Cybersecurity · Industry brief

Venture funding to cybersecurity startups held at historically high levels in the first half of 2026, with $10.6 billion raised across all stages globally, according to Crunchbase analysis. Q2 saw a 30% decline from Q1 to $4.4 billion, though the quarter still produced eight rounds of $100 million or more, including Cyera's $600 million Series D at a $12 billion valuation led by Evolution Equity Partners and NinjaOne's $400 million Series C extension at $12.3 billion. On the M&A front, Motorola Solutions announced plans to acquire Israeli counter-drone company D-Fend Solutions for $1.5 billion, marking the quarter's largest security-related deal, with multiple other startup acquisitions valued in the hundreds of millions also completing in Q2 2026. [Source: news]

Treasury Launched a Cybersecurity Information Sharing Initiative for the Digital Asset Industry on April 9, 2026, extending threat intelligence and actionable cybersecurity information previously available only to traditional financial institutions to eligible US digital asset firms and industry organizations. The initiative aligns with the President's Working Group on Digital Asset Markets report and represents a significant step in coordinating cybersecurity resources across the sector, complementing Treasury's February 2026 AI cybersecurity initiative and March 2026 report on countering illicit finance involving digital assets. CISA held virtual town halls between June 15-17, 2026 to gather stakeholder input on the proposed Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) rulemaking, which would require covered entities including healthcare providers and certain drug and device manufacturers to report cyber incidents within 72 hours. The proposed rule remains under consideration and may undergo further changes based on feedback; if finalized as proposed, health and life sciences entities could face increased compliance costs and regulatory scrutiny. NIST finalized enhanced security requirements for protecting Controlled Unclassified Information in nonfederal systems, including enhanced multifactor authentication, expanded incident response capabilities, and rigorous supply chain risk management. Federal contractors handling CUI must assess their security posture against the new baseline and implement necessary upgrades, with particular implications for entities seeking Cybersecurity Maturity Model Certification program compliance. [Source: faegredrinke]

The DOJ settled a $9.7 million enforcement action against a community bank after executives deliberately overrode AML/CFT controls for over a decade to protect an insider operating a check scheme, resulting in $6.3 million in losses to another financial institution (DOJ non-prosecution agreement, June 30, 2026). The CFPB directed a fintech credit card platform to provide full consumer redress after a bank transition caused payment failures, missed deliveries, and fee charges, signaling a shift toward collaborative enforcement rather than formal actions (CFPB public statement, June 2, 2026). The FDIC penalized a bank for six flood insurance violations and notice delivery failures on mortgage loans, highlighting flood insurance as a continuing compliance concern (FDIC civil money penalty, announced June 26, 2026). [Source: ncontracts]