AI Product Sales Manager

Rubrik & CrowdStrike launch faster identity attack fix. Thu, 3rd Sep 2026 (Today) Rubrik and CrowdStrike have introduced an integrated workflow for responding to identity-based cyber attacks, designed to cut recovery times from days to hours. The integration combines CrowdStrike's Charlotte Agentic SOAR and Falcon Next-Gen Identity Security with Rubrik Identity Resilience in a single process spanning detection, investigation and recovery. Identity attacks are a growing concern for security and IT teams because they can give intruders access to core systems, directories and applications. The new workflow is intended to reduce manual steps during a breach by linking threat detection with restoration of affected identity systems. Under the arrangement, CrowdStrike handles detection and containment of malicious activity, while Rubrik uses that information with identity activity logs to help identify what changed and what must be restored. The process can be used to reverse unauthorised changes in Active Directory, remove malicious files and launch forest recovery plans. Attack response The announcement centres on what the companies describe as a closed-loop response model. In practice, this means the same workflow can move from alerting and investigation to remediation and recovery without the hand-offs that often slow incident response teams. Another aim is to reduce the need for staff to switch between multiple security and IT tools during an incident. This could help security operations and infrastructure teams work within a more unified process when identity providers or directory environments have been compromised. Daniel Bernard, Chief Business Officer, CrowdStrike, said the move extends an existing relationship between the two companies. "Our long-standing partnership with Rubrik has always been about giving joint customers the best of both worlds. Today we execute on the next phase," Bernard said. "By bringing CrowdStrike and Rubrik together via agentic workflows, we're empowering organisations to contain and recover from identity-based attacks faster than ever," he said. Identity pressure The companies framed the launch against rising concern over attacks targeting identity systems. Rubrik cited research from its Zero Labs unit showing that 90 per cent of IT and security leaders viewed identity-based attacks as the single largest threat to their organisations. That concern reflects the central role of identity infrastructure in modern corporate networks. If attackers gain access to identity systems, they can often move laterally, maintain persistence and interfere with recovery efforts, making the speed and reliability of restoration a major issue after an intrusion. Rubrik said the integrated workflow can also analyse context from Human Resources Information Systems and identity governance and administration platforms across backup data. The aim is to help teams trace suspicious changes and determine whether identity records or permissions were altered as part of an attack. Anneka Gupta, Chief Product Officer, Rubrik, linked the company's position to the growing use of artificial intelligence by attackers and the shrinking window for human intervention. "As adversaries weaponise AI and a breach unfolds in milliseconds, relying on human reaction time is risky and obsolete," Gupta said. "We integrated Rubrik and CrowdStrike because you can't fight rapid AI threats with manual workflows. You need automated, intelligent defence to shut down active attacks instantly and guarantee a clean, fast recovery," she said. Existing links The latest integration builds on other identity-focused links already supported between the two companies' products. According to Rubrik, these include Falcon Next-Gen SIEM, Charlotte Agentic SOAR, Falcon Next-Gen Identity Security and Threat Intelligence. For customers, the pitch is not only faster containment but a cleaner return to service. In identity incidents, restoring operations without removing attacker persistence can leave organisations exposed to repeat compromise, particularly if directory changes or privileged accounts have been tampered with. The workflow is designed to close an incident with minimal manual intervention once detection, correlation and recovery actions are completed. A key measure highlighted by the companies is reducing recovery time objectives for identity providers from days to hours. That claim places the focus as much on recovery as on prevention, an area that has drawn more attention as companies face pressure to restore critical systems quickly after breaches while proving restored environments are free of malicious changes. The process described by the two vendors centres on identity environments rather than broader endpoint or network recovery, reflecting the view that access controls and directory services have become one of the most sensitive layers in enterprise security. Rubrik said teams can use the workflow to recover identity providers to clean, current states.

Stornox: India's sovereign, s3-compatible, geo-distributed cloud object storage platform. Vmpl. * September 02, 2026 11:59 PM Mumbai, September 2026: As Indian enterprises increasingly manage large volumes of sensitive business, customer and operational data, cloud storage is evolving from a basic infrastructure requirement into a strategic consideration involving security, availability, cost and data residency. Stornox is emerging in this space with a sovereign, S3-compatible and geo-distributed cloud object storage platform designed for enterprises seeking India-hosted storage infrastructure. The company's architecture distributes encrypted data shards across geo-fenced Indian nodes. Stornox says individual nodes do not contain complete files, while its architecture is designed to provide resilience and automatic recovery in the event of infrastructure failures. One of the platform's key propositions is compatibility with the widely adopted S3 ecosystem. Stornox says its storage platform supports the S3 API and integrates with enterprise tools such as Veeam, Nakivo, Synology, QNAP, Rclone, AWS CLI, Rubrik and Commvault. This allows organisations to explore cloud object storage without necessarily making major changes to existing backup and data-management workflows. Security is another major component of the offering. According to Stornox, customer data is encrypted using AES-256-GCM on the client side before leaving the customer's environment. The company describes this as a zero-knowledge architecture, with customers retaining control of encryption keys. S3 Object Lock and versioning are also supported for use cases involving immutable backups and ransomware protection. For Indian organisations, the location of data has also become an important consideration. Stornox says its platform uses India-only geo-fenced infrastructure, allowing customers to choose Indian data-centre locations for their workloads. The company positions this model as supporting organisations seeking to prepare their infrastructure for India's data protection requirements, including the Digital Personal Data Protection Act, 2023. Stornox also promotes a flat INR-based pricing model and claims potential savings of up to 40% compared with hyperscale cloud storage. Actual savings, however, would depend on an enterprise's storage volume, workload, transfer requirements and overall cloud configuration. The platform is aimed at several enterprise segments, including healthcare, manufacturing, AI and SaaS businesses, managed service providers, system integrators and media and entertainment companies. With cloud adoption continuing to expand in India, platforms combining S3 interoperability with India-focused data residency and geo-distributed architecture could become increasingly relevant for enterprises looking to balance flexibility, security and infrastructure control. Disclaimer: This article is based on information and claims provided by Stornox and publicly available information on its website. Statements relating to compliance, security, cost savings, performance, certifications and data protection represent the company's stated positioning and should be independently evaluated by enterprises according to their specific regulatory, technical and contractual requirements. Disclaimer: The content provided in this section is part of a third party press release service and does not reflect the editorial views or opinions of IANS. The responsibility for the accuracy, authenticity, and legality of the information lies solely with the content provider. IANS assumes no liability for the content published under this arrangement and encourages readers to verify the information independently before consuming it.

Rubrik and CrowdStrike have partnered to deliver an automated identity resilience workflow orchestrated by Charlotte Agentic SOAR. The integration combines CrowdStrike Falcon Next-Gen Identity Security's real-time threat detection with Rubrik Identity Resilience's automated data protection, enabling organisations to detect, investigate, and recover from compromised identity environments in hours rather than days. The solution establishes a closed-loop response where CrowdStrike detects malicious activity whilst Rubrik correlates detection data with identity activity logs. Teams can surgically undo malicious Active Directory changes or trigger automated forest recovery plans. Recent data from Rubrik Zero Labs found that 90% of IT and security leaders agree identity-based attacks represent the single largest threat to their organisations. The integration reduces recovery time objectives from days to hours.