Connect with us

Published

on

Lina Khan, chair of the U.S. Federal Trade Commission, and Jonathan Kanter, assistant attorney general for the Justice Department’s antitrust division, participate in a discussion on antitrust reforms at the Brookings Institution in Washington on Oct. 4, 2023. Khan assumed the role of FTC chair in June 2021 after being appointed by U.S. President Joe Biden and confirmed by the Senate.

Drew Angerer | Getty Images

Google had been in talks to acquire marketing software maker HubSpot earlier this year, but no deal took place. The company then made a run at cybersecurity startup Wiz. But that didn’t happen either.

Google took a different tactic in closing its one notable transaction of late. Following a model pursued by Amazon and Microsoft to lure experts in artificial intelligence, Google announced last month it was hiring the founders of generative AI startup Character.AI. Rather than buying Character outright and shutting it down — the standard acquihire playbook — Google kept the startup alive and entered into a licensing deal for its technology.

This is the new world of tech M&A. Under the Biden administration, and more specifically Federal Trade Commission head Lina Khan, the biggest companies have been thwarted from pursuing large deals. In some cases, they’ve even walked away from smaller deals. Amazon abandoned its $1.7 billion purchase of iRobot in January after the FTC and European regulators raised concerns.

Since peaking at $1.5 trillion in 2021, tech transaction volume has plummeted, dropping to $544 billion last year, according to Dealogic. So far in 2024, that number sits at $465 billion.

Within tech, private equity buyers are the ones keeping the market afloat. In July, BlackRock agreed to buy data provider Preqin for $3.2 billion, two months after Permira announced it was buying website-building platform Squarespace in a deal valued at almost $7 billion. Thoma Bravo, a leading tech buyout firm, said in July it was selling Instructure to KKR for $4.8 billion.

Don’t expect much to change for the rest of this year. With the presidential election coming in November, the regulatory environment could be poised for a shake-up, potentially leading to the removal of deal-making barriers.

However, neither party offers much clarity for what the future would bring. Sen. JD Vance, Donald Trump’s running mate on the Republican ticket, has praised Khan’s stricter rules on mergers, and he told CNBC last week that “there should be an antitrust solution” to some of the behaviors of large tech platforms.

Apple isn't an evil company, but they do sometimes benefit from Chinese slave labor: JD Vance

On the Democratic side, billionaire donors Barry Diller and Reid Hoffman have voiced concerns about Khan keeping her job if Vice President Kamala Harris wins.

“If Trump wins, I think that the regulatory environment will still be fairly challenging, and under a challenging regulatory environment, that just limits big deals,” said Andrew Luh, a partner at law firm Gunderson Dettmer who represents startups in mergers and acquisitions.

The Biden administration’s crackdown on Big Tech has gone well beyond squashing M&A.

Alphabet is in the midst of its second antitrust trial, following charges from the Justice Department that the company acted as a monopoly in search and advertising. The DOJ sued Apple on antitrust grounds in March. The FTC has cases pending against Meta and Amazon.

Couple that with a similarly rigid environment in Europe, and no deal appears safe. In December, Adobe walked away from its $20 billion agreement to purchase design software startup Figma, and paid a $1 billion breakup fee. In a statement, the companies said, “there is no clear path to receive necessary regulatory approvals from the European Commission and the UK Competition and Markets Authority.”

In July, Figma said it had completed a tender offer valuing the design software startup at $12.5 billion. Figma is viewed as a strong IPO candidate when that market eventually reopens. But alongside a plummeting M&A market, initial public offerings are also in an extended drought as companies continue to adapt to drastically reduced valuations wrought by the economic slowdown starting in 2022.

A Figma spokesperson declined to comment on the company’s plans.

Dana Rao, who at the time was Adobe’s general counsel, announced his departure earlier this month after 12 years at the company. Rao said in a December interview that Adobe leadership felt justified in pursuing Figma after the failure of its competing product design program. But regulators were taking a different view.

“We’ve had a lot of interaction with the regulators, and they’ve been very focused on the newer doctrines of antitrust law that say that future competition is a critical part of the antitrust analysis,” he said.

Jonathan Kanter, head of the Justice Department’s Antitrust Division, said in a statement after Adobe backed down that the move “ensures that designers, creators, and consumers continue to get the benefit of the rivalry between the two companies going forward.”

‘Very, very disciplined’

There are still deals taking place, outside the watchful eye of regulators.

Hewlett Packard Enterprise agreed in January to acquire networking hardware company Juniper for $14 billion. And this month, Salesforce said it was buying startup Own for $1.9 billion.

In those cases, management was less concerned about regulators and much more focused on how shareholders would respond due to the growing obsession with profitability, following the 2022 downturn.

