Loading story…
Zscaler has acquired SplxAI, an artificial intelligence security platform, to bolster its zero-trust security capabilities and provide advanced protection for enterprise AI assets. The integration of SplxAI's technology will enable Zscaler to offer enhanced AI asset discovery, automated red-teaming, and governance, addressing the unique security challenges posed by AI applications and services during both development and deployment. SplxAI's platform specializes in identifying and protecting AI models, workflows, and infrastructure, and includes features such as live recommendations for remediating discovered vulnerabilities.
The acquisition is part of a broader industry trend of cybersecurity companies acquiring AI-focused firms to strengthen their product portfolios. Zscaler's leadership highlighted that SplxAI brings proven red-teaming, risk scoring, and compliance tracking capabilities, particularly for private and custom-built AI applications. The deal is expected to help Zscaler expand its protection beyond public generative AI, leveraging SplxAI's expertise in continuous testing and governance to secure next-generation AI systems against emerging threats.
Track how attackers are adapting to this technology.
1 event from the most recent confirmed update back to the earliest known activity.
Zscaler announced the acquisition of SPLX to strengthen protection for generative AI models and add more AI-focused security capabilities to its platform. Multiple outlets reported the deal as a move to improve model and application security for enterprise AI use.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
4 references tracked. Mallory keeps watching after this page renders.
techrepublic.com
Open sourcecyberscoop.com
Open sourcebankinfosecurity.com
Open sourcegovinfosecurity.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Major security vendors have significantly increased their investments in artificial intelligence (AI) security, with a surge in mergers and acquisitions (M&A) aimed at strengthening their capabilities to protect AI systems, applications, and workflows. Cisco initiated this trend by acquiring Robust Intelligence for $400 million, followed by at least eleven more acquisitions involving companies such as Cato Networks, Check Point, CrowdStrike, F5, and SentinelOne, who collectively spent over $1.3 billion to enhance their AI security portfolios. These acquisitions reflect the growing recognition of AI as a critical area for cybersecurity, especially as generative AI technologies like ChatGPT 3.5 have driven public and enterprise adoption. The focus of these deals spans runtime protections, prompt injection defenses, agent identity management, and output validation, as vendors seek to address the unique risks posed by AI systems. Concurrently, the enterprise sector is grappling with the expanded attack surface introduced by integrating AI into business operations, necessitating a strategic shift from traditional patchwork defenses to comprehensive, built-in security and safety measures. Enterprises are now required to evaluate threats such as software vulnerabilities, misconfigurations, broken authentication, and prompt injection attacks, all of which can compromise the confidentiality, integrity, and availability of AI systems. The distinction between AI security and AI safety is becoming more pronounced: while security focuses on defending systems from external threats, safety is concerned with ensuring AI systems behave as intended and remain aligned with organizational values. To address the challenge of AI safety, Anthropic has released an open-source tool called Petri, which uses AI agents to simulate interactions with frontier models and assess their propensity for risky behaviors such as deception, sycophancy, and power-seeking. Early tests of Petri on leading models like Claude Sonnet 4.5 and GPT-5 revealed that, although some models are safer than others, the ability of AI to discern and avoid harmful actions remains imperfect. The tool provides a framework for measuring and triaging safety risks, highlighting the need for both technical and governance solutions. As organizations deploy AI at scale, regulatory compliance and data governance are becoming integral to their security strategies, with vendors and enterprises alike recognizing that robust AI security and safety are essential for trustworthy and resilient AI adoption. The convergence of industry investment, new safety tools, and evolving enterprise risk management practices marks a pivotal shift in how the cybersecurity community approaches the protection and alignment of AI technologies. This mainstreaming of AI security is expected to continue as both the threat landscape and regulatory expectations evolve, driving further innovation and collaboration across the sector.
Jun 29, 2026
**Zscaler** announced the acquisition of browser security startup **SquareX** to expand zero-trust enforcement into the browser layer, aiming to better control access and data handling in web sessions—particularly for **unmanaged devices** and **third-party access**. The deal positions browser-based controls as a way to apply security policy where work increasingly happens (SaaS and web apps) without requiring organizations to deploy full standalone enterprise browsers. Reporting indicates SquareX’s approach relies on browser-based components (described as extensions and “hyper objects”) to enable capabilities such as **device posture checks** and **data loss prevention (DLP) redaction**, while keeping policy and enforcement **centralized in the cloud** rather than distributed across endpoints. Zscaler leadership framed the acquisition as reducing operational overhead by avoiding endpoint agents while still enabling consistent browser security controls across users and devices.
Jun 29, 2026
Veeam, a leading data protection and backup software provider, announced its agreement to acquire Securiti AI for $1.725 billion, marking the largest acquisition in Veeam's history and a significant move into the artificial intelligence security market. The acquisition is expected to close in early December and is aimed at addressing the growing challenges enterprises face in managing and securing data across fragmented systems, especially as organizations accelerate their adoption of AI technologies. Securiti AI, based in San Jose, California, specializes in data security posture management and provides advanced tools for organizations to understand, govern, and secure their data across hybrid cloud environments. The company leverages a knowledge graph to map relationships between data assets, users, AI models, and compliance requirements, enabling organizations to maintain visibility and control over their data estate. Veeam’s CEO, Anand Eswaran, emphasized that the acquisition is not just about protecting data from cyber threats and disasters, but also about ensuring data is properly governed and trusted to power AI initiatives transparently and securely. Rick Vanover, Veeam’s Senior Director of Product Strategy, highlighted that the deal will provide end-to-end visibility and control over both production and backup data, making it easier for organizations to manage their entire data lifecycle. Securiti AI, founded in 2019 and led by former Symantec executive Rehan Jalil, has gained industry recognition, including winning the RSAC Innovation Sandbox Contest in 2020. The company has approximately 1,000 employees and has raised $156 million in funding, with a notable $75 million Series C round in 2022. The integration of Securiti AI’s capabilities with Veeam’s existing solutions is expected to create a unified view of AI-ready data environments, enabling safe, responsible, and controlled adoption of artificial intelligence. Both companies see the combination as addressing a critical gap in the market, as enterprises struggle to ensure that data feeding AI systems is secure, governed, and accessible only to authorized users. The acquisition reflects broader industry concerns about the risks of AI systems accessing sensitive or ungoverned data, and the need for robust data security posture management. Veeam’s move is seen as a response to the increasing complexity of data environments and the heightened importance of data trust in successful AI deployments. The deal is also expected to enhance Veeam’s offerings in business continuity, disaster recovery, and data security, providing customers with comprehensive solutions for modern data protection challenges. The acquisition positions Veeam as a key player in the intersection of data protection and AI security, with the potential to influence best practices and standards in the industry. Customers of both companies are anticipated to benefit from improved insight, governance, and resilience across their data assets, supporting both regulatory compliance and innovation. The transaction underscores the growing convergence of cybersecurity, data management, and artificial intelligence in enterprise technology strategies.
Jun 29, 2026