Archit Lohokare

Israeli M&A is running at an unprecedented pace in 2026 and the underlaying reason is really interesting. Wiz and CyberArk both cleared regulatory approval on deals announced last year. That's two megadeals closing on the same day. Beyond the massive headlines, the baseline activity in 2026 caught my attention. The numbers so far (as of Feb 11): → 13 disclosed acquisitions in 42 days → $4.2B of M&A capital → 2.2 deals per week This amounts to $100M of #liquidity returning to investors every day! What other ecosystem provides $100M of liquidity per day on average since the beginning of 2026? If this pace holds, we're looking at ~113 M&As by year-end and close to $37B in disclosed value. This is excluding the just approved megadeals and excluding the unannounced rounds (which probably add $3-20m each). What's driving this? AI is the obvious answer. 10 of 13 deals are AI-centric companies. But I think there's something deeper happening: - Acquirers are paying premium multiples to compress time-to-AI-capability rather than build internally. - Israeli startups are shipping production-level AI, not demos. That's the arbitrage. - Speed > cost in this market cycle. Meanwhile, startup creation is on the rise (we predicted this in our stealth report ~12-months ago). It seems the industry will continue producing sellable companies at an increasing rate. This year is poised to be very interesting 😇

21

1 Comment

Does your enterprise experience the illusion of digital control? If so, read this blog to take a deeper dive into that topic Most GRC, ITSM, and cybersecurity platform companies promise visibility, control, and confidence amid growing digital complexity. Their marketing emphasizes dashboards, heatmaps, workflows, and maturity scores that suggest organizations can be managed through structured data and standardized processes. Full Blog Here: https://lnkd.in/e7KNNexa Yet many executives and practitioners experience a persistent gap between what these platforms report and how their organizations behave under pressure. Incidents recur, risks emerge unexpectedly, and cultural or coordination failures undermine otherwise well-designed controls. The core problem is that most platforms are built to manage artifacts and abstractions, not the living system of people, processes, and technologies that produce real outcomes. The reason most platform companies fall short is not a lack of sophistication or effort, but a mismatch between their underlying assumptions and the nature of complex socio-technical systems. Managing people, processes, and technologies requires capabilities that integrate intent, structure, and behavior around real value streams, over time. It requires tools that support learning, adaptation, and judgment, not just compliance and automation. Until platforms shift from managing artifacts to enabling system-level understanding and action, organizations will continue to invest heavily in tools that provide confidence on paper while leaving the real system only partially seen and poorly governed. #grc #ITSM #cybersecurity #control #cyberresilience

7

Download Pentera Labs Report - revealing three new critical injection points in the ingress-nginx controller, building on Wiz’s IngressNightmare CVE. These overlooked vulnerabilities could let attackers hijack traffic, spoof headers, or reach unauthorized backend services - They exist in one of the most widely used ingress controllers in Kubernetes, putting countless environments at risk. This research highlights how small misconfigurations can lead to major exposure in modern cloud-native architectures. What’s Inside: ✅ 3 new injection vulnerabilities in ingress-nginx ✅ How attackers find and exploit CVEs in open source ✅ Actionable tips to secure your Kubernetes environment https://lnkd.in/eHtX6EdP

6

1 Comment

Exploitation timelines are increasingly measured in days rather than weeks. Our latest report from Rapid7 Labs correlates vulnerability publication data, confirmed exploitation trends, frontline MDR incident response telemetry, and dark web, cybercrime, and nation-state intelligence to provide a unified view of how exposure evolves into compromise. One of the biggest standouts: how rapidly AI is being integrated into attacker playbooks, accelerating the operationalization of exposure. Many of the incidents we investigate still originate from known, unaddressed exposure. In those cases, attackers don’t need sophistication - they need opportunity. As remediation windows shrink, reducing that opportunity becomes essential to limiting compromise. You can download the 2026 Global Threat Landscape report here: https://r-7.co/4bQOAtq #infosec #cybersecurity

37

1 Comment

I knew when Jim Alkove presented at our CISO / Risk Executive Workshop in Jackson Hole a year ago that there was a need to build something with viable and important recommendations for the future of identity management. Through the collaborative efforts of subject matter experts and leading practitioners active in the #SINETCommunity, this handbook is a tangible example of how SINET fosters opportunities for thought leadership and knowledge sharing to defeat global cybersecurity threats. Thank you to Jim and the SINET Working Group for their extensive work on this. http://bit.ly/3TUyaqu

47

3 Comments

One of the most actionable tips in Deepwatch’s new CISO 100 Days guide is simple but powerful: Executives don’t want dashboards. They want decisions. When reporting up: ✅ Translate alert tuning into reduced dwell time ✅ Tie detection improvements to uptime and customer trust ✅ Map telemetry to business systems, not log counts This is how security becomes a strategic function, not just a reactive one. 💡 Tip: Use “decision deltas” to anchor your board updates: What changed, why it mattered, and what action you took. #CISO

3

1 Comment

Here’s a pattern I’m seeing more often: More sites. More assessments. More reporting expectations. Same headcount. Security teams are being asked to scale output without scaling structure. So what happens? Assessments become episodic. Reporting takes too long. Prioritization becomes subjective. And leaders spend more time translating risk than reducing it. This isn’t a capability issue. It’s an architecture issue. At some point, physical security has to operate with the same operational discipline as finance and IT. Otherwise it stays in permanent catch-up mode. For security people overseeing medium to large portfolios (20+ sites): What’s currently your biggest bottleneck volume, visibility, or validation? And why do you think this is?

5

1 Comment

In the market for a cloud access security broker (CASB)? CSO Online shared what you should consider when selecting the right solution for your enterprise, noting that Proofpoint's CASB provides granular visibility into who interacts with your data.

7