Latest cybersecurity reporting from selected sources.

UK Rollout to Link Arco's Cybersecurity Assurance With Sophos's Threat IntelligenceSophos acquired Arco to expand into cybersecurity assurance and compliance, launching a new CISO Advantage capability. The company plans a phased rollout starting in the U.K., integrating Arco’s risk and regulatory mapping platform with Sophos Central and its global threat intelligence operations.

Acquisition Boosts AI Defense from Red-Teaming, Risk Scoring to Compliance TrackingThe SPLX acquisition gives Zscaler new tools for red-teaming, AI governance and pre-deployment risk analysis. The deal will strengthen Zscaler's push to provide comprehensive GenAI protection, from cloud model discovery to runtime guardrails and ongoing compliance reporting.

Acquisition Enhances Privileged Session Visibility, Session Replay, Granular AccessJumpCloud’s acquisition of VaultOne enhances its ability to offer secure, auditable privileged access management. With session recording, credential isolation and future integration into JumpCloud’s compliance ecosystem, the move reflects a broader identity and access strategy.

$120M Purchase of Otorio Enhances On-Prem Security, Active Querying and ComplianceArmis' acquisition of Otorio for $120 million strengthens its on-premises operational technology security capabilities. The deal expands Armis' ability to serve air-gapped and compliance-driven industries while integrating secure remote access and active querying into its security platform.

Acquisition Boosts Speed With Agentic AI for Analysts and Automated Risk ReportingDeepwatch’s acquisition of Dassana enhances its security offerings with agentic AI and automated threat exposure management. CEO John DiLullo highlights benefits including automated compliance reporting, faster detection capabilities for customers, and rapid integration with existing MDR services.

The combined companies will create a seamless ecosystem of trust, governance, risk, and compliance.

Data Security Posture Management Becomes Key to Cloud Visibility But Lacks ControlsThe rapid rise of DSPM has fueled deals by major security firms looking to enhance their platforms. Industry leaders see DSPM as crucial for cloud data visibility, security integration and regulatory compliance. But can standalone DSPM vendors survive, or will they be absorbed by larger platforms?

Data Security Posture Management Becomes Key to Cloud Visibility But Lacks ControlsThe rapid rise of DSPM has fueled deals by major security firms looking to enhance their platforms. Industry leaders see DSPM as crucial for cloud data visibility, security integration and regulatory compliance. But can standalone DSPM vendors survive, or will they be absorbed by larger platforms?

LexisNexis Combines AI-Driven Document Authentication With Its Fraud SolutionsTo counter AI-driven fraud, LexisNexis acquired IDVerse, a London-based startup focused on document authentication and regulatory compliance. This acquisition aims to seamlessly integrate advanced tools into LexisNexis' fraud and identity platforms, enhancing global operations.

Kivera Integrates Controls Into Cloudflare One to Prevent Cloud MisconfigurationsWith the acquisition of New York-based startup Kivera, Cloudflare will enhance its Cloudflare One platform, adding proactive controls that secure cloud environments, prevent misconfigurations and improve regulatory compliance for businesses using multiple cloud providers.

The addition of Network Perception will provide Dragos with enhanced network visibility, compliance and segmentation analytics to the Dragos OT cybersecurity platform.

Acquisition Brings Vulnerability Management to Absolute's Cyber Resilience PlatformAbsolute Security has strengthened its platform with the acquisition of Syxsense, adding powerful automated vulnerability management tools to its existing endpoint security capabilities. The move aims to improve security compliance and simplify complex remediation tasks for organizations.

Acquisition of Zero Trust Tool Secures Remote Access to Critical IT InfrastructureCloudflare acquired BastionZero to provide its platform with enhanced zero trust controls for servers, Kubernetes clusters and databases. The purchase aims to secure remote access, improve compliance and simplify infrastructure management for hybrid IT environments.

SCADAfence will integrate into the Honeywell Forge Cybersecurity+ suite providing expanded asset discovery, threat detection, and compliance management capabilities.

Software written or acquired outside of IT's purview is software that IT can't evaluate for security or compliance.

Combination of two companies to help SAP customers streamline audit, compliance and control processes.