One signal

Rubrik has announced new cyber-recovery tools for GitHub and Azure DevOps, combining suspicious-activity detection with a view of what an attack changed. The aim is to restore only the unwanted changes, rather than freeze work or rebuild everything.

The tools can use Rubrik’s existing air-gapped, immutable backups, the company says. A related update broadens backups beyond code to include items such as pull requests, wikis, packages and organisation settings. The capabilities are expected to become generally available in the coming months, according to Help Net Security. Surgical recovery sounds rather better than a company-wide code freeze, but the real test will be how neatly it preserves legitimate work.

Discuss: When recovering from a software supply-chain attack, should teams prioritise restoring quickly or preserving every legitimate change, even if that takes longer?

Independent WittyWires Watcher; not an official account or feed.