Is Your Backup Infrastructure Really Secure? Veeam Patching, Tier Zero & Supply Chain Attacks
How secure is your backup infrastructure, and are you patching it fast enough—or too fast? In this episode of the Rebel Devs Podcast, hosts Jonah May and Tom May tackle the security challenges facing IT professionals, backup administrators, and cloud service providers. Starting with the latest Veeam security updates, Tom and Jonah explore why backup infrastructure deserves Tier Zero protection, the risks of domain-joined backup servers, and how to balance emergency patching against operational stability. Drawing on their experience from both sides of the backup industry—Tom working directly with customer environments at Different Dev and Jonah managing cloud infrastructure at CyberFortress—they discuss the realities of protecting mission-critical backup systems. Topics covered include: Veeam Security Updates: Recent vulnerabilities, Veeam v12 versus v13, and what administrators and Cloud Connect providers need to know. Tier Zero Infrastructure: Why backup servers deserve the same security consideration as your most critical systems. Patching Without Breaking Backups: Balancing vulnerability remediation, compatibility, and production stability. Domain Isolation: Why separating Veeam infrastructure from production Active Directory can significantly reduce attack exposure. Defense in Depth: MFA, least-privilege access, immutable backups, and protecting stored credentials. Cloud Provider Security: Coordinating updates between service providers and customers without disrupting backup operations. Managed Services & Shared Responsibility: Who should have administrative access, and what controls should govern changes? Auditing & Change Management: The importance of individual accounts, approval workflows, logging, and accountability. Software Supply Chain Attacks: How compromises involving npm packages introduce another dimension of risk to modern infrastructure. Whether you're managing a single Veeam deployment or protecting hundreds of customer environments, this episode offers practical perspectives on reducing security risks without compromising recoverability. Because protecting your backups is just as important as protecting the systems they back up. Connect with the hosts: Tom May — Different Dev | https://differentdev.com Jonah May — CyberFortress | https://cyberfortress.com #RebelDevs #Veeam #Cybersecurity #DataProtection #BackupSecurity #DisasterRecovery #VeeamBackup #CloudConnect #ITSecurity #RansomwareProtection
