All advisories
Ransomware operators target backups first. Keep an offline copy and rehearse a full restore.
1 min read
Severity: MediumPlan remediation and watch for changes.
Severity
Medium
Published
6 November 2026
Updated
12 November 2026
Affected
- Backup servers
- NAS
- cloud storage
- hypervisors
CVE IDs
No specific CVE IDs.
Checklist
- Follow the 3-2-1 rule, with at least one immutable or offline copy.
- Use separate credentials for backup systems, never domain admin.
- Run a full restore drill every quarter and time it.
- Document the order in which systems must come back.
Need help with this?
We'll check whether your systems are exposed, set priorities, and help your team remediate.