[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fhAlW15tmDvmVrw2gCSJoXqXwTtaG0tkQhzKHVvX9Ifw":3},{"article":4,"iocs":53,"watch_terms":54,"solutions":55,"lesson":121},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":30,"category":31,"article_tags":35},"2ce7645b-ae26-4ada-832d-f12b0bca0a06","Rubrik hosts NAS backups in isolated, immutable vaults","rubrik-hosts-nas-backups-in-isolated-immutable-vaults-7d7a12","Rubrik has announced Rubrik-Hosted Protection for On-Premise Unstructured Data. The offering is built on Rubrik’s Network Attached Storage (NAS) Cloud Direct service. Customers now have clean recovery for enterprise-scale NAS data without having to buy, build or manage backup storage. “Backups mean nothing if you can’t be confident in a clean recovery, and hardware limitations shouldn’t stand between an enterprise and its resilience,” said Anneka Gupta, Chief Product Officer, Rubrik. “By taking on backup storage … More → The post Rubrik hosts NAS backups in isolated, immutable vaults appeared first on Help Net Security.","Rubrik has launched Rubrik-Hosted Protection for On-Premise Unstructured Data, a service built on its NAS Cloud Direct offering. This new solution allows organizations to store NAS backups in isolated, immutable vaults hosted by Rubrik, eliminating the need for customers to manage their own backup storage infrastructure. The service includes ransomware detection and sensitive data discovery features, aiming to simplify data recovery and enhance resilience against attacks.","Rubrik introduces hosted NAS backup storage for immutable, isolated data recovery.","https:\u002F\u002Fwww.helpnetsecurity.com\u002F2026\u002F11\u002F05\u002Frubrik-unstructured-data-protection\u002F","https:\u002F\u002Fimg.helpnetsecurity.com\u002Fwp-content\u002Fuploads\u002F2024\u002F11\u002F28150559\u002Fhns-large_logo.webp","2026-11-05T14:48:20+00:00","2026-11-05T15:00:05.38133+00:00",7,[17,20,22,25,28],{"name":18,"type":19},"Rubrik-Hosted Protection for On-Premise Unstructured Data","product",{"name":21,"type":19},"NAS Cloud Direct",{"name":23,"type":24},"Rubrik","vendor",{"name":26,"type":27},"Network Attached Storage (NAS)","technology",{"name":29,"type":19},"Rubrik Security Cloud","02371804-cf6d-4449-98de-f1a2d4d9b266",{"id":30,"icon":32,"name":33,"slug":34},null,"Tools","tools",[36,38,43,48],{"category":37},{"id":30,"icon":32,"name":33,"slug":34},{"category":39},{"id":40,"icon":32,"name":41,"slug":42},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":44},{"id":45,"icon":32,"name":46,"slug":47},"7d8b5ab8-ea0b-4ced-ae97-ec251b86993a","Ransomware","ransomware",{"category":49},{"id":50,"icon":32,"name":51,"slug":52},"c70f3a41-2f0c-4608-870d-b8cbcd8be076","Cloud Security","cloud-security",[],[23,18,21],{"controls":56,"vendors":115},[57,86],{"slug":58,"name":59,"problem":60,"products":61},"cloud-security-posture","Cloud security posture management (CSPM and CNAPP)","Misconfigured cloud storage and over-permissive roles get caught before they leak.",[62,70,78],{"vendor_slug":63,"vendor_name":64,"vendor_logo":65,"product_slug":66,"product_name":67,"url":68,"description":69},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-cloud","Microsoft Defender for Cloud","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fcloud-security\u002Fmicrosoft-defender-cloud","Cloud posture management and workload protection for Azure, AWS and Google Cloud.",{"vendor_slug":71,"vendor_name":72,"vendor_logo":73,"product_slug":74,"product_name":75,"url":76,"description":77},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","cortex-cloud","Cortex Cloud","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcloud","Cloud security platform covering posture management and runtime protection.",{"vendor_slug":79,"vendor_name":80,"vendor_logo":81,"product_slug":82,"product_name":83,"url":84,"description":85},"wiz","Wiz","\u002Fvendor-logos\u002Fwiz.png","wiz-cloud","Wiz Cloud","https:\u002F\u002Fwww.wiz.io\u002Fplatform\u002Fwiz-cloud","Agentless cloud security posture and attack path analysis across major cloud providers.",{"slug":87,"name":88,"problem":89,"products":90},"immutable-backup","Immutable backup and recovery","Ransomware cannot delete or encrypt your way back.",[91,99,107],{"vendor_slug":92,"vendor_name":93,"vendor_logo":94,"product_slug":95,"product_name":96,"url":97,"description":98},"cohesity","Cohesity","\u002Fvendor-logos\u002Fcohesity.png","dataprotect","Cohesity