Tag
#backup
4 posts tagged #backup.
-
Analysis · Jul 7, 2026 · Colten Anderson
Your backup server is joined to the domain it exists to recover
Joining your backup server to the production Active Directory domain puts your last line of recovery inside the same trust boundary as the systems it protects, so one Domain Admin compromise reaches the backups too. Here is the evidence and what to change.
-
Field Note · Jun 24, 2026 · Colten Anderson
Your backups say success. Have you ever restored one?
A green backup job confirms bytes landed at the destination. It says nothing about whether you can boot the workload back. Here's the procedure to find out before the disaster does.
-
Field Note · Jun 22, 2026 · Colten Anderson
Commvault CVE-2025-34028: upgrading to 11.38.20 is not the whole fix
CVE-2025-34028 gives pre-auth RCE on Commvault Command Center. The patch landed in April and the federal deadline passed in May, but the fix requires supplemental update packages beyond the base version, and most shops check the version number and stop there.
-
Analysis · May 9, 2026 · Colten Anderson
Skip the optional preview: KB5083631 isn't worth your Tuesday morning
May 12 ships the same 34 fixes plus the month's security patches in one tested package. The preview brings the same risk for none of the upside.