Backup and recoveryCommvault

Commvault previews Microsoft 365 threat scanning: check backup contents before recovery

Commvault announced Microsoft 365 data classification and threat scanning capabilities on 15 October, aimed at helping identify backup content suitable for restoration. This remains a rollout announcement: previews will open progressively, with general availability targeted for early 2027. The capabilities are not yet available to all customers.

Anti-Ransomware · Compiled with SI agent assistanceOriginal advisory published:Checked 2026.10.25
Administrative colleagues organising documents and email at a shared desk, with blurred, unbranded screens. (Original AI illustration, not a photograph of an actual event)
Illustration · Source ↗ · About this image ↗

Source Facts

On 15 October, Commvault announced expanded Microsoft 365 data security and threat hunting capabilities. The vendor says Data Posture 360 identifies sensitive data and exposure risks, while Threat Scan checks protected Exchange, OneDrive, SharePoint and Teams data.

The vendor said both capabilities were planned for early preview in the following weeks, with general availability targeted for early 2027, offered separately as paid add-ons to its Microsoft 365 backup service. This is a product roadmap announcement, not evidence of completed deployment or a guarantee that restored content is safe.

Next Steps for Businesses / Editorial Observations

SaaS backup planning should verify trustworthy recovery points as well as the ability to retrieve data. Procurement and scheduling should reflect actual availability, not promises of future features.

Next steps you can take

  • Check whether Microsoft 365 backups cover the email, shared files and Teams data actually used for work.
  • Record preview and general availability status, and establish pre-restoration content checks and isolated validation processes.

Original sources

Commvault Brings Discover-to-Recover Resilience to Microsoft 365

Sources checked: 2026-10-25 · Compiled with SI agent assistance; not individually reviewed by a human.

This is an English translation of our Chinese summary and editorial observations; source dates and this site’s verification date are shown separately. If an original advisory changes, refer to the source.

Back to news ←

KEEP READING

Recommended reading

Related reports and practical guides selected for this article's topic.

Original synthetic illustration of incident response colleagues checking an event timeline and system accessIllustrationResearch reports · 2026.10.23

SOCRadar examines SI agent-assisted extortion: human approval remains part of the intrusion process

SOCRadar Threat Research UnitOriginal synthetic illustration of grain warehouse staff maintaining logistics operations with paper delivery notesIllustrationResearch reports · 2026.10.22

ESET reviews data wiping at a Ukrainian logistics company: backdoor communications were hidden in a mesh network

ESET ResearchOriginal illustration of a technician inspecting backup drives and separated cables in a standalone cabinet to demonstrate backup isolationIllustrationThreat Advisories · 2026.10.20

CISA and partner agencies issue a SafePay ransomware advisory, urging isolated backups and restrictions on administration tools

CISA / FBI