US company Hewlett Packard Enterprise President and Chief Officer Executive Antonio Neri gives a conference at the Mobile World Congress (MWC), the telecom industry’s biggest annual gathering, in Barcelona on February 27, 2024.

Pau Barrena | AFP | Getty Images

HPE CEO Antonio Neri told CNBC that Juniper would add to non-GAAP earnings in year one.

“We have been very, very disciplined on returning invested capital, meaning every dollar spent has to deliver value to our shareholders,” Neri said in an interview. “And that’s why, in the case of Juniper, for example, we committed to a series of synergies that then more than pay for the cost of capital to make this acquisition.”

Neri told analysts in January that the two companies do business in some of the same markets, but in different verticals, and said that he didn’t anticipate protracted battles with regulators. In August, the U.K.’s Competition and Markets Authority approved the tie-up.

Sergio Letelier, HPE’s head of corporate development, said that when he and his team members advise Neri on a potential deal, they always discuss how regulators might treat it. While some transactions are taking longer to close than they would have previously, “the fundamentals of what is a problematic deal vs. what is not a problematic deal hasn’t changed,” Letelier said.

At Salesforce, CEO Marc Benioff said that Own should bolster free cash flow in the second year after the deal closed. It’s Benioff’s first billion-dollar-plus acquisition since 2021, when the cloud software vendor paid $27 billion for Slack, its largest purchase ever. The DOJ’s Antitrust Division asked for additional information on that deal before clearing it.

In an interview last week, Benioff called U.S. regulators “somewhat dysfunctional” but applauded Europe for recognizing where competition really is being harmed. He specifically pointed to a recent finding by the European Commission, the executive body of the European Union, that Microsoft had breached antitrust rules by tying Teams, its Slack competitor, to its core Office productivity applications.

“They’re the ones who are actually functional and who are doing serious work,” Benioff said, referring to the EU and U.K. “I think that it’s a big story that we’re following the Europeans in this regulatory environment.”

Since the Slack purchase, Salesforce has pursued only smaller deals, particularly after facing off with activist investors who pressured the company to put a renewed focus on profitability. Salesforce landed AI talent from buying Airkit and a Sales Cloud software add-on from Spiff.

“We’ve done more than 60 acquisitions,” Benioff said. “We’ve tried and failed a lot in M&A, but we have also succeeded in quite a few of them, especially the big ones.” Before Slack, Salesforce acquired Tableau Software and MuleSoft.

Hard to be confident

At Cisco, one of the first questions executives ask when evaluating a potential deal is how certain they are it will close, said Derek Idemoto, the networking hardware company’s head of corporate development.

“The question is, How much risk are you willing to take on the regulatory side, given how hard things are at this time and how litigious things could be,” said Idemoto, who’s worked on more than 100 deals in his nearly 17 years at the company.

Idemoto said that’s made Cisco more selective these days. Before the company announced its $27 billion purchase of data analytics software company Splunk last September, he said he viewed the risk as absolutely worth taking. Splunk sat comfortably outside Cisco’s core of networking equipment.

“Certainly it’s an offensive play for us,” Idemoto said.

The deal sailed through, even closing in March, six months ahead of schedule.

“Having a high confidence level when you sign something — that’s the Cisco way,” Idemoto said.

That level of confidence would be difficult for the megacap companies as long as the FTC and DOJ are aggressively watching them. Alphabet’s last big deal was its $5.4 billion purchase of cybersecurity company Mandiant in 2022. Microsoft closed its massive $75 billion purchase of Activision in October, but it took 20 months and a protracted fight with U.S. and European regulators. Amazon hasn’t had a billion-dollar-plus deal since closing the $3.9 billion acquisition of One Medical in early 2023.

Last month, Amazon announced it was hiring a quarter of staffers from Covariant, which builds AI models for robots. It was the company’s second AI deal in the acquihire vein, following a similar agreement with Adept in June. Even that deal attracted an informal FTC inquiry.

Amazon didn’t provide a specific comment for this story, but said acquisitions are still part of its growth strategy and “are a critical and healthy part of an innovation economy.” Microsoft and Google declined to comment.

HPE’s Letelier said that any tech company considering its acquisition strategy will have a difficult time forecasting for the future because it’s not clear what changes Vice President Harris might make if she wins in November or what Trump would do if he returns to the White House.

Trump as president blocked some deals on national security grounds, following recommendations from the Committee on Foreign Investment in the United States. Regulators under President Joe Biden, meanwhile, have filed a record number of merger enforcement actions, Bloomberg reported.

“We’re at a crossroads here, and we don’t know which side of the fork the policy is going to go,” Letelier said.