DataProtect","https:\u002F\u002Fwww.cohesity.com\u002Fplatform\u002Fdataprotect\u002F","Backup and recovery with immutable snapshots, on premises or as a service.",{"vendor_slug":100,"vendor_name":101,"vendor_logo":102,"product_slug":103,"product_name":104,"url":105,"description":106},"commvault","Commvault","\u002Fvendor-logos\u002Fcommvault.png","commvault-cloud","Commvault Cloud","https:\u002F\u002Fwww.commvault.com\u002Fplatform","Backup and recovery platform with immutable storage and recovery testing.",{"vendor_slug":108,"vendor_name":109,"vendor_logo":110,"product_slug":111,"product_name":112,"url":113,"description":114},"veeam","Veeam","\u002Fvendor-logos\u002Fveeam.png","veeam-data-platform","Veeam Data Platform","https:\u002F\u002Fwww.veeam.com\u002Fproducts\u002Fveeam-data-platform.html","Backup and recovery for virtual, physical, cloud and SaaS workloads, with immutable storage options.",[116],{"slug":117,"name":23,"logo_path":118,"roles":119},"rubrik","\u002Fvendor-logos\u002Frubrik.png",[120],"reported_by",{"slug":122,"title":123,"body":124,"framework_refs":125,"framework_notes":133},"immutable-isolated-vaults-are-essential-for-ransomware-resilient-backup-strategy","Immutable, Isolated Vaults Are Essential for Ransomware-Resilient Backup Strategy","Organizations increasingly face ransomware attacks that specifically target backup systems to eliminate recovery options, making isolated and immutable backup storage a critical defense layer. Rubrik's Rubrik-Hosted Protection for On-Premise Unstructured Data addresses this by moving NAS backups into vendor-managed, air-gapped vaults that attackers cannot reach or corrupt even if the primary environment is compromised. The inclusion of ransomware detection and sensitive data discovery further strengthens the recovery posture by ensuring organizations know what they have and whether it has been tampered with. This matters because a backup that an attacker can encrypt or delete is no backup at all — resilience depends on backups being both recoverable and trustworthy. Without immutability and isolation, even well-designed backup schedules can be rendered useless by a single ransomware event.",[126,127,128,129,130,131,132],"NIST SP 800-53 SI-2: Flaw Remediation","NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control","CIS Control 11: Data Recovery","ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities","GDPR Article 32","DORA Article 9","NIS2 Article 21(2)(b)",{"DORA Article 9":134,"GDPR Article 32":135,"NIS2 Article 21(2)(b)":136,"CIS Control 11: Data Recovery":137,"NIST SP 800-53 SI-2: Flaw Remediation":138,"ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities":139,"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control":140},"DORA mandates that financial entities maintain resilient ICT systems including robust backup and recovery capabilities; air-gapped, immutable vaults with integrated ransomware detection fulfill these operational resilience requirements.","Article 32 requires appropriate technical measures to ensure data availability and resilience; immutable, isolated backups with sensitive data discovery directly support compliance by protecting personal data from ransomware-driven loss.","NIS2 explicitly requires incident handling and business continuity measures including backup management; isolated and immutable backup vaults with ransomware detection are a direct technical implementation of this obligation.","CIS Control 11 mandates automated, tested, and protected backups — including ensuring backup data is immutable and stored separately from production — directly aligning with the isolated vault model this service provides.","While focused on patching, SI-2 also supports system integrity assurance; immutable backups are a compensating control ensuring data integrity cannot be silently undermined by malicious or accidental modification.","Ransomware exploits vulnerabilities in backup infrastructure; hosting backups in vendor-managed immutable vaults reduces the attack surface and limits exposure to unpatched vulnerabilities in customer-managed storage systems.","Isolating backup vaults requires strict access control so that compromised production credentials cannot be used to reach or delete backup data, which is exactly what isolated vault architecture enforces."]