Cybersecurity M&A Roundup: 33 Deals Announced in April 2026

This SecurityWeek roundup covers multiple high-impact cybersecurity developments: DigiCert revoked certificates after a support-portal compromise in which malware was delivered via a customer chat channel and an analyst’s system was infected; exploitation of the Linux “Copy Fail” vulnerability has begun and was added to CISA’s KEV list (Microsoft observed limited exploitation, mainly PoC testing); more than 40,000 servers have been compromised in active cPanel exploitation likely targeting CVE-2026-41940 (a recently patched zero-day leading to administrative access); edtech vendor Instructure披