Security

BlackBerry offloads Cylance's endpoint security products to Arctic Wolf

Fresh attempt to mix the perfect cocktail of IoT and Infosec


BlackBerry's ambition to mix infosec and the Internet of Things has been squeezed, after the Canadian firm announced it is offloading Cylance's endpoint security products.

The erstwhile handset champ acquired Cyclance in 2018 for $1.4 billion – at the time its largest-ever acquisition. Then-CEO John Chen hailed the purchase as complementary to BlackBerry's endpoint management and QNX embedded OS businesses.

"We believe adding Cylance's capabilities to our trusted advantages in privacy, secure mobility, and embedded systems will make BlackBerry … indispensable to realizing the Enterprise of Things," he enthused.

It looks like Chen was wrong, as on Tuesday BlackBerry announced it has sold Cylance for $160 million – a substantial loss, and one compounded by the fact that the brand's overall revenue has gone backwards since the acquisition.

The new owner of Cylance's endpoint products is Arctic Wolf which, like Cylance, claims to make cyber-defense products potent by infusing them with AI that detects and repels threats. Arctic Wolf will pay $80 million once the deal closes, $40 million around a year later, and chip in 5.5 million shares too.

Arctic Wolf president and CEO Nick Schneider thinks he can cash in on Cylance and deliver "a new era of simplicity, flexibility, and outcomes to the endpoint security market, delivering the security operations results customers have been asking for."

"Security has an operations and effectiveness problem and endpoint solutions alone have failed to live up to the outcomes they have promised for years," reads his canned quote about the deal. "By incorporating Cylance's endpoint security capabilities into our open-XDR Aurora platform, we will be addressing a rampant need for a truly unified, effective security operations that delivers better outcomes for customers. We believe we will be able to rapidly eliminate alert fatigue, reduce total risk exposure, and help customers unlock further value with our warranty and insurability programs."

Good luck with that, Nick.

BlackBerry CEO John Giamatteo declared himself "incredibly excited to partner with Arctic Wolf through this agreement."

"We see this transaction as a win-win for our shareholders and all other stakeholders," he added, before revealing that BlackBerry will continue to resell the combined Cylance/Arctic Wolf portfolio.

News of the offload is a little surprising, as at an October 2024 Investor Day Giamatteo flagged a planned emphasis on managed detection and response services powered by Cylance. That service will still be possible under the new arrangement, and BlackBerry's status as an Arctic Wolf shareholder may mean it can influence product development to ensure Cylance products meet its needs.

Investors seemed to like the idea, as BlackBerry shares jumped by almost 15 percent on news of the deal. ®

Send us news
1 Comment

Ransomware scum blow holes in Cleo software patches, Cl0p (sort of) claims responsibility

But can you really take crims at their word?

US reportedly mulls TP-Link router ban over national security risk

It could end up like Huawei -Trump's gonna get ya, get ya, get ya

Biden’s antitrust crackdown on tech M&As may linger into Trump’s reign

Lina Khan’s tenure may end, but the regulatory hurdles she helped build aren’t going anywhere

Microsoft won't let customers opt out of passkey push

Enrollment invitations will continue until security improves

Blocking Chinese spies from intercepting calls? There ought to be a law

Sen. Wyden blasts FCC's 'failure' amid Salt Typhoon hacks

Australia moves to drop some cryptography by 2030 – before quantum carves it up

The likes of SHA-256, RSA, ECDSA and ECDH won't be welcome in just five years

How Androxgh0st rose from Mozi's ashes to become 'most prevalent malware'

Botnet's operators 'driven by similar interests as that of the Chinese state'

Critical security hole in Apache Struts under exploit

You applied the patch that could stop possible RCE attacks last week, right?

Suspected LockBit dev, facing US extradition, 'did it for the money'

Dual Russian-Israeli national arrested in August

Don't fall for a mail asking for rapid Docusign action – it may be an Azure account hijack phish

Recent campaign targeted 20,000 folk across UK and Europe with this tactic, Unit 42 warns

Boffins trick AI model into giving up its secrets

All it took to make an Google Edge TPU give up model hyperparameters was specific hardware, a novel attack technique … and several days

Open source maintainers are drowning in junk bug reports written by AI

Python security developer-in-residence decries use of bots that 'cannot understand code'