Commvault Updates Security Advisory After Nation-State Threat Actor Activity in Azure

Commvault updated its March 7, 2025 security advisory after Microsoft alerted them to suspicious activity on February 20, 2025: a nation-state actor exploited a zero-day in their Azure environment (now patched). The company reports a small number of shared Microsoft customers were impacted but states there was no unauthorized access to stored customer backup data, activated its incident response plan, engaged external cybersecurity firms and authorities, implemented enhanced protections (key rotation, stronger monitoring, conditional access), and published recommended mitigations and IOCs (several malicious IP addresses) for customers to block and report.