on eligible Entra-joined Windows 11 26H2 devices.
3
Microsoft fixes bug that broke Windows File History backup feature
Microsoft fixed a September update bug that stopped File History backups on Windows 10 and 11.
Veeam Agent Flaw Actively Exploited to Gain SYSTEM Privileges on Windows
Public PoC for CVE-2026-32996 lets local users escalate to SYSTEM through Veeam Agent for Windows.
1
Public PoC Exposes Critical Veeam Agent Privilege Escalation
Public PoC for CVE-2026-32996 lets low-privileged local users gain SYSTEM on Veeam Agent for Windows; patch to 13.0.2.29 or later.
4