Acquisitions can change ownership of security teams, systems, and data, creating risks around access, integration, compliance, and incident response.
Search across headline titles and summaries.
Background for this topic.
An acquisition is the purchase of a company, business unit, or technology by another organization, transferring control of its people, systems, and data. In information security, the event matters because the buyer may inherit unfamiliar networks, cloud services, software, credentials, suppliers, and unresolved security issues.
Before integration, security due diligence should identify exposed systems, critical vulnerabilities, active threats, prior incidents, and obligations governing personal or regulated data. After closing, teams must control access between environments, remove unnecessary accounts, verify asset ownership and logging, and bring inherited systems into vulnerability-management and monitoring processes. Connecting legacy infrastructure too quickly can create new attack paths, while poorly planned changes can hinder detection or incident response. Privacy and compliance reviews should confirm that data use, retention, and cross-border transfers remain lawful under the combined organization.
Weekly headline count for the current query.
When Akamai announced its LayerX acquisition, the company joined a growing list of vendors adding secure enterprise browsers to their product portfolios.
The acquisition looks to boost visibility into third-party ecosystems, which are becoming a bigger concern as vectors for supply chain attacks.
A social engineering campaign impersonating PayPal and Amazon uses customer support interactions to acquire sensitive info.
StrongDM, which injects ephemeral, real-time credentials into developer workflows, will enable Delinea to offer privilege access management across cloud, SaaS, Kubernetes, and database environments.
Zscaler's acquisition of SquareX comes as competitors like CrowdStrike and Palo Alto Networks are also investing in secure browser technologies.
The acquisition allows the credit reporting agency to add SMS spam and scam prevention to its robocall blocking capabilities.
The latest cybersecurity acquisition will help further ServiceNow's plans for autonomous cybersecurity and building a security stack to proactively manage AI.
The deal, believed to be valued at $1 billion, will bring non-human identity access control of agents and machines to ServiceNow’s offerings including its new AI Control Tower.
The deal, which builds on LevelBlue’s recent acquisition of Trustwave and Aon, aims to provide customers with a broad portfolio of extended detection and response (XDR), managed detection and response (MDR), and forensic services.
The company acquired HyperComply to help enterprises automate vendor security reviews and gain a real-time picture of the security of their entire supply chain.
F5 plans to use CalypsoAI's platform to provide real-time threat defense against attacks and help enterprises safeguard themselves as they adopt the latest AI technologies.
The combined company will help customers separate data ingestion from SIEM, to improve detection and performance.
Varonis plans to integrate SlashNext's advanced phishing, BEC, and social engineering attack protection capabilities into its data security platform.
This acquisition will bring Onum's real-time data pipeline to CrowdStrike's Falcon Next-Gen SIEM platform to deliver autonomous threat detection capabilities.
The combination of Incode's AI models and AuthenticID's experience running identity programs at scale in regulated environments will provide customers with holistic fraud signal analysis, multi-modal intelligence, real-time personhood verification, and advanced deepfake detection.
The company will integrate Prompt Security’s platform, which detects AI tools used in browsers and on desktops, into its Singularity platform.
The acquisition gives the British cybersecurity solutions provider more insights into encrypted network traffic and additional decryption capabilities.
As the largest managed security services provider, the combined entity will offer cyber consulting, managed detection and response, and incident response services.
The deal will combine Securonix's SIEM platform with ThreatQuotient's threat detection and incident response (TDIR) offering to build an all-in-one security operations stack.