Funding/M&A

Cisco to Acquire Splunk for $28 Billion

Cisco will boost its cybersecurity capabilities by shelling out $28 billion to buy Splunk, which Cisco says will drive the next generation of AI-enabled security and observability.

Cisco hacked

Cisco on Thursday announced that it has entered into a definitive agreement to acquire data analysis, security and observability solutions provider Splunk (NASDAQ: SPLK) in a deal valued at $28 billion. 

The networking giant is prepared to pay $157 per share in cash for Splunk, with the acquisition expected to close by the end of the third quarter calendar year 2024. Cisco said the deal will help accelerate revenue growth and gross margin expansion.

Following the acquisition, Splunk President and CEO Gary Steele will join Cisco’s executive team and will report to Cisco CEO and Chair Chuck Robbins.

Splunk’s AI, security and observability capabilities complement Cisco’s offering.

“Uniting with Cisco represents the next phase of Splunk’s growth journey, accelerating our mission to help organizations worldwide become more resilient, while delivering immediate and compelling value to our shareholders,” Steele said.

Robbins commented, “We’re excited to bring Cisco and Splunk together. Our combined capabilities will drive the next generation of AI-enabled security and observability. From threat detection and response to threat prediction and prevention, we will help make organizations of all sizes more secure and resilient.”

Advertisement. Scroll to continue reading.

News of the Splunk acquisition comes just months after Cisco announced buying cloud network security firm Valtix, cloud security company Lightspin, email security firm Armorblox, and identity threat detection and response startup Oort ID.

Related: Predictions 2023: Big Tech’s Coming Security Shopping Spree

Related: SecurityWeek Analysis: Over 210 Cybersecurity M&A Deals Announced in First Half of 2023

Related: TPG to Acquire Forcepoint’s Government Cybersecurity Business Unit

Related Content

Network Security

Cisco recently became aware of the exploitation of CVE-2026-20262, a Catalyst SD-WAN Manager zero-day that allows arbitrary file write.

Vulnerabilities

The security defects could allow attackers to create or modify arbitrary files and access and modify protected resources.

M&A Tracker

Significant cybersecurity M&A deals announced by Akamai, Check Point, Cisco, Cyera, Dragos, WatchGuard and Zscaler.

Vulnerabilities

The vulnerability is tracked as CVE-2026-20245 and it can allow arbitrary command execution as root, but no patch yet.

Vulnerabilities

The high-severity flaw can be exploited remotely, without authentication, in server-side request forgery (SSRF) attacks.

Vulnerabilities

Insufficient validation and authentication in the Secure Workload’s REST APIs provide remote attackers with Site Admin privileges.

Vulnerabilities

The zero-day, tracked as CVE-2026-20182, has been exploited in targeted attacks by a sophisticated threat actor identified as UAT-8616.

M&A Tracker

The acquisition enables Akamai to expand its Zero Trust portfolio to add protection directly into the browser.

Copyright © 2026 SecurityWeek ®, a Wired Business Media Publication. All Rights Reserved.

Exit mobile version