A merger can combine networks, identities, and data, creating cybersecurity risks when access controls, processes, and incident response are not aligned.
Search across headline titles and summaries.
Background for this topic.
A merger combines two previously separate organizations into one. For information security, it also means bringing together different identities, networks, cloud environments, devices, policies, and security processes. The security condition of each organization therefore becomes relevant to the other, especially before systems or data are connected.
Security due diligence should identify exposed services, unsupported systems, active incidents, privileged accounts, contractual obligations, and privacy requirements before integration. Afterward, teams need an accurate asset inventory, controlled trust relationships, least-privilege access, coordinated vulnerability management, and compatible logging and incident-response procedures. Data sharing and retention must remain consistent with applicable law and existing commitments; access should not be broadened merely because the organizations now have common ownership.
Weekly headline count for the current query.
The nascent collective that combines three prominent cybercrime groups, Scattered Spider, LAPSUS$, and ShinyHunters, has created no less than 16 Telegram channels since August 8, 2025
Merger Strengthens AdaCore’s Reach in C and C++ Static Testing for Embedded SystemsThe merger between New York-based AdaCore and Washington D.C.-area CodeSecure fills a strategic gap in static analysis for C and C++ programming, giving embedded software developers a more complete suite of security and safety verification tools in high-stakes industries.
Merger and acquisition due diligence typically focuses on financials, legal risks, and operational efficiencies. Cybersecurity is often an afterthought — and that's a problem.
Probe into Microsoft's $13 Billion OpenAI Investment Launched in 2023The U.K. antitrust regulator won't open an investigation into a partnership between computing giant Microsoft and artificial intelligence company OpenAI. U.K. Competition Market Authority concludes that there is no "relevant merger situation."
CFO Manish Narula Promoted to CEO as Fate of Proposed Trustwave Merger Gets MurkyOne of the messiest public spats at a cybersecurity company in recent memory has led to the resignation of its chief executive. Erin Gan walked away from Cybereason after seemingly coming up short in his battle to wrestle control of the endpoint security vendor away from a pair of investors.
Merger Combines Application Protection and DevOps to Secure Software at ScaleHarness and Traceable are combining forces to create a DevSecOps platform that seamlessly integrates software delivery with security. The merger addresses the growing need for continuous security along with continuous delivery, ensuring applications remain protected from development to deployment.
Google Does Not Have Material Influence Over Antrhtopic, Agency SaysThe U.K. antitrust regulator called off an investigation into a $2 billion partnership between computing giant Alphabet and artificial intelligence startup Anthropic. The .K. Competition and Markets Authority probe sought to understand if the deal forms a "relevant merger situation."
Also: Anticipating Donald Trump's Second Term; a Surprising Cybersecurity MergerIn the latest weekly update, ISMG editors explored the growing threat of disrupted ransomware attacks as a public health crisis, the potential global impact of a Donald Trump's second presidential term, and implications of the latest big merger in the cybersecurity market.
The consolidation folds Cybereason’s endpoint detection and response (EDR) platform into Trustwave’s managed security services offerings.
Merger to Strengthen MDR, EDR, Consulting Services and Threat Intelligence GloballySoftBank-backed merger between Trustwave and Cybereason brings together leading MDR, EDR, DFIR, and threat intelligence capabilities. The combined organization aims to improve AI-driven detection and enhance Microsoft E5 support, targeting enterprise, mid-market, and public sector clients worldwide.
Deal Enhances Sophos’ Managed Security Portfolio, Adds AI-Powered Taegis XDR ToolSophos is acquiring Secureworks in a deal valued at $859 million, aiming to integrate its managed security services with Secureworks' Taegis XDR platform. This merger is expected to deliver advanced detection and response capabilities, and enhance global cybersecurity for businesses of all sizes.
The U.K. antitrust regulator called off an investigation into the March $4 billion deal between Amazon and artificial intelligence firm Anthropic. "Amazon’s partnership with Anthropic does not qualify for investigation under the merger provisions of the Enterprise Act 2002," the regulator said.
Careful planning and proactive measures can ensure smooth and secure transitions, paving the way for a successful merger or acquisition.
AI Investments and Global Expansion Set to Propel Growth After Separating From AT&TAs Level Blue separates from AT&T, it is focusing on harnessing artificial intelligence for advanced threat intelligence, targeting significant growth in international markets, and evaluating potential merger and acquisition opportunities to expand its geographic or technological footprint.
How Ping-ForgeRock Merger Provides Enhanced Deployment Flexibility, More ServicesPing Identity CEO Andre Durand elaborated on the merger with ForgeRock, highlighting the synergy between the two companies. Durand noted the enhanced deployment options and service capabilities now available to global enterprises, which he said is unique in the market.
Cybersecurity occupies a growing priority status in merger and acquisition discussions. But what about the specific role of identity security? SailPoint's Lori Diesen showcases the value of transitioning to SaaS-based identity security to reduce risk during M&A activity.
A Japanese ministry blames a shared Active Directory between merged tech companies Line and South Korea's Naver for a massive data breach last November.
Commission Says Close Company Connections Make Conditions Ripe for Merger InquiryThe European Commission took preliminary steps toward investigating Microsoft's financial interest in ChatGPT maker OpenAI under the trading bloc's antitrust regulation. The Tuesday announcement marks the second instance of official interest in Microsoft's investments in the generative AI firm.
In a speech, the DoJ’s Nicole M. Argentieri announced the merger of the NCET into the CCIPS