Cyber Resilience & Ransomware Recovery

Commvault Systems has enabled its managed service provider partners to deliver FedRAMP High Authorized Commvault Cloud for Government services to U.S. federal agencies and defense contractors, broadening the company's public sector reach. The move lands on a stock with a 7 day share price return of 10.29% and a 90 day share price gain of 11.67%, though its 1 year total shareholder return is down 23.35% while the 3 year total shareholder return is up 111.68%. The most followed valuation narrative puts fair value at $161.15 against a last close of $145.21, implying roughly 10% upside, and rests on analyst expectations of about 10.6% annual revenue growth, profit margins rising toward 9.8%, and an 8.85% discount rate. That story leans on recurring SaaS economics, including 63% SaaS ARR growth, a 45% increase in multi-product customers, and 125% SaaS net dollar retention. A contrasting read notes the stock trades at a P/E of 88.1x versus 30.5x for the wider US Software group and a fair ratio of 38.7x, signaling valuation risk if sentiment cools.

Hackers have threatened Revolut with a ransom demand, seeking $3 million in Monero within 24 hours or they will expose the company's customer data. The hackers claim to be behind a cyberattack that leaked KYC and personal data of Revolut customers. The incident represents a significant security risk for the crypto company and its users, who must remain vigilant about the leakage of their personal data.

Cohesity introduced Cohesity Agent Resilience, a new Cohesity Data Cloud capability that will discover, protect, and recover the infrastructure behind enterprise AI agents. The capability is available now to select customers, with general availability targeted for the end of 2026, and launches with support for Amazon Bedrock AgentCore and Amazon Bedrock Agents, while Microsoft and Google agent platforms are on the roadmap. Cohesity also outlined its vision for Autonomous Cyber Resilience, which uses agentic workflows to automate its five-step cyber resilience framework, and introduced the Cohesity AI Resilience Academy, beginning with a free, self-paced Foundations of AI Resilience with Cohesity course that Catalyst attendees will get early access to immediately after the event. The company cited new research from the fifth annual Cohesity Global Cyber Resilience Report showing that 56% of organizations said they were not well prepared to detect or contain unintended actions by AI agents and automated workflows, while 58% were not very confident in their ability to verify the integrity of AI models and related data following a cyberattack. Cohesity also said customers with Cohesity Data Cloud Enterprise Edition and Cohesity DSPM can now automate the protection of newly discovered sensitive data that is not already protected.

Japan's National Police Agency (NPA) said on September 10 that a total of 123 ransomware attacks were reported in Japan in the first half of this year, the highest half-year figure since record-keeping began in 2020. Of these, 79 targeted small and medium-sized enterprises (SMEs), 31 hit large companies, and 13 targeted other types of organizations. The NPA said more than half of all cases took over a month to recover systems, and 9 cases brought all business operations to a halt. Meanwhile, the number of detected suspicious accesses, often preparations for cyberattacks, rose by more than 4,000 per day per IP address compared with the same period a year earlier, reflecting the growing severity of cyber threats. The NPA has compiled half-year ransomware statistics since the second half of 2020. Ransomware is malware in which attackers demand a ransom in exchange for restoring access to a company's data, which has been encrypted and rendered unusable.

Commvault has introduced Active Directory Pre Recover, a solution that reduces the time to cleanly recover Active Directory from hours to minutes by creating a clean standby copy in an isolated Cleanroom environment. The solution, part of Commvault's Identity Resilience portfolio, uses existing technologies including Cleanroom and Threat Scan to ensure the standby copy is free of malicious content. Organizations can fail over to this clean copy during a cyber incident, maintaining access to critical systems without waiting for a full forest recovery. Commvault's Chief Products Officer, Rajiv Kottomtharayil, highlighted that identity is foundational to enterprise operations, and this innovation extends recovery progress toward near-real-time availability. Active Directory Pre Recover will be available for early access in the coming months, included at no extra cost for all enterprise AD customers, with a lite version of Cleanroom, and will be offered globally through Commvault's partner ecosystem.

