Axios Future of Cybersecurity Thought Bubble

August 01, 2025
Surprise! Back-to-back weeks with special editions? And all before I touch down in Vegas for Black Hat and DEF CON next week? What a time!
- 💰 Today, we're diving into Palo Alto Networks' big bet on identity security and what it means for the broader security industry.
- 📬 Have more thoughts, feedback or scoops to share? [email protected].
Today's newsletter is 547 words, a 2-minute read.
1 big thing: A pivotal moment for identity security
Palo Alto Networks' $25 billion deal to acquire CyberArk cements identity security as the next must-win cybersecurity battleground.
Why it matters: Where the hackers go, so goes the money in cybersecurity.
Driving the news: Palo Alto agreed Wednesday to acquire identity security provider CyberArk in a $25 billion cash-and-stock deal — one of the largest cybersecurity acquisitions to date.
- The deal positions Palo Alto — a major endpoint detection, cloud and network security provider — to become a key competitor in identity security.
The big picture: Identity is now the frontline of cybersecurity. As hackers increasingly rely on stolen credentials and social engineering to infiltrate organizations, defenders are shifting their focus from firewalls to access controls.
- Identity-based attacks can include phishing, credential stuffing (reusing leaked passwords to access new accounts), and insider abuse.
- Now, security teams are also grappling with the risk of compromised AI agents, which could be misused to leak sensitive data or trigger unintended actions.
Between the lines: The identity market is fragmented and growing fast.
- Palo Alto CEO Nikesh Arora said in his letter to shareholders that there are more than 100 vendors offering some form of identity security today — a sign, he argued, that the space is ripe for consolidation and disruption.
- "Our market entry strategy has always been to enter categories at their inflection point, and we believe that moment for identity security is now," Arora said in a statement Wednesday.
By the numbers: Global M&A deal activity in cyber rose 16% last year, according to PitchBook, and there have been about 310 cyber M&A deals in 2025 so far. Identity has made up 16 of those, including:
- 1Password acquiring Trelica, which helps IT teams track the apps that employees use, for an undisclosed amount earlier this year.
- CyberArk acquiring Zilla Security in February in a $175 million deal.
The intrigue: CyberArk specializes in privileged access management, a niche within identity security focused on safeguarding high-risk accounts — such as IT admins, service accounts and cloud infrastructure identities.
- That includes machine identities, too: In April, CyberArk unveiled a suite of tools to secure AI agents and other automated workloads, giving them unique credentials and monitoring their behavior just like human users.
- This focus will give Palo Alto a leg up in managing the exploding universe of nonhuman identities that power AI and cloud environments.
Yes, but: Palo Alto is entering a fiercely competitive space. Major players like Microsoft, Okta, BeyondTrust and private-equity–backed SailPoint already have deep roots and loyal enterprise customers.
- "While others expand into identity from adjacent markets, we remain committed to leading from the inside out, with identity as our core mission, not a feature," Janine Seebeck, CEO of CyberArk competitor BeyondTrust, said in a statement.
☀️ See y'all Tuesday!
Thanks to Dave Lawler for editing and Khalid Adad for copy editing this newsletter.
If you like Axios Future of Cybersecurity, spread the word.
Sign up for Axios Future of Cybersecurity Thought Bubble


