Cyber Scenarios Expose Shortcomings of BMR

Semperis argues that testing backups under ideal conditions creates only an illusion of resilience; real cyber resilience is about staying recoverable when the plan fails and the assumptions behind it collapse.

Syncing Domain Admins into Entra ID lets attackers pivot from compromised on-prem AD to the cloud, and back via password writeback. CIS and Microsoft advise keeping privileged admin accounts cloud-only.

Semperis won three 2021 Global InfoSec Awards from Cyber Defense Magazine—AD Forest Recovery (ransomware recovery), Directory Services Protector (IAM) and its Hybrid Identity Protection conference—plus details on DSP v3.5 and ADFR automation.

CISA's ransomware guidance is a reminder that recovery plans must cover AD: if domain controllers fall, standard backups aren't enough and forest recovery may be needed—keeping offline, non-domain-joined backups (or cloud copies) is decisive.

Wiper war stories: inside a 10,000-employee manufacturer whose entire AD and backup servers fell to NotPetya in under 10 minutes—and the hard recovery decisions that followed.

On 22 March 2026, the Resolv protocol was exploited for ~$26.8M after a compromise of its cloud infrastructure gave the attacker access to Resolv's AWS Key Management Service (KMS).