Commvault announced on August 31 that its cyber recovery actions can now run as native steps inside CrowdStrike Holdings' Charlotte Agentic SOAR workflows, enabling security teams to trigger data recovery without leaving their incident response tools. This integration, the third leg of a broader CrowdStrike partnership, allows joint customers to restrict access, suspend backup data aging policies, and restore compromised assets into Commvault Cleanroom for forensics. The announcement follows Commvault's fiscal first quarter 2027 results reported on July 28, which showed subscription revenue of $267 million, up 16% year over year, and SaaS revenue crossing $100 million for the first time, up 39%. However, the company's GAAP operating margin was just 8.2% versus a non-GAAP figure of 22.8%, and its second-quarter guidance projects a non-GAAP EBIT margin of approximately 20%, a step down from the 22.8% delivered. Hedge fund ownership fell from 36 to 28 funds quarter over quarter, and short interest stands at 9.07% of float, while the stock trades at a forward P/E of 24.51 as of September 4.

Commvault has tripled the number of Microsoft Azure resource types its Cloud Rewind platform can protect and recover, expanding coverage to 62% of enterprise-relevant Azure resource types. The August 18 update follows fiscal first-quarter 2027 results reported on July 28, when subscription revenue rose 16% year over year to $267 million, subscription annualized recurring revenue reached $1,054 million, up 22%, and SaaS revenue crossed $100 million for the first time, up 39%. Free cash flow jumped 71% to $51 million, and the company struck a multi-year deal with Microsoft to sell its resilience tools as a native Azure service. However, GAAP operating margin was just 8.2% versus a 22.8% non-GAAP margin, and management guided second-quarter subscription revenue to $264–268 million, essentially flat, with full-year non-GAAP EBIT margin around 21%, below the 22.8% just posted. Hedge fund ownership fell from 36 to 28 funds, short interest stands at 9.07% of float, and the stock trades at a forward P/E of 24.51 as of September 4.

Cohesity, the AI and data security leader, has launched a new managed clean room capability within the HCLTech VaultNXT offering, integrating its Clean Room solution and AI-powered data security features to accelerate data recovery, improve regulatory compliance, and strengthen business resilience. The enhancement delivers a fully managed, isolated recovery environment with secure investigation, containment, validation, and recovery capabilities, addressing requirements such as DORA and NIS2. Kit Beall, Cohesity's chief revenue officer, said the partnership brings together market-leading managed clean room services and AI-powered data security to help customers recover trusted data faster and reduce risk. Rampal Singh, senior vice president of HCLTech's Hybrid Cloud Business Unit, noted that VaultNXT reflects the strength of the partnership in turning data protection into a strategic cyber resilience asset in the AI era.

Rubrik reported second-quarter fiscal 2027 results that exceeded all guided metrics, marking its tenth consecutive quarter of outperformance as a public company. Subscription ARR reached $1.66 billion, up 33% year-over-year, with net new subscription ARR of approximately $96 million, accelerating growth. Subscription revenue grew 37% to $407.2 million, and total revenue rose 38% to $427.3 million. The company also reported free cash flow of $65.7 million and raised its full-year subscription ARR guidance to $1.88 billion to $1.885 billion, reflecting about 29% growth. CEO Bipul Sinha highlighted the growing demand for agentic cyber resilience, citing the recent Hugging Face incident and the rise of AI-driven attacks, and noted that Rubrik now has over 15 paying customers for its Rubrik Agent Cloud product. CFO Kiran Choudary confirmed that the Strata Identity acquisition contributed zero ARR in the quarter and is not included in guidance.

