Nebulon ImmutableBoot to Boost Ransomware Protection and Recovery

Nebulon, Inc. unveiled ImmutableBoot, new service in its cyber-resilience portfolio.

As ta ‘reboot-to-recover’ ransomware solution for bare metal Linux, ImmutableBoot protects application infrastructure from a ransomware attack or a misconfigured operating environment with a simple server reboot to a known, good OS version.

User misconfiguration and out-of-date server software often expose server infrastructure to security breaches, such as ransomware attacks. According to a recent report, threat actors continually leverage unpatched software vulnerabilities as their primary ransomware attack vector. ⁽¹⁾ IT organizations that are unable to enforce strict, centralized, and consistent patch and configuration management are particularly exposed as device-by-device management can result in misconfiguration, inconsistent patch levels, and server configuration ‘drift’ (i.e., deviation from expected server software configurations). This problem is amplified when managing and maintaining hundreds or thousands of servers, making them vulnerable to undetected malware which may lay dormant within the infrastructure.

ImmutableBoot allows operations teams to protect their application infrastructure with immutable, or ‘frozen,’ server software, reverting infected or misconfigured operating systems and application configurations to a known, good version each time the server reboots. In other words, recovery teams simply reboot infected servers to restore a known, good instance of their OS and application software.

ImmutableBoot is bundled with the company’s TimeJump, a combined server-storage solution which delivers ransomware recovery in 4mn. TimeJump recovers critical application data, and also infected OSs. With ImmutableBoot, itp can serve a known, good version of the OS as a part of the near-instant point-in-time rollback of the application infrastructure.

“Any organization concerned with cyber resilience should make immutability a key consideration when building its protection and recovery strategy,” said Siamak Nazari, CEO. “With TimeJump and ImmutableBoot, we are addressing protection and recovery for customers’ deep infrastructure, an area which has been previously ignored by the industry.”

^(¹) Ransomware Spotlight 2021 Year End Report by Ivanti in partnership with Cyware and Cyber Security Works (registration required)