The cybersecurity landscape has reached an inflection point. With 83% of organizations targeted by ransomware in the past 12 months and identity attacks comprising over 99% of all daily cyber threats, data protection has evolved far beyond simple backup strategies. Today’s enterprise needs “cyber resilience” – and Cohesity’s latest announcements at the Catalyst 1 Data Security Summit show they’re serious about defending both your data and the identity infrastructure that protects it.
The Twin Pillars Strategy: Data + Identity Protection
Here’s the thing about modern cyberattacks: they don’t just encrypt your files anymore. Today’s threat actors go straight for Active Directory, the digital nervous system that controls access to virtually everything in your environment. Once they compromise AD, attackers can move laterally through your network like they own the place – because, effectively, they do.
That’s where Cohesity’s dual announcement becomes particularly interesting. The company isn’t just expanding their data protection capabilities; they’re tackling the identity security challenge head-on through their partnership with Semperis.
Cohesity Identity Resilience, powered by Semperis, represents something new: a unified approach that protects both your data and the identity infrastructure that guards it. This isn’t just another security tool, it’s an acknowledgment that Active Directory compromises are devastating because they give attackers so many paths to take advantage of critical systems, as Semperis CEO Mickey Bresman explains.
Beyond Traditional Cyber Vaulting
Rather than focus on basic immutable storage, Cohesity is pushing boundaries with their enhanced cyber resilience framework. Their latest announcement includes some pretty impressive developments:
On-Premises Isolated Vaults: The new FortKnox Self-managed option addresses data sovereignty requirements that many enterprises face. Unlike cloud-based solutions, this gives organizations complete control over their cyber vault while maintaining the advanced obfuscation technologies that make vault locations undiscoverable, even when primary admin credentials are compromised.
Think about that for a moment. Even if attackers steal your domain admin credentials, they still can’t find your protected data vault. That’s the kind of defense-in-depth thinking that separates serious cyber resilience from checkbox security.
AI-Enhanced Recovery Orchestration: The generally available RecoveryAgent tool brings automation to what’s traditionally been a manual, error-prone process. With embedded malware scanning and AI capabilities, it doesn’t just restore your systems-it forecasts recovery timelines and organizes workflows with precision.
The Identity Security Reality Check
Let’s talk numbers that should concern every data center administrator. Recent research reveals that only 27% of companies maintain dedicated Active Directory – specific backups. Most backup approaches don’t isolate AD from the operating system, creating opportunities for attackers to plant backdoors that persist through traditional recovery efforts.
The Cohesity-Semperis partnership addresses this gap directly. Their solution provides:
- Proactive AD hardening with scanning for hundreds of indicators of exposure
- Secure, immutable backups with cyber vaulting capabilities
- Rapid forest recovery that cleanses attacker artifacts
- Specialized forensics for comprehensive post-breach analysis
The Expanded Connector Universe
Here’s where Cohesity’s broader strategy becomes clear. They’re planning to add 40 additional connectors by end of 2025, covering the most popular compute, container, storage, and database services across AWS, Azure, and Google Cloud.
This matters because modern attacks target hybrid environments. Threat actors don’t care if your critical workload runs on-premises, in AWS, or across multiple clouds – they’ll find the weakest link. Cohesity’s approach recognizes this reality by providing consistent protection regardless of where your workloads live.
NetBackup DirectIO deserves special mention here. By allowing Cohesity Data Cloud to serve as a high-performance immutable storage layer for NetBackup data sources, organizations can achieve up to 53% cost and storage efficiency savings while maintaining enterprise-grade recovery capabilities.
The AI Integration Play
While everyone’s talking about AI threats, Cohesity says it is focusing on AI defense. Their enhanced Gaia knowledge discovery assistant now includes sensitive data redaction, multi-language support, and integrations with Slack and Google Agentspace.
But here’s what’s particularly clever: they’re incorporating Google Threat Intelligence into their threat scanning at no extra cost. This means your protected data gets scanned against the latest threat indicators without additional budget impact.
The partnership with Cyera adds another layer of sophistication. By embedding data classification and governance capabilities directly into the Cohesity platform, organizations can identify sensitive data within backups, eliminate redundant information, and enforce compliance requirements in near real-time.
The Business Reality
Here’s the uncomfortable truth: 78% of ransomware victims pay ransom, and many pay multiple times. The average cost of a ransomware breach is now $5.13 million, but that’s just the beginning.
Organizations face weeks or months of recovery time, regulatory fines, customer churn, and reputational damage that can persist for years. In this environment, cyber resilience isn’t a nice-to-have-it’s business survival.
Looking Forward: The Integrated Defense Model
What Cohesity has announced represents a maturation in thinking about enterprise data protection. Instead of treating backup, identity security, and threat detection as separate problems, they’re building an integrated platform that recognizes how these elements interconnect in real attacks.
The five-step cyber resilience framework – protect all data, ensure recovery, detect threats, practice application resilience, and optimize risk posture – provides a practical roadmap for organizations struggling to make sense of an increasingly complex threat landscape.
For data center administrators and security professionals, this unified approach eliminates the traditional silos between backup teams, identity teams, and security operations. When everything operates from a common platform with shared intelligence, response times improve and coverage gaps disappear.
The Verdict
Cohesity’s announcements signal a recognition that traditional data protection strategies are insufficient for modern threat environments. By combining best-in-class data protection with specialized identity security capabilities, they’re addressing the reality that most successful attacks exploit both data and identity vulnerabilities.
Whether this integrated approach becomes the industry standard remains to be seen. But for organizations tired of managing dozens of point solutions that don’t communicate effectively, Cohesity’s cyber resilience platform offers a compelling alternative: comprehensive protection that actually works the way modern attacks happen-fast, coordinated, and targeting multiple attack vectors simultaneously.
The question isn’t whether you’ll face a sophisticated cyberattack. With attacks happening every 39 seconds, it’s whether you’ll be ready when it happens.
##
