Many cybersecurity companies, including Fortinet, Cloudflare or Rapid7, reported their quarterly earnings in recent days. While revenue and earnings were overall solid, most companies hinted at increasing deal scrutiny from their corporate customers, lengthening sales cycles and softening growth trends going forward as customers navigate a complex environment and are closely watching their spending amidst…
Identity management specialist Ping Identity (a portfolio company) just announced its acquisition by private equity firm Thoma Bravo for a $2.8 billion enterprise value and a massive 63% premium, marking the sixth multi-billion M&A deal in cybersecurity so far this year. This deal follows the recent SailPoint takeover (also by Thoma Bravo), which was the…
Amid general concerns about the macro and corporate spending outlook, it appears that cybersecurity remains an area of strong growth and resilience, as illustrated by the latest Morgan Stanley survey of Chief Information Officers that found that spending on security software was the least likely to be cut among the whole Tech categories (software and…
According to various media reports, semiconductor giant Broadcom is in talks to acquire cloud software infrastructure company VMware. Having started with server virtualization, a software solution that morphs a single and physical server into several virtual ones, VMware gradually added storage and networking virtualization in order to offer a complete infrastructure software stack that allows…
Two weeks ago, we highlighted the need for automated threat detection in an environment where the number of threats is rising exponentially and commented that Google’s recent acquisition of privately held Siemplify could pave the way to other M&A deals in the field of security automation. It looks like things are speeding up with Microsoft…
Before a potential invasion, Russia has reportedly sought to destabilize Ukraine on the cyber front in recent weeks as hackers attacked and placed destructive malware inside tens of Ukrainian government agencies. This prompted the US Cybersecurity and Infrastructure Security Agency to warn critical infrastructure operators against possible cyber threats to US assets, reminding that two major cyberattacks…
Many cyber-attacks and security breaches made the headlines last year (SolarWinds, Kaseya…). But that was almost nothing compared to the Log4Shell vulnerability present in the Java open-source Apache logging library Log4J that was revealed in early December and sparked a coordinated response from several US agencies (NSA, FBI, CISA…). This dismay is not disproportionate as…
Since the beginning of the COVID-19 pandemic, cybercrime activity has been on a tear (e.g. +130% for ransomware) as companies had no choice but to open up their IT network to remote workers and devices, often struggling to comprehensively secure it on time, leaving entry points for malicious attacks. Interestingly, 50% of these security failures…
Recently, we commented that the Internet-of-Things (IoT) was finally gaining traction in the industrial world and was on track to become 5G’s killer app as it provides industrial companies with the opportunity to attach a wide range of digital services and features (monitoring, analytics…) to their installed base of cars, factory machines or robots. The…
The cyber-attack which recently struck one of the biggest oil infrastructures in the US, the Colonial Pipeline, is the latest in a series of high-profile attacks targeting critical US infrastructures. Back in December, the Sunburst/SolarWinds infiltration operation made the headlines as it hit the US Treasury, the US Department of Commerce as well as most…