In the ongoing battle against ransomware, companies are becoming more resilient. Reports from Coveware by Veeam and Chainalysis show a significant decline in ransomware payments in Q4 of 2024. Read more

At Veeam, we believe in the power of education and collaboration to drive success in today’s digital landscape. The success of Veeam has always been rooted in placing the customer at the center of our efforts. Read more

The HIPAA Security Rule sets national HIPAA security standards for protecting the confidentiality, integrity, and availability of ePHI. The Health Insurance Portability and Accountability Act (HIPAA) was enacted in 1996. The HIPAA Security Rule was finalized in 2003, with compliance required by 2005, and it has continued to evolve alongside the shift from paper to digital records. As a direct result of record-setting cyberattacks in the healthcare industry in 2023 and 2024, the Office for Civil Rights (OCR) at the Department of Health and Human Services (HHS) published a Notice of Proposed Rulemaking (NPRM) in January 2025 to modify the HIPAA Security Rule in order to strengthen cybersecurity protections for ePHI. Read more

Data drives modern business operations, decisions, and customer trust. But with ever-growing threats such as ransomware, hardware failures, and natural disasters, protecting data has never been more challenging. Read more

No organization is immune to cyberthreats. 75% of organizations experienced at least one ransomware attack in 2023, meaning having a robust Incident Response Plan (IRP) is no longer optional  — it’s a necessity. An incident response plan acts as your organization's defense playbook, ensuring a swift, coordinated response to mitigate damage, minimize downtime, and protect sensitive data. Read more

In 2025, enterprises face mounting challenges in meeting new regulatory requirements and maintaining compliance. This year marks the full implementation of the Digital Operational Resilience Act (DORA) for countries part of the European Union (EU), requiring financial institutions as well as certain third-party service providers to demonstrate their ability to withstand, respond to, and recover from various disruptions and cyberthreats. Meanwhile, in the United States, the Cybersecurity, and Infrastructure Security Agency (CISA) is finalizing mandatory cyberattack reporting regulations for those organizations that fall into the category of Critical Infrastructure as defined by the Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA). Read more

Starting on Jan. 27, 2025, Microsoft will initiate the process of ending OneDrive storage access for all unlicensed users. We advise all organizations to take note of the following information. Read more

In the digital age, cybersecurity is not just about protecting data; it’s about ensuring that the very fabric of our financial systems remain intact and resilient against threats. The introduction of the Digital Operational Resilience Act (DORA) by the European Union marks a significant milestone in the journey toward a safer and more stable financial ecosystem. The financial services sector, together with their cybersecurity and resilience structures, has witnessed firsthand the evolution of digital threats and the increasing sophistication of cyber adversaries. It is against this backdrop that we delve into the importance of DORA and its potential to redefine the landscape of financial services, cybersecurity, and resilience. Read more

Ransomware, hardware failures, and natural disasters all have one thing in common — they can stop your business in its tracks. In today’s threat landscape, recovery speed matters just as much as prevention. Disaster Recovery as a Service (DRaaS) delivers an on-demand, cloud-hosted environment to failover critical workloads and keep operations running when the unexpected strikes. Read more

Cyberthreats are evolving at an unprecedented pace, and organizations must rethink their approach to data security. Traditional reactive measures are no longer sufficient. Enter Secure by Design, a proactive strategy aimed at embedding security into every stage of product development, ensuring robust defenses from day one. This blog explores the key principles, benefits, and practical applications of Secure by Design, and how organizations like Veeam are championing its adoption.

What is the Secure by Design Strategy?

The Secure by Design approach shifts the focus from reactive security such as patching vulnerabilities after deployment to integrating security measures during the development and deployment lifecycle. By prioritizing security early, organizations reduce the risk of cyber incidents and the costs associated with reactive security fixes.

Historically, ... Read more