As cyberattacks grow more persistent and sophisticated, organizations are increasingly focused on ensuring that recovery processes do not reintroduce hidden threats. Commvault’s latest update strengthens this approach by advancing verified clean recovery through enhanced threat detection across backup environments.
Commvault has announced expanded capabilities within its Commvault Cloud Threat Scan, introducing layered threat detection designed to help enterprises identify risks in backup data and restore clean systems with greater confidence. The update addresses a critical challenge in cyber resilience, where compromised backups can lead to reinfection and prolonged downtime during recovery.
Recent data highlights the urgency of the issue. The median dwell time for undisclosed breaches stands at 24 days, providing attackers with sufficient time to embed malicious code across systems. While security teams often track indicators of compromise and attack patterns, these signals are not always applied to backup environments before restoration, increasing the risk of reintroducing threats.
To address this gap, Commvault has introduced two complementary scanning modes within its platform. Hyper Threat Hunting enables organizations to search backup data using known threat indicators such as hashes and YARA rules, allowing for rapid identification of known malicious artifacts. Deep Inspection adds a second layer of analysis, combining malware signatures, machine learning, heuristic techniques, and AI driven encryption detection to uncover suspicious activity that may not match known indicators.
These capabilities allow security and IT teams to collaborate more effectively during incident response and recovery. Organizations can perform continuous monitoring through scheduled scans or conduct targeted investigations during active incidents, improving both preparedness and response speed.
Dr. Erika Voss, Chief Security Officer at Blue Yonder, emphasized the importance of validating recovery data. “In an era where attacks adapt faster than defenses, our priority is to get ahead of every threat,” said Dr. Erika Voss. “Being able to validate recovery data against current threat indicators is one way to stay ahead of it ensuring we have more control in an unpredictable landscape.”
The enhanced threat detection capabilities are integrated with Commvault’s Synthetic Recovery technology, which enables organizations to remove compromised data during restoration while preserving clean datasets. This unified approach connects threat detection directly with recovery workflows, ensuring that restored systems are both operational and secure.
Industry analysts note that this integration reflects a broader shift in cybersecurity strategies. “We’re seeing a fundamental shift in how organizations approach recovery operations. The market is demanding integrated solutions that combine threat detection with recovery workflows, and Commvault’s layered approach to verified clean recoveries represents where the industry is heading,” said Fernando Montenegro, VP and Practice Lead Cybersecurity at The Futurum Group.
Commvault’s approach aligns with its ResOps model, which emphasizes collaboration between IT and security teams to manage resilience as a continuous process. By integrating threat intelligence with recovery operations, organizations can reduce downtime and improve their ability to respond to incidents effectively.
Pranay Ahlawat, Chief Technology and AI Officer at Commvault, highlighted the importance of combining detection with recovery assurance. “Security and IT teams need to operate from the same playbook during an incident. Threat intelligence at scale is increasingly table stakes what sets us apart is what happens next,” said Pranay Ahlawat. “By layering our proprietary signal correlation and AI-enabled algorithms on top of targeted threat hunting, and connecting that directly to verified recovery, we give organizations something powerful: not just the ability to find threats fast, but the confidence that what they restore is clean.”
The expansion of Commvault’s threat scanning capabilities underscores the growing importance of verified clean recovery in modern cyber resilience strategies, ensuring organizations can recover quickly without reintroducing hidden threats.
Recommended Cyber Technology News:
- Wiz Joins Google Cloud to Boost Multicloud Security
- Checkmarx One Adds AI Security to App Development
- Keeper Launches KeeperDB for Database Security
To participate in our interviews, please write to our CyberTech Media Room at info@intentamplify.com
