Acquisitions can change ownership of security teams, systems, and data, creating risks around access, integration, compliance, and incident response.
Search across headline titles and summaries.
Background for this topic.
An acquisition is the purchase of a company, business unit, or technology by another organization, transferring control of its people, systems, and data. In information security, the event matters because the buyer may inherit unfamiliar networks, cloud services, software, credentials, suppliers, and unresolved security issues.
Before integration, security due diligence should identify exposed systems, critical vulnerabilities, active threats, prior incidents, and obligations governing personal or regulated data. After closing, teams must control access between environments, remove unnecessary accounts, verify asset ownership and logging, and bring inherited systems into vulnerability-management and monitoring processes. Connecting legacy infrastructure too quickly can create new attack paths, while poorly planned changes can hinder detection or incident response. Privacy and compliance reviews should confirm that data use, retention, and cross-border transfers remain lawful under the combined organization.
Weekly headline count for the current query.
Startup Maps Detections Against MITRE ATT&CK and Recommends Missing ProtectionsCribl acquired Boston-based detection engineering startup CardinalOps to help organizations continuously measure MITRE ATT&CK coverage, automate TTP-based detections across SIEM platforms and move behavioral threat detection closer to the telemetry pipeline.
SaaS Observability Vendor Adds Real-Time Network Flow Telemetry to DNS IntelligenceInfoblox plans to acquire San Francisco-based network observability specialist Kentik to combine DNS, DHCP, asset intelligence and real-time network flow telemetry into a unified platform designed to help enterprises manage increasingly complex hybrid cloud and AI-driven environments.
Acquisition Adds MSP-Friendly PAM, MFA and SSO to Existing Identity Security ToolsBarracuda acquired Evo Security to add privileged access management, multifactor authentication and single sign-on to its security platform, creating an MSP-focused identity resilience offering designed to simplify protection for small and midsize businesses while automating identity management.
Deal Combines Dragos OT Threat Detection With runZero, NetRiseAccenture is acquiring a majority stake in Dragos and full ownership of runZero and NetRise in a $4.2 billion deal to build an end-to-end OT cybersecurity platform for power grids, water systems, manufacturing plants and other critical infrastructure operators.
Cursor Engineers Gain Access to Colossus for Large-Scale Model TrainingSpaceX has agreed to acquire Cursor parent Anysphere for $60 billion in an all-stock transaction, combining one of the fastest-growing AI coding platforms with massive computing infrastructure to accelerate development of frontier AI models and autonomous software engineering agents.
Buying New York Startup Adds Just-in-Time Authorization and Governance Controls1Password acquired access governance startup Apono to combine credential security, just-in-time authorization and intent-based access controls into a unified platform designed to govern humans, machines and AI agents while reducing risks tied to static permissions.
500-Person Team Will Help Vobis Blend AI, Data and Security Architecture ServicesVobis Ventures acquired Optiv's 500-person consulting business to combine cybersecurity architecture expertise with AI implementation, governance and agentic AI security capabilities as enterprises struggle to manage the risks of rapidly expanding AI deployments.
OT Firm Looks to Secure IoT, Industrial and Medical DevicesDragos, one of the first OT cybersecurity companies, announced Monday it acquired Phosphorus, the IoT security and management player, a move analysts said was designed to catch Dragos up with its competitors and expand its offerings to cover the quickly growing IoT sector.
San Francisco Startup Built MCP Gateway Technology for AI Authorization WorkflowsSnowflake plans to acquire AI governance startup Natoma to help enterprises centrally manage model context protocol access, delegated permissions and AI agent connectivity as organizations confront growing risks tied to shadow AI deployments and machine identity sprawl.
Deal Adds LLM-Based Reasoning to Sonar's Algorithmic Code Verification PlatformSonar purchased Silicon Valley-based startup Gitar to add LLM-based code review and verification capabilities as enterprises use AI agents to generate software that deterministic tools alone like SonarQube may not reliably audit, validate or govern.
Zscaler CEO Jay Chaudhry Says New AI Frontier Models Have Yet to Boost RevenueZscaler reported strong renewal growth and rising demand for zero trust security amid AI-driven threats, but slowing new customer acquisition, sales leadership turnover and cautious expectations for Red Canary integration weighed on investor confidence.
Startup Symmetry Systems Maps Relationships Across AI, SaaS and Cloud AssetsZscaler plans to acquire San Francisco-based Symmetry Systems to unify visibility across AI models, identities, applications and datasets, helping enterprises track AI lineage, govern agentic identities and enforce granular zero trust controls across cloud and SaaS environments.
Acquisition Focuses on Validating AI Agents, Models in Critical Security WorkflowsCheck Point said its acquisition of AI evaluation startup Deepchecks will help validate and monitor autonomous security agents, as enterprises increasingly rely on generative AI to manage critical network security operations without introducing hallucinations or service disruptions.
Jit Context Graph Continuously Tracks Access Patterns, Entitlements, Asset HistoryTorq acquired security context graph startup Jit to give AI-driven SOC workflows deeper awareness of organizational relationships, historical incidents, user privileges and asset behavior, helping autonomous agents improve alert triage, investigations and false-positive reduction.
Driftnet Acquisition Adds Real-Time Visibility Into Exposed Assets and AI RisksSecurityScorecard acquired internet reconnaissance startup Driftnet to expand real-time visibility into hidden infrastructure, exposed assets and AI-driven third-party risks while strengthening threat hunting, attribution and internet-scale intelligence capabilities.
Akamai Says Startup LayerX's Browser Telemetry Will Strengthen Access DecisionsAkamai said its proposed $205 million acquisition of LayerX will add enterprise browser security and AI usage controls to its zero trust portfolio as enterprises grapple with generative AI data exposure, autonomous AI agents and growing demand for browser-level visibility.
WatchGuard Aims to Reduce Alert Fatigue Through Telemetry CorrelationWatchGuard acquired SaaS security startup Perimeters to strengthen cloud detection and response capabilities spanning identity threat detection, cloud posture management and shadow IT discovery as enterprises face escalating attacks targeting cloud applications and distributed environments.
Startup Acquisition Adds Centralized Policy Control Over Agent CommunicationsPalo Alto Networks plans to acquire Portkey to centralize AI agent communications through a gateway that enforces runtime security, identity controls and governance, addressing rising risks from autonomous agents with broad system access and fragmented enterprise visibility.
Combined Platform Spans Dependencies, Extensions, Developer ToolsSocket’s acquisition of Secure Annex extends software supply-chain security beyond open-source dependencies into browser and IDE extensions, addressing AI-driven development risks and fragmented visibility across modern developer workflows.
Fabrix Security Buy Adds Real-Time Decisioning for Human and Machine IdentitiesSilverfort's acquisition of Israeli startup Fabrix Security adds AI-driven, real-time access decisioning built on a contextual knowledge graph, aiming to replace static policies and scale identity security for human, machine and agentic identities operating at machine speed.