Rubrik, Inc. (RBRK) reported strong fiscal second-quarter results and raised its full-year guidance, with subscription ARR reaching $1.66 billion and free cash flow of $65.7 million. The company now expects fiscal 2027 subscription ARR of $1.88 billion to $1.885 billion, up from a prior range of $1.854 billion to $1.862 billion, and free cash flow of $323 million to $333 million, up from $293 million to $303 million. For the third quarter, Rubrik guided revenue of $429 million to $431 million and non-GAAP EPS of $0.07 to $0.09. CEO Bipul Sinha attributed demand to AI-driven security needs, highlighting the company's push into "agentic cyber resilience," while CFO Kiran Choudary noted a $18 million headwind from material rights revenue. Analysts questioned the implied deceleration in net new ARR, but management expressed confidence, noting zero ARR contribution from the Strata acquisition and more than 15 paying customers for Rubrik Agent Cloud.

Commvault Systems shares have risen 11.6% since its fiscal first-quarter earnings report, outperforming the S&P 500. The company reported non-GAAP earnings of $1.42 per share, beating the Zacks Consensus Estimate of $1.18 by 20.3%, while revenues advanced 11.4% to $314.13 million. Subscription annual recurring revenues increased 22% to $1.05 billion, with SaaS revenues surging 39% to $100.55 million, crossing the $100 million quarterly threshold for the first time. Management raised its fiscal 2027 subscription revenue outlook to $1.119-$1.129 billion and increased non-GAAP EBIT margin guidance by 50 basis points to approximately 21%. The company also expanded its partnership with Microsoft, making its cyber-resilience capabilities available as a native independent software vendor service on Microsoft Azure.

Commvault Systems filed a US$449.32 million shelf registration for 3,374,000 common shares related to its employee stock ownership plan and announced a new integration bringing Google Threat Intelligence into its Threat Scan cyber resilience workflows. The company also upgraded inline malware scanning and added AI-enabled Synthetic Recovery enhancements. The shelf filing does not materially change the near-term story, which still hinges on sustaining subscription and SaaS ARR growth while managing margin pressure from the cloud mix. The Google integration deepens Commvault's role in helping customers identify uncompromised recovery points during cyber incidents, potentially supporting higher-value resilience-focused subscriptions but also adding complexity and spend. Commvault's narrative projects $1.6 billion revenue and $161.8 million earnings by 2029, requiring 10.6% yearly revenue growth and a $93.5 million earnings increase from $68.3 million today.

Rubrik is back in focus after partnering with Wipro on Enterprise Resilience as a Service, a new offering built on Rubrik's cyber and data resilience platform to address complex recovery and continuity needs. The stock trades at US$96.73, with a 7 day share price return of 14.05% and a 90 day share price return of 54.03%, while the 1 year total shareholder return is 9.82%. Rubrik's most widely followed narrative pegs fair value at $95.50, just below the recent close, while a discounted cash flow model comes out at $100.80, implying the stock is trading about 4% below that estimate. Bulls argue Rubrik's AI security push and recent share price jump justify a premium, while bears point to ongoing losses and rich expectations.

Commvault announced a new integration with Google Threat Intelligence to help organizations identify clean recovery points faster after cyberattacks. The integration incorporates Google Threat Intelligence data and scanning capabilities into Commvault Threat Scan workflows, enabling customers to analyze protected workloads for malware and pinpoint compromised recovery points. Commvault is also introducing inline scanning that collects file hashes during backup operations, allowing rapid threat intelligence validation and selective deeper analysis. These capabilities strengthen Commvault's Synthetic Recovery, which uses AI to automatically detect and remove threats during recovery. The new features are expected to be available in the coming months.

Catalogic Software has released DPX 4.16, adding agentless Proxmox virtual machine protection and expanded cyber resilience features to its enterprise backup and recovery platform. The update introduces agentless full and incremental backups, scheduling, and node management for Proxmox directly from the web UI, alongside existing support for VMware, Hyper-V, physical servers, and cloud workloads. Cyber resilience is strengthened with extended vStor end-to-end audit logging capturing REST and system-level actions, configurable retention, filtering, and CSV export for compliance and forensics, plus backup and restore of VMware VMs with vTPM encryption. Disaster recovery improvements include automated multi-VM restores when original volume information is unavailable and fully integrated Block Archive and VMware Archive restores in the modern web UI. Operational enhancements cover tape library management in the web UI, a unified ISO image for updates, volume migration with estimated completion time and suspend/resume, and optimized proxy selection for VMware agentless backups.

