Commvault, a leading provider of cyber resilience and data protection solutions for the hybrid cloud, today announced it is extending its Kubernetes protection to support virtual machines (VMs) running on Red Hat OpenShift Virtualization. This new capability enhances cyber resilience for organizations moving to modern application environments.
Containerized workload adoption is rapidly growing: Gartner predicts 90% of G2000 companies will use container management tools by 20271, and the Containers as a Service (CaaS) market is forecasted to hit nearly $USD 44B by 20342. This surge makes integrated data protection and recoverability critical. Enterprises must mitigate downtime from ransomware and other disruptions while managing complex data protection across hybrid environments. Using disparate tools for VMs and containers can create overhead, duplicate efforts, and heighten risk. These are just some of the reasons a unified cyber resilience strategy is vital for protection against evolving threats, reducing complexity, streamlining operations, and lowering total cost of ownership (TCO).
Commvault addresses this by enabling customers to automatically discover, protect, and recover VMs running on Red Hat OpenShift Virtualization alongside their containerized workloads, all through the Commvault Cloud platform. These capabilities can be particularly valuable for DevOps, SRE, IT/backup admins, and technology leaders (CIOs, CISOs, CTOs) that are managing cloud-native estates.
For customers, this means:
- Robust Cyber Resilience: Commvault offers air-gapped and immutable backups with advanced recovery for VMs on Red Hat OpenShift Virtualization, enabling improved business continuity in the face of ransomware and other threats.
- Faster and More Flexible Recovery: Customers can restore VMs both in-place and out-of-place, including VM configurations, accelerating deployment and minimizing downtime.
- Unified Protection for Hybrid Workloads: Customers can simplify operations by managing both traditional and cloud-native workloads through a single platform, reducing tool sprawl and operational silos.
- Cost Savings and Operational Efficiency: Customers can eliminate the need for separate backup infrastructure or tools for VMs, lowering TCO and increasing administrative efficiency.
Availability
Commvault support for Red Hat OpenShift Virtualization will be available for early adopters in early summer and is targeted for general availability by early fall. Pricing is aligned with existing Commvault Kubernetes protection models.
UK’s Legal Aid Has Been Pwned
Posted in Commentary with tags Hacked on May 19, 2025 by itnerdReports have surfaced that a “significant amount” of private data dating back to 2010, including details of domestic abuse victims, has been hacked from Legal Aid’s online system from an April breach.
More details here: https://www.gov.uk/government/news/legal-aid-agency-data-breach
Martin Jartelius, CISO at cybersecurity company Outpost24, commented:
“While described as “the latest in a line of attacks,” it’s important to note that the Legal Aid Agency (LAA) first detected the breach on 23 April 2025 and has been actively managing the incident since then. Under UK data protection laws, a notifiable personal data breach must be reported to the Information Commissioner’s Office (ICO) within 72 hours, unless it’s unlikely to pose a risk to individuals’ rights. If there’s a high risk, affected individuals must also be informed without undue delay. In this case, the public was not informed until 16 May—nearly three weeks later. While delays can sometimes be justified to assess the situation or support an organized investigation, this timeline falls well outside the expected reporting window.
“Given the sensitivity of the data involved and the scale of the breach, it’s now clear that individuals were placed at risk of further harm, including malicious targeting. Transparency and timely communication are essential—especially when public trust and personal safety are at stake.
“While the UK has recently faced attacks from groups like Scattered Spider, the Legal Aid Agency breach does not currently match their known pattern. This appears to be a targeted compromise of a digital platform, rather than a broader, hands-on infiltration and ransomware operation. This is of course based on the limited data published.”
The UK has been starting to focus more on upping their cybersecurity game. This is an example of what I mean. But this breach shows that they have much more work to do on that front.
Leave a comment »