WATCH: How Big Tech is quietly acquiring AI startups without actually buying the companies

How Big Tech is quietly acquiring AI startups without actually buying the companies

Continue Reading

Technology

Chinese medical devices are in health systems across U.S., and the government and hospitals are worried

Published

on

By

Chinese medical devices are in health systems across U.S., and the government and hospitals are worried

A popular medical monitor is the latest device produced in China to receive scrutiny for its potential cyber risks.  However, it is not the only health device we should be concerned about. Experts say the proliferation of Chinese health-care devices in the U.S. medical system is a cause for concern across the entire ecosystem. 

The Contec CMS8000 is a popular medical monitor that tracks a patient’s vital signs.  The device tracks electrocardiograms, heart rate, blood oxygen saturation, non-invasive blood pressure, temperature, and respiration rate.  In recent months, the FDA and the Cybersecurity and Infrastructure Security Agency (CISA) both warned about a “backdoor” in the device, an “easy-to-exploit vulnerability that could allow a bad actor to alter its configuration.”  

CISA’s research team described “anomalous network traffic” and the backdoor “allowing the device to download and execute unverified remote files” to an IP address not associated with a medical device manufacturer or medical facility but a third-party university — “highly unusual characteristics” that go against generally accepted practices, “especially for medical devices.”

“When the function is executed, files on the device are forcibly overwritten, preventing the end customer—such as a hospital—from maintaining awareness of what software is running on the device,” CISA wrote.

The warnings says such configuration alteration could lead to, for instance, the monitor saying that a patient’s kidneys are malfunctioning or breathing failing, and that could cause medical staff to administer unneeded remedies that could be harmful. 

The Contec’s vulnerability doesn’t surprise medical and IT experts who have warned for years that medical device security is too lax. 

Hospitals are worried about cyber risks

“This is a huge gap that is about to explode,” said Christopher Kaufman, a business professor at Westcliff University in Irvine, California, who specializes in IT and disruptive technologies, specifically referring to the security gap in many medical devices.

The American Hospital Association, which represents over 5,000 hospitals and clinics in the U.S., agrees. It views the proliferation of Chinese medical devices as a serious threat to the system. 

As for the Contec monitors specifically, the AHA says the problem urgently needs to be addressed. 

“We have to put this at the top of the list for the potential for patient harm; we have to patch before they hack,” said John Riggi, national advisor for cybersecurity and risk for the American Hospital Association.  Riggi also served in FBI counterterrorism roles before joining the AHA. 

CISA reports that no software patch is available to help mitigate this risk, but in its advisory said the government is currently working with Contec. 

Contec, headquartered in Qinhuangdao, China,  did not return a request for comment. 

One of the problems is that it is unknown how many monitors there are in the U.S. 

“We don’t know because of the sheer volume of equipment in hospitals. We speculate there are, conservatively, thousands of these monitors; this is a very critical vulnerability,” Riggi said, adding that Chinese access to the devices can pose strategic, technical, and supply chain risks. 

In the short-term, the FDA advised medical systems and patients to make sure the devices are only running locally or to disable any remote monitoring; or if remote monitoring is the only option, to stop using the device if an alternative is available. The FDA said that to date it is not aware of any cybersecurity incidents, injuries, or deaths related to the vulnerability.

The American Hospital Association has also told its members that until a patch is available, hospitals should make sure the monitor no longer has access to the internet, and is segmented from the rest of the network.

Riggi said the while the Contec monitors are a prime example of what we don’t often consider among health care risk, it extends to a range of medical equipment produced overseas. Cash-strapped U.S. hospitals, he explained, often buy medical devices from China, a country with a history of installing destructive malware inside critical infrastructure in the U.S.  Low-cost equipment buys the Chinese potential access to a trove of American medical information that can be repurposed and aggregated for all sorts of purposes. Riggs says data is often transmitted to China with the stated purpose of monitoring a device’s performance, but little else is known about what happens to the data beyond that. 

Riggi says individuals aren’t at acute medical risk as much as the information being collected and aggregated for repurposing and putting the larger medical system at risk. Still, he points out that, at least theoretically, is can’t be ruled out that prominent Americans with medical devices could be targeted for disruption. 

“When we talk to hospitals,  CEOS are surprised, they had no idea about the dangers of these devices, so we are helping them understand.  The question for government is how to incentivize domestic production, away from overseas,”  Riggi said. 

Chinese data collection on Americans

The Contec warning is similar at a general level to TikTok, DeepSeek, TP-Link routers, and other devices and technology from China that the U.S. government says are collecting data on Americans. “And that is all I need to hear in deciding whether to buy medical devices from China,” Riggi said. 

