Loading story…
Palo Alto Networks initiated discussions to acquire CyberArk, marking the second-largest deal in cybersecurity history. The initial outreach from Palo Alto Networks CEO Nikesh Arora to CyberArk founder and chairman Udi Mokady occurred in May 2023, but CyberArk initially declined, preferring to remain independent. After a two-year pause, Arora renewed acquisition interest in June 2025, leading to an in-person meeting between the two companies' leadership on June 17, 2025. Both firms entered into a mutual nondisclosure agreement on June 25, 2025, to facilitate confidential negotiations. On July 1, 2025, Palo Alto Networks submitted a non-binding letter of interest, proposing an all-stock acquisition of CyberArk at $457.99 per share. The CyberArk board evaluated the offer, considering the strategic benefits of merging with Palo Alto Networks compared to other potential acquirers. The deal nearly collapsed at the last minute, but both companies accelerated their announcement timeline due to media leaks. The acquisition, valued at $25 billion, is set for a shareholder vote on November 13, 2025. The transaction is expected to reshape the cybersecurity landscape by combining Palo Alto Networks' strengths in network security and cloud security with CyberArk's expertise in privileged access management. The deal reflects ongoing consolidation in the cybersecurity sector, driven by the need for integrated security solutions amid evolving threats. Both companies have significant portfolios in artificial intelligence, machine learning, and network access control, which are anticipated to be leveraged post-acquisition. The acquisition process involved careful due diligence and strategic planning to ensure alignment of business objectives. The announcement has generated significant attention due to the size of the deal and the prominence of both companies in the cybersecurity industry. Shareholders and industry analysts are closely monitoring the outcome of the upcoming vote. The deal underscores the increasing value placed on identity and access management as a core component of enterprise security. If approved, the acquisition will position Palo Alto Networks as a dominant player in the cybersecurity market, with expanded capabilities across cloud, network, and identity security domains. The transaction is also expected to drive further innovation and integration of security technologies to address complex enterprise needs.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
1 event from the most recent confirmed update back to the earliest known activity.
Palo Alto Networks disclosed a deal to acquire identity security firm CyberArk for approximately $25 billion. The references indicate this announcement as the central event in the story, with no additional dated developments provided.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Palo Alto Networks is reportedly in advanced negotiations to acquire Israeli cybersecurity startup Koi Security for approximately $400 million. While Palo Alto Networks has not officially confirmed the deal, sources indicate that a preliminary memorandum of understanding has been signed and both parties are working to finalize the terms. Koi Security, founded by former members of the IDF's 8200 Intelligence Corps, specializes in endpoint software security and has raised $48 million in funding to date. The acquisition would mark Palo Alto Networks’ first purchase of an Israeli company since the departure of its founder Nir Zuk from the CTO role. The potential deal highlights Palo Alto Networks’ ongoing strategy to expand its portfolio with advanced cybersecurity technologies, particularly those leveraging AI. If completed, the acquisition would provide a significant exit for Koi’s founders and investors, and could signal renewed confidence in Israeli cybersecurity startups amid a recovering tech sector. The move follows a series of recent acquisitions by Palo Alto Networks, including the purchase of Protect AI and ongoing negotiations to acquire CyberArk.
Jun 29, 2026
The cybersecurity landscape in 2025 has been marked by significant consolidation and strategic realignment, as major technology companies pursue acquisitions to strengthen their positions in cloud security and identity management. Notably, Google (Alphabet) announced its intent to acquire Wiz for approximately $32 billion, the largest cybersecurity acquisition to date, aiming to enhance its cloud-native security offerings and compete more effectively with AWS and Microsoft. Similarly, Palo Alto Networks moved to acquire CyberArk for around $25 billion, integrating privileged access management and identity security into its broader platform, while SolarWinds was also acquired in a multi-billion dollar deal. These moves reflect a broader industry trend where security is increasingly viewed as a core business driver and a critical differentiator in the cloud era. Amid these acquisitions, European industry leaders and policymakers are also re-evaluating their approach to digital sovereignty and cloud infrastructure. Drawing inspiration from the collaborative model that created Airbus, there is a push to develop a European cloud ecosystem capable of reducing reliance on US-based tech giants. Concerns over data sovereignty, especially in light of US legislation like the CLOUD Act and shifting geopolitical trust, have prompted both European stakeholders and American cloud providers to prioritize sovereign cloud services and data protection for European customers. The intersection of these trends underscores the growing importance of security, trust, and control in shaping the future of digital infrastructure and market competition.
Jun 29, 2026
Palo Alto Networks has acquired Console, an AI-native platform that lets organizations create agentic workflows through natural-language instructions. The company plans to integrate Console into its Cortex security-operations platform, enabling agents to investigate alerts, enrich and correlate events, prioritize cases, coordinate with enterprise data sources, isolate endpoints, and execute remediation across security and IT environments. Financial terms were not disclosed. The acquisition is intended to move Cortex beyond analyst-facing recommendations toward governed autonomous operations. Palo Alto Networks said such deployments require restricted system access, comprehensive activity logging, approvals for high-impact actions, and safeguards against inaccurate or unauthorized agent behavior. The announcement accompanied the company’s fiscal fourth-quarter 2026 results, which reported $3.41 billion in revenue and nearly $1 billion in net new next-generation security ARR; the timing and success of Console integration remain uncertain.
Sep 3, 2026