SAN FRANCISCO, September 17 — Three multi-billion-dollar deals headline a 2026 technology M&A wave in which artificial intelligence is the common thread, according to a CRN report republished by MSSP Alert. By the numbers: Google closed its purchase of cybersecurity firm Wiz for $32 billion. Palo Alto Networks acquired identity security company CyberArk for $25 billion.
Nvidia made a $12.9 billion bid for AI model repository Hugging Face — a bid, not a completed acquisition, as of the report. Those three figures are the largest disclosed in the source material, and they set the scale for everything beneath them.
The bottom line for investors: the first eight months of 2026 produced a run of completed multi-billion-dollar acquisitions across the IT industry, and the buyers are not chasing scale for its own sake. They are buying specialized technology — identity threat detection, AI agent security, exposure management, data protection and analytics — to stay competitive as AI reshapes corporate strategy from cloud infrastructure to cybersecurity.
Beyond the headline deals
Smaller acquisitions are broadening capabilities in cybersecurity and data management, though the source does not itemize them with values or name the firms acquired. Veeam, NetApp and Amazon Web Services each acquired companies to enhance data protection, processing and analytics offerings. In cybersecurity, the acquiring companies include Okta, Cisco, Arctic Wolf, Cyera, CrowdStrike, Proofpoint, Sophos, Zscaler and Check Point Software Technologies.
The pattern points to identity threat detection, AI agent security and exposure management as the capabilities in demand. Specific terms of the smaller deals were not disclosed.
The report does not name the acquired firms, the dates of those transactions, or the financial advisors and legal counsel involved.
What the source does and does not say
The deals are described as completed, with the exception of Nvidia’s bid for Hugging Face. The source does not clarify whether that bid was accepted, and it does not state whether any deals fell through or were abandoned. It also does not mention antitrust challenges, national security reviews, shareholder approvals or competing bids.
The transactions are subject to regulatory approvals in some cases, but the source does not detail the status of those reviews or the countries where they are being examined. What the report does not address is nearly as long as what it does.
No market share or revenue figures for the acquired companies. No executive or analyst quotes. No integration plans, no impact on employees, customers or competitors, no market reaction, no stock prices, no financing details.
What to watch
The wave of consolidation is expected to continue as companies seek to integrate AI capabilities and defend against AI-powered threats. Watch whether Nvidia’s bid for Hugging Face converts into a completed acquisition, and whether the smaller cybersecurity and data-management buyers disclose terms for deals that so far have gone unpriced in public.