ControlMonkey has signed a Strategic Collaboration Agreement with Amazon Web Services to bring enhanced disaster recovery readiness and operational continuity to more businesses running cloud infrastructure on AWS. The collaboration will leverage ControlMonkey's cyber resilience platform, which helps organizations recover infrastructure states and SaaS configurations, complementing existing AWS resilience services such as AWS Resilience Hub, Amazon Application Recovery Controller, and AWS Backup. Industry research cited in the announcement estimates that unplanned downtime costs Forbes Global 2000 companies approximately $600 billion annually, with an average cost of $15,000 per minute of downtime. Through joint go-to-market initiatives and field collaboration, the partners aim to operationalize cloud recovery workflows with automated configuration capture, drift-aware recovery processes, and standardized restoration procedures across complex AWS estates.

Synology has revealed that the ISO 27001 standard is shifting from being merely a compliance certificate to a crucial foundation for enterprise risk management, building cyber resilience in an era of intensifying cyber threats. Mr. Rahat Boontanjin, Country Manager for Thailand, stated that 72 percent of organizations worldwide see cyber risk as significantly increasing, and 71 percent of risk executives expect threats to severely impact business operations. He pointed out that the rise of agentic AI is creating new forms of risk, so organizations should use ISO 27001 as a control framework across four key areas: role-based data access permissions, data accuracy governance, rollback systems for AI errors, and continuous security measure improvements. Although a 2025 OpenText survey indicates that 52 percent of global organizations plan to increase investment in backup technology, many still face real-world system recovery failures. Synology has therefore launched the ActiveProtect Appliance, a solution designed to support cyber resilience approaches and the new era of ISO 27001, integrating immutable backup, logical air-gap, and automated backup verification technologies to close recovery gaps and help Thai organizations tackle cyber threats in the AI age.

Coca-Cola has temporarily halted production at its Fairlife dairy facilities in the United States following a ransomware attack that disrupted the subsidiary's systems. The company disclosed in an SEC filing that an unauthorized party accessed Fairlife's systems in what it believes was a ransomware incident, and it is investigating with external cybersecurity specialists while law enforcement has been notified. The scope and impact are still being assessed, but product quality and safety have not been affected. U.S. production is paused while systems are restored, though Canadian operations continue normally. Coca-Cola, which acquired Fairlife in 2020 for roughly $7 billion, noted the brand generates more than $3 billion in annual sales and is a key growth business.

ValorC3 Data Centers has launched Backup as a Service, a fully managed offering that protects SaaS data for Microsoft 365, Entra ID, and Salesforce. The service provides immutable backups, ensuring data remains recoverable after deletion, corruption, or ransomware attacks. ValorC3 manages the entire process, including configuration, monitoring, and recovery testing, leveraging its status as a Veeam Gold Service Provider on Veeam Data Cloud. The company notes that 80% of organizations have experienced cloud security issues and 45% of data breaches originate in cloud environments, highlighting the need for customer-managed backup under the shared responsibility model. Backup as a Service is now available for SaaS applications, on-premises servers, and cloud workloads, with Valor Cloud customers receiving 14 days of backup included by default on instance-based plans.

The global remote data center disaster recovery market is projected to grow from $131.83 million in 2025 to $187.48 million by 2032, expanding at a compound annual growth rate of 5.15%, according to a new report from ResearchAndMarkets.com. The market, valued at $141.29 million in 2026, is being driven by increasing cyber threats, ransomware attacks, and the need for automated recovery solutions across distributed computing environments. Key players include Veeam, Zerto, IBM, Microsoft Azure, and AWS, with competition centered on cyber-resilient recovery, operational simplicity, and ecosystem integration. The report highlights that anticipated U.S. tariffs may increase costs for servers, storage, and networking equipment, potentially accelerating purchases or shifting organizations toward software-defined recovery approaches. Regional dynamics vary, with the Americas focused on cyber insurance and severe weather, Europe prioritizing data sovereignty, and Asia-Pacific addressing rapid digital growth and natural hazard exposure.

