SecurityWeek tracked 37 cybersecurity merger and acquisition (M&A) deals announced in October 2026. For a look at last year’s activity, seeSecurityWeek’s 2025 Cybersecurity M&A Report, which covers more than 420 deals. Here are some of the most important cybersecurity M&A deals announced in October 2026: Absolute Security acquires FirmGuard Endpoint security and cyber resilience firm Absolute Security has acquired FirmGuard, the UEFI BIOS firmware security and management business of Phoenix Technologies. Absolute will integrate FirmGuard with its firmware-embedded Absolute Persistence technology, adding below-the-OS management, continuous firmware integrity monitoring and patching, and compliance enforcement. Aikido Security acquires OutKept and Cyberly Belgian application security unicorn Aikido Security has acquired OutKept and Cyberly and used the two startups to launch Noon, a workforce security business. OutKept is based in Belgium and provides phishing simulations and security awareness training. Poland’s Cyberly develops AI-powered attack simulations and tools for tracking employee AI usage. Both deals closed in September but weren’t made public until October. Anthropic to acquire Opaque Systems AI company Anthropic has agreed to acquire Opaque Systems, a confidential AI company that grew out of research at UC Berkeley. Anthropic has described the deal as licensing Opaque’s technology and hiring some of its engineers, reportedly including CEO Aaron Fulkerson and CTO Rishabh Poddar. Financial terms weren’t disclosed. Canadian AI developer Cohere has signed a letter of intent to acquire AISLE, a startup whose autonomous AI systems find and help patch vulnerabilities in critical software. AISLE’s roughly 50 employees will join Cohere, which is setting up a cybersecurity unit called Cohere Cyber. AISLE CEO Ondřej Vlček, the former CEO of Avast, will become its senior vice president. Hex-Rays, the Belgian company behind the IDA Pro reverse engineering tool, has agreed to acquire HexAI, an Israeli startup founded in 2025. HexAI’s AI agents analyze source code and binaries to uncover vulnerabilities, malware and backdoors. The deal is reportedly worth $30 million to $35 million. Hex-Rays plans to grow HexAI’s Israeli operations and build new AI-powered research tools. Quantum computing company IonQ has agreed to acquire zero trust security firm Elisity in an all-stock deal worth up to $1.3 billion, including up to $150 million in performance-based earnouts. IonQ will combine its post-quantum cryptography and quantum key distribution technology with Elisity’s IdentityGraph platform, which enforces least-privilege access for users, devices, workloads and AI agents. The deal is expected to close in the fourth quarter of 2026. Thoma Bravo-owned Proofpoint has agreed to acquire data security company Varonis for roughly $6.3 billion in cash. Together, the companies want to offer a single platform for discovering and protecting sensitive data, controlling access to it, and preventing data loss as organizations adopt AI. Other cybersecurity M&A deals announced in October 2026: Acture Solutions acquires Digital BackOffice Bregal Milestone acquires Majority Stake in Nethive Bytes Technology Group to acquire CyberOne EC-Council acquires Cyber Insurance Academy Forte Technologies acquires Business Cyber Security Solutions GCubed acquires RightDirection Technology Solutions Macnica to acquire Majority Stake in CyberSec IT Consulting Maximus to acquire Agile Defense Protectt.ai acquires Majority Stake in AIShield SAIC acquires Information Security Corporation Sequrio acquires Althammer & Kill, DATATREE and Nextwork SGS acquires Majority Stake in Prescient Security V-Key acquires Majority Stake in CloudsineAI Vista Equity Partners to acquire HID’s PKI Business Xopero Software acquires Vigil Guard Related:Cybersecurity M&A Roundup: 39 Deals Announced in September 2026 Eduard Kovacs (@EduardKovacs) is senior managing editor at SecurityWeek. He worked as a high school IT teacher before starting a career in journalism in 2011. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering. Syrian Hacker Gets Prison Time in US After Over a Decade on the Run Drupal Commerce Core Vulnerability Exploited Against Online Stores $2 Million+ Drained From Polymarket Traders in New Supply Chain Attack $6 Billion Binance Hack Bears Hallmarks of North Korea’s TraderTraitor Google Touts Powerful Cybersecurity Capabilities in Gemini 4 Carbon Model BAE Says No Data Extracted in Incident Hitting Bankruptcy Courts Hackers Steal 2.6 Million Records From Sony’s Japanese ISP So-net Cisco SD-WAN Zero-Day Exploitation Tied to Volt Typhoon’s ‘Silent Train’ Network Florida Student Aid Website Hack Puts Data of 4.9 Million People at Risk Revolve Data Breach Impacts at Least 180,000 People Google Introduces $250,000 Root-in-Cloud Bug Bounty Reward Malicious Claude Code Extension Served in Cursor Supply Chain Attack Chainalysis Discloses Data Breach Following AI-Driven Cyberattack Polymarket Returns $3.9 Million to Traders as DebugBear Cites DNS Hijack FBI Flags Over 600 Addresses Tied to North Korea’s Binance Heist Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain Close the security gaps between pentests. Join this session to explore agentic pentesting and gain a practical framework for continuous exposure validation in your CTEM program. Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy. Barracuda has appointed Dan Fletcher as CFO. Artemis Security has appointed Arun Singh as CGO. General Paul M. Nakasone has joined Armadin’s Board of Directors. As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.(Torsten George) Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.(Steve Durbin) The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.(Sravish Sridhar) Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.(Tod Beardsley) Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.(Matias Madou) FlipboardRedditWhatsappWhatsappEmail