Acquisitions can change ownership of security teams, systems, and data, creating risks around access, integration, compliance, and incident response.
Search across headline titles and summaries.
Background for this topic.
An acquisition is the purchase of a company, business unit, or technology by another organization, transferring control of its people, systems, and data. In information security, the event matters because the buyer may inherit unfamiliar networks, cloud services, software, credentials, suppliers, and unresolved security issues.
Before integration, security due diligence should identify exposed systems, critical vulnerabilities, active threats, prior incidents, and obligations governing personal or regulated data. After closing, teams must control access between environments, remove unnecessary accounts, verify asset ownership and logging, and bring inherited systems into vulnerability-management and monitoring processes. Connecting legacy infrastructure too quickly can create new attack paths, while poorly planned changes can hinder detection or incident response. Privacy and compliance reviews should confirm that data use, retention, and cross-border transfers remain lawful under the combined organization.
Also: Software Supply Chain Risks, Cato's AI Security BuyIn this week's update, four ISMG editors discussed the Pentagon's review of Microsoft's use of Chinese nationals on U.S. military cloud systems, renewed concerns over software supply chain risks and Cato Networks' first-ever acquisition to boost AI security.
Black Duck AppSec Services Buy Marks Shift Toward Offensive Assessment ServicesUltraViolet Cyber’s acquisition of Black Duck's application security testing services deepens its offensive capabilities and adds 400 people to its global workforce. The deal enables greater integration of assessment and defense across the software development lifecycle.
CEO Shlomo Kramer: Buying Aim Accelerates SASE Roadmap With ‘AI Brain’ IntegrationWith AI use surging across enterprises, Cato Networks has acquired Israeli startup Aim Security to embed AI protection into its core architecture. CEO Shlomo Kramer says Aim’s broad and deep coverage around enterprise AI use makes it the ideal fit for Cato’s SASE platform.
Varonis plans to integrate SlashNext's advanced phishing, BEC, and social engineering attack protection capabilities into its data security platform.
Acquisition Targets Business Email Compromise, Impersonation and Spear-PhishingVaronis has acquired SlashNext to strengthen detection of phishing and social engineering attacks. The integration will help prevent identity compromises via email, SMS and collaboration tools while enhancing Miami-based Varonis’ AI-driven data protection.