Rubrik announced a $500 million investment in the UK over the next five years and the establishment of its European headquarters in London. The investment aims to support the company's local ecosystem, helping organizations across Europe address data sovereignty needs and recover from cyberattacks. This follows Rubrik's recent integration with the AWS European Sovereign Cloud to provide secure cyber resilience for highly regulated industries and the public sector. The company is also expanding its focus to include AI resilience, developing security guardrails and rewind features to reverse unintended actions by AI tools.

Commvault Systems has launched 'Commvault Minutes to Recovery,' a global cyber resilience simulation that lets security and IT teams rehearse AI-driven attacks and benchmark clean recovery performance. The stock last closed at $153.72, which a Simply Wall St narrative fair value estimate pegs at $135.20, suggesting it is 13.7% overvalued. That narrative points to rapid SaaS expansion, with 63% SaaS ARR growth, a 45% increase in multi-product customers, and 125% SaaS net dollar retention. However, a separate Simply Wall St discounted cash flow model yields an estimated fair value of $193, implying the stock trades about 20.4% below that figure. The launch comes alongside a new Chief Partner Officer, an expanded Microsoft Azure partnership, and a recently filed securities class action.

Professor Kai London is warning critical infrastructure leaders that the next major cyber crisis may begin with lost visibility and suspended access rather than stolen data. He argues that the centre of gravity in cyber risk is shifting from data loss to operational paralysis, where attackers only need to create enough uncertainty to slow decisions and force manual fallback. London is calling on every CNI board to conduct a Run Blind Test, challenging operators to prove they can maintain safe operations when digital visibility is degraded and remote access is suspended. He identifies five urgent shifts before 2030, including moving from compliance to survivability and from backup confidence to recovery evidence. London also warns that AI-enabled cyber operations will compress the crisis window, making it essential for defenders to use AI responsibly without creating new blind spots.

Microsoft Corporation entered a strategic partnership with Commvault on June 24, 2026, to enhance AI and cyber resilience for enterprises moving to the cloud. Under the agreement, Microsoft will integrate Commvault's resilience technologies as a native ISV service on Microsoft Azure, allowing Azure customers to discover, provision, and deploy data protection capabilities directly from the cloud platform. The integrated technologies will enable enterprises to rapidly restore data, applications, and identities in the event of a cyberattack, outage, or operational error. The partnership offers a unified experience across procurement and onboarding, eliminating the need for manual integration. Separately, on June 23, Microsoft completed construction on its first data center facility in Mount Pleasant, Wisconsin, which is now fully operational and houses a supercomputer for global AI innovation, supporting nearly 550 full-time local jobs.

Commvault Systems shares rallied 4.6% in the last trading session to close at $140.04, driven by an expanded collaboration with Microsoft that embeds Commvault's cyber resilience platform directly within Azure, enabling marketplace purchases tied to customers' cloud consumption commitments. The move came on notable volume, with the stock now up 21% over the past four weeks. Commvault is expected to report quarterly earnings of $1.16 per share on revenues of $311.03 million, representing year-over-year growth of 14.9% and 10.3%, respectively. The consensus EPS estimate has remained unchanged over the last 30 days, and the stock carries a Zacks Rank of 3, or Hold.

Rubrik has expanded its alliance with Cognizant and announced an upcoming Rubrik Agent Cloud integration with Amazon Bedrock AgentCore, aiming to deliver real-time AI governance, rollback capabilities, and unified policy control for enterprises running autonomous agents on AWS and Cognizant platforms. These moves position Rubrik as a core infrastructure provider for governing AI agents at scale, particularly in heavily regulated sectors where traceability, policy enforcement, and operational control are becoming central requirements. The announcements reinforce the existing growth outlook behind raised fiscal 2027 revenue guidance and support the recent share price rebound, though any financial impact is likely to build over time. Key risks include execution with global system integrators, intensifying competition, and the path to profitability given negative equity and continued net losses.