Latest

3rd Party Risk Management

SecurityScorecard Buys HyperComply to Expand Risk Platform

Michael Novinson  •  September 15, 2025

SecurityScorecard is acquiring HyperComply to streamline third-party risk assessments with AI that automates most security questionnaire responses. The deal supports SecurityScorecard's shift from ratings-only to a full solutions platform for mitigating supply chain risk.

Artificial Intelligence & Machine Learning

Koi Raises $48M to Safeguard AI Models, Code and Extensions

Michael Novinson  •  September 10, 2025

With $48 million in funding, Koi is scaling up efforts to help enterprises secure browser extensions, AI models and package code often missed by legacy tools. CEO Amit Assaraf says Koi is the only firm offering centralized governance for this fast-growing risk category.

Regulation

Feds Release Updated HIPAA Security Risk Analysis Tool

Marianne Kolbasuk McGee  •  September 10, 2025

Federal regulators have updated their HIPAA security risk assessment tool that's long been aimed at helping small and midsized providers and business associates with risk analysis - an activity that many healthcare organizations can't seem to get right.

Anti-Money Laundering (AML)

Money Mule Networks Surge 168% Fueling Digital Banking Fraud

Suparna Goswami  •  September 10, 2025

Organized crime groups have industrialized digital banking fraud operations in the United States, with money mule networks surging 168% in the first half of 2025. Money mules are being recruited at unprecedented scale, and they're using stablecoins to transfer funds to crypto exchanges.

Endpoint Security

Mitsubishi Electric to Buy Nozomi in $883M OT Security Deal

Michael Novinson  •  September 9, 2025

Mitsubishi Electric is acquiring San Francisco-based Nozomi Networks to enhance protection for OT and IoT systems. The move accelerates cyber innovation and supports customers through AI-driven insights, cloud-native tools and strong industry collaboration.

Artificial Intelligence & Machine Learning

UltraViolet Adds AppSec Services Depth With Black Duck Deal

Michael Novinson  •  September 5, 2025

UltraViolet Cyber’s acquisition of Black Duck's application security testing services deepens its offensive capabilities and adds 400 people to its global workforce. The deal enables greater integration of assessment and defense across the software development lifecycle.

Microsoft Backs Sola's $35M Push Into Autonomous AI Security

Michael Novinson  •  September 4, 2025

Backed by S32 and Microsoft, Sola Security secured $35 million to advance its autonomous AI engine. The Israeli startup aims to shift from reactive prompts to proactive agent-based systems that solve security tasks across SaaS, cloud and identity domains.

AI-Powered SASE

Cato Networks Acquires Aim Security for AI Threat Protection

Michael Novinson  •  September 3, 2025

With AI use surging across enterprises, Cato Networks has acquired Israeli startup Aim Security to embed AI protection into its core architecture. CEO Shlomo Kramer says Aim’s broad and deep coverage around enterprise AI use makes it the ideal fit for Cato’s SASE platform.

AI-Powered SASE

Netskope's IPO Filing Reveals Surging Sales, Improved Losses

Michael Novinson  •  August 22, 2025

Netskope became the second cybersecurity company to pursue an initial public offering this year, revealing increased sales, improved losses and a heavy reliance on channel partners. Nearly 95% of its $328.5 million in revenue in the first half of fiscal year 2025 flowed through indirect channels.

Infrastructure as Code / Programmable Infrastructure

Aikido Security Buys AI Code Startup Trag to Outpace Rivals

Michael Novinson  •  August 21, 2025

Aikido Security acquired Trag, an AI-native code review startup, to bring repository-wide review capabilities to its platform. The acquisition accelerates delivery of new features, such as logic risk detection and English-language rule writing, aimed at beating legacy rivals.

Identity & Access Management

It's Official: Palo Alto Networks to Buy CyberArk for $25B

Michael Novinson  •  July 30, 2025

Palo Alto Networks announced the biggest deal in its 21-year history, bursting into the identity security market with its $25 billion buy of CyberArk. While Palo Alto Networks has offered ITDR since 2023, buying CyberArk marks the company's first foray into the broader access management market.

Access Management

Why Palo Alto Networks Is Eyeing a $20B+ Buy of CyberArk

Michael Novinson  •  July 29, 2025

Less than five months after Google agreed to spend $32 billion on red-hot cloud security startup Wiz, Palo Alto Networks is on the precipice of paying more than $20 billion for PAM goliath CyberArk, The Wall Street Journal reported Tuesday. Here's why the deal represents a major pivot for Palo Alto.