A newly disclosed cloud vulnerability used to give companies weeks to patch it before anyone came looking. In the UAE right now, that window has shrunk to about a day, and the gap between a flaw surfacing in someone’s cloud stack and attackers actively exploiting it keeps closing.
The UAE Cyber Security Council reports the country absorbing close to 800,000 cyberattacks daily, a large share of them aimed at cloud-hosted infrastructure. PwC data shows the window between a vulnerability going public and attackers actively exploiting it has collapsed from roughly 23 days in 2025 to barely 24 hours in 2026.
AI is making the damage worse once attackers get into a cloud environment, too. Among UAE organizations hit by ransomware, 83% said AI made the attack more effective, according to Proofpoint’s 2026 AI-Era Ransomware Report.
Against that backdrop, Commvault announced an expansion of Cloud Rewind, its cloud application recovery platform, adding broader coverage for Microsoft Azure resources. The company says the update triples its Azure protection, now covering 62% of the Azure resource types enterprises actually run in production, up from roughly a third before.
The problem Commvault is targeting goes beyond taking a hit in the cloud. It’s what happens after. Absolute Security’s 2026 State of Enterprise Cyber Resilience report found 57% of enterprises needed more than 4.5 days on average to recover, largely because manually rebuilding a cloud environment, its configurations, and its dependencies by hand is slow and prone to mistakes.
Cloud Rewind works by continuously discovering cloud resources and mapping how applications depend on each other across a cloud environment, then automating the rebuild from one platform. Organizations can also run recovery simulations inside isolated, air-gapped cloud environments before an actual incident forces the question.
“Modern applications are only as resilient as the cloud infrastructure beneath them,” said Fady Richmany, Commvault’s corporate vice president and general manager for emerging markets, tying the update to the company’s work with the UAE Cyber Security Council through its Abu Dhabi innovation center.
Pranay Ahlawat, Commvault’s chief technology and AI officer, said modern applications depend on interconnected cloud services and configurations that need to recover together, not piecemeal. Melinda Marks, senior research director at Omdia, added that many organizations only discover their cloud recovery plan has gaps once an incident has already happened, which is precisely the moment it’s too late to fix.
