Kubernetes has crossed the threshold from modern choice to baseline expectation. The 2025 CNCF Annual Cloud Native Survey confirms what platform teams already know from experience: Kubernetes is now the standard infrastructure for containerized workloads, and the organizations running it are no longer early adopters experimenting in a sandbox. Instead, they are enterprises with production-critical applications, complex multi-site environments, regulatory obligations, and no tolerance for unplanned downtime. The infrastructure is mature, but the protection strategies haven't always kept up. Read more

More than 70 new features ship in v13.1, including automated Active Directory Forest Recovery, threat detection extended to more workloads, post-quantum cryptography, and Veeam Intelligence that evolves from an assistant that answers questions into an agent that investigates and acts. Read more

Data isn't slowing down, and neither is what it costs to keep it. As unstructured data keeps multiplying, AI is driving up both the volume that organizations create and the pressure to hold onto it. And a supply-constrained hard drive market is pushing storage costs up and lead times out. Meanwhile, tightening data-residency and compliance rules mean more data must be kept longer, proven clean, and stored in a specific location. Read more

In February of 2024, a consortium of law enforcement agencies took down LockBit ransomware group. The discovery that LockBit retained victims’ stolen data despite promises to delete it demonstrates a critical flaw in the advice often given to ransomware victims. At the time, many legal and incident response professionals recommended payment on the assumption that LockBit had a strong financial incentive to honor its commitments and that the likelihood of data being publicly released after payment was relatively low. While that assessment may have appeared reasonable based on short-term observed outcomes, it relied heavily on assumptions about the behavior of a criminal enterprise that could never be independently verified. Read more

IBM Maximo has been a mainstay of Enterprise Asset Management (EAM) for decades. Organizations running physical assets at scale — power and utilities, oil and gas, transportation networks, manufacturing plants, facility operations, aviation, and healthcare providers — lean on it to manage preventive maintenance schedules, inventory, work orders, and the full lifecycle of equipment that keeps operations running. Read more

Data Security Posture Management (DSPM) is a data-first security approach that continuously discovers sensitive data across cloud, SaaS, and on-premises environments, classifies it, and reveals who can access it and how it’s exposed, so teams can reduce risk before it becomes a breach, a compliance gap, or an AI governance problem. Read more

Running OpenShift Virtualization at enterprise scale surfaces three challenges that don't go away on their own: Protecting large VM estates efficiently without full-image backup overhead, maintaining consistent coverage as environments grow and change, and getting fleet-wide visibility without managing every cluster independently. Read more

By the time a security team sits down to write its shadow AI policy, the problem is already months old. Dozens of unsanctioned AI tools are usually in use across the organization, and most of them are invisible to IT. The people using them aren't being reckless. They're trying to hit deadlines, and the approved path is slower than the browser tab that’s already open in front of them. Read more

Cloud data security is the set of technologies, policies, and controls that protect data stored in, processed by, or moving through cloud environments. It covers data in all three states: At rest, in transit, and in use. Read more

Organizations invest in backup to ensure they can recover when the unexpected happens. But today’s attackers understand that recovery is often the greatest obstacle to a successful attack. Rather than focusing solely on production systems, attackers increasingly target backup infrastructure itself: Attempting to delete backups, disable services, and compromise recovery points before launching an attack. Read more