Cybersecurity · Industry brief

9 companies from 5 countries raised $559.6M across 7 unique categories with an average deal size of $62.2M. Key funding rounds included HiddenLayer's $100M Series B for adversarial machine learning protection, AIR Security's $40M Seed for AI agent supply chain security, and Lasso Security's $30M Seed for LLM security. Israel led funding with $397M across 4 deals, followed by the United States with $140M across 3 deals. Notable product categories included Cloud Native Application Protection Platform ($300M), AI Model Security ($140M), and Remote Browser Isolation ($40M). 12 companies across 9 unique categories were acquired for $500M total, split evenly between product and service companies. Major M&A activity included Palo Alto Networks' $500M acquisition of Console, an agentic AI service and asset management platform, and Spin.AI's acquisition of DoControl, a SaaS security posture management platform. Additional product acquisitions included RunReveal by ClickHouse, Synack's merger with NetSPI for penetration testing services, and EDNX by Viatel. Service company acquisitions included Fortress SRM by TUSKER, plenticon group by Adelis Equity Partners, and Pathfynder by A-LIGN.

The U.S. Department of Justice announced a $2,042,518 settlement with Honeywell Aerospace Inc. in September 2026 for alleged failures to comply with NIST SP 800-171 cybersecurity requirements on a Department of Defense contract from April 2020 through December 2023. The settlement was initiated by whistleblower Rachel Tenney and is part of a broader enforcement pattern where DOJ recovered over $52 million across nine cybersecurity-related False Claims Act settlements in fiscal year 2025 alone. Recent related enforcement actions include a $507,144 settlement with LOGZONE Inc. (June 2026), a $4.6 million settlement with MORSECORP Inc. (March 2025), an $875,000 resolution with Georgia Tech Research Corporation (September 2025), and an $8.4 million settlement with Raytheon Company (May 2025)—all involving misrepresentations between stated cybersecurity compliance and actual implementation, including inflated self-assessment scores and missing required controls. The enforcement pattern demonstrates DOJ is targeting not only whether data breaches occurred but whether required controls were actually implemented, system security plans accurately described environments, and cybersecurity representations to government were supportable. DOJ has emphasized that cooperation and voluntary self-disclosure can reduce penalties, as demonstrated in the $1.75 million Aero Turbine Inc. settlement (July 2025), where cooperation reportedly yielded approximately 1.5x damages multiplier versus the typical 2x FCA multiplier.

CFIUS released its 2025 annual report marking the committee's 50th anniversary, showing significant evolution in U.S. foreign investment security enforcement. Filing volume stabilized at 347 transactions (207 notices, 140 declarations), but adverse outcomes increased with withdrawals rising to 30% of notices—58 withdrawn during investigation after CFIUS identified national security risks. The Committee expanded enforcement capabilities through a December 2024 final rule increasing civil monetary penalties and established new organizational structures including the Office of Research and Analysis to evaluate critical technologies more rigorously. CFIUS conducted 62 official inquiries into non-notified transactions in 2025 and monitored 234 mitigation agreements, though on-site verification visits declined to 40 from 79 in 2024. China filed the most notices (33) but concentrated mitigation through complex transactions requiring full notice filings; Japan, UAE and Canada led in distinct transaction counts. Mitigation held at 12% of notices with increasingly sophisticated mechanisms including proxy agreements to separate economic ownership from control, position-specific personnel restrictions, and supply assurance commitments monitored by defense and agriculture agencies. The Committee expects heightened scrutiny in 2026 on data centers and AI infrastructure, critical minerals processing, advanced semiconductors, agricultural land, and real estate near military installations. Treasury launched the Known Investor Pilot Program in May 2025 for expedited review of allied investors and published an updated Risk Matrix categorizing eight national security concerns with sample mitigation measures.