Cybersecurity · Industry brief

On August 5, NYDFS settled a $250,000 cybersecurity enforcement action against a licensed money transmitter for violations of New York's cybersecurity regulation 23 NYCRR Part 500. The investigation, triggered by a September 2022 ransomware attack that encrypted over half the company's servers, found the company failed to conduct adequate risk assessments, design a sufficient cybersecurity program, and maintain written policies addressing systems and network security including patch management. NYDFS determined the company's annual risk assessment omitted cybersecurity-specific threats and its patching policies covered only a limited number of third-party applications, exposing it to known vulnerabilities. The penalty reflected the company's cooperation, size, limited revenue, and remediation of deficiencies.

During the first half of 2026, the cybersecurity industry recorded over 215 mergers and acquisitions collectively worth over $100 billion, with buyers increasingly targeting AI security, machine identity, industrial infrastructure, browser protection, behavioral fraud detection and automated remediation. Notable deals include Visa's $2.4 billion acquisition of BioCatch (announced August 3), Akamai's $205 million acquisition of browser-security company LayerX (completed July), CrowdStrike's $420 million deal for Seraphic, Databricks acquiring Panther Labs for its security lakehouse, Rubrik buying identity-orchestration provider Strata, and Cisco's WideField deal (closed July 31). The M&A activity reflects a strategic shift toward platform consolidation that correlates behavioral, identity, network and application data signals to detect sophisticated attacks, as enterprises increasingly create new digital worker identities through AI agent deployment that require securing. According to PYMNTS Intelligence research, 68% of financial institutions increased fraud-detection budgets year over year, with 46% of institutions reporting increasingly sophisticated fraud schemes.

Corma, a Tel Aviv and San Francisco-based cybersecurity startup, raised $60 million in seed funding led by Sequoia Capital, with participation from Khosla Ventures and Coatue. Founded in 2025, the company builds AI models specialized for defensive cybersecurity rather than offensive capabilities, and has deployed its first model to Fortune 100 and 500 organizations across healthcare, financial services, energy, critical infrastructure, and retail sectors. According to the company, its model has reduced threat response times by 94% for adopting organizations and addresses the growing challenge of AI-enabled cyberattacks occurring at superhuman speed.