Aras Nazarovas, an information security researcher at Cybernews, agrees that the CISA threat raises serious issues that need to be addressed. 

“We have a lot to fear,” Nazarovas said. Medical devices, like the Contec CMS8000, often have access to highly sensitive patient data and are directly connected to life-saving functions.  Nazarovas says that when the devices are poorly defended, they become easy prey for hackers who can manipulate the displayed data, alter vital settings, or disable the device completely.  

“In some cases, these devices are so poorly protected that attackers can gain remote access and change how the device operates without the hospital or patients ever knowing,” Nazarovas said. 

The consequences of the Contec vulnerability and vulnerabilities in an array of Chinese-made medical devices could easily be life-threatening.  

“Imagine a patient monitor that stops alerting doctors to a drop in a patient’s heart rate or sends incorrect readings, leading to a delayed or wrong diagnosis,” Nazarovas said. In the case of the Contec CMS8000, and Epsimed MN-120 (a different brand name for the same tech), warning from the government, these devices were configured to allow remote code execution by the remote server.  

“This functionality can be used as an entry point into the hospital’s network,” Nazarovas said, leading to patient danger.  

More hospitals and clinics are paying attention. Bartlett Regional Hospital in Juneau, Alaska, does not use the Contec monitors but is always looking for risks. “Regular monitoring is critical as the risk of cybersecurity attacks on hospitals continues to increase,” says Erin Hardin, a spokeswoman for Bartlett.  

However, regular monitoring may not be enough as long as devices are made with poor security. 

Potentially making matters worse, Kaufman says, is that the Department of Government Efficiency is hollowing out departments in charge of safeguarding such devices. According to the Associated Press, many of the recent layoffs at the FDA are employees who review the safety of medical devices. 

Kaufman laments the likely lack of government supervision on what is already, he says, a loosely regulated industry. A U.S. Government Accountability Office report as of January 2022, indicated that 53% of connected medical devices and other Internet of Things devices in hospitals had known critical vulnerabilities. He says the problem has only gotten worse since then. “I’m not sure what is going to be left running these agencies,” Kaufman said.

“Medical device issues are widespread and have been known for some time now,” said Silas Cutler, principal security researcher at medical data company Censys. “The reality is that the consequences can be dire – and even deadly. While high-profile individuals are at heightened risk, the most impacted are going to be the hospital systems themselves, with cascading effects on everyday patients.”  

Continue Reading

Technology

Substack boosts video capabilities amid potential TikTok ban

Published

on

By

Substack boosts video capabilities amid potential TikTok ban

Rafael Henrique | SOPA Images | AP

After posting almost 200 videos, amassing hundreds of thousands of followers and racking up millions of views, Carla Lalli Music is quitting YouTube. Substack is her new focus. 

Music is a cookbook author and food content creator, and she is shifting her focus to Substack, a subscription platform that lets creators charge users subscriptions for access to their content. Music told CNBC she came to that decision after earning more in one year of using Substack, nearly $200,000 in revenue, than she did by posting videos on YouTube since 2021. 

Music is the exact kind of content creator that Substack is trying to lure to its platform as TikTok’s future in the U.S. remains in limbo. 

San Francisco-based Substack launched in 2017 as a tool for newsletter writers to charge readers a monthly fee to read their content. The platform allows creators to connect to their followers directly without having to navigate algorithmic models that control when their content is shown, as is the case on TikTok, Google’s YouTube and other social platforms. Substack has raised about $100 million, most recently at a post-money valuation of more than $650 million, the company told CNBC.

This year, Substack has broadened its focus beyond newsletters, and on Thursday, it announced that creators can now post video content directly through the Substack app and monetize these videos.

“There’s going to be a world of people who are much more focused on videos,” Substack Co-founder Hamish McKenzie told CNBC. “That is a huge world that Substack is only starting to penetrate.”

Substack began this push after the social media landscape was thrown into flux as a result of the effective ban of TikTok in January that caused the popular Chinese-owned service to go offline for a few hours. TikTok was also removed from Apple and Google’s app stores for nearly a month. 

The disruption to TikTok in January happened as a result of a law signed by former President Joe Biden to force a sale of the Chinese-owned app or have it effectively banned in the U.S. On his first day in office, President Donald Trump signed an executive order extending TikTok’s ability to operate in the U.S., but that order expires on April 5. 

Days after TikTok went offline, Substack launched a $20 million fund to court creators to its platform.

“If TikTok gets banned for political reasons, there’s nothing to do with the work you’ve done, but it really affects your life,” McKenzie said. “The only and surefire guard against that is if you don’t place your audience in the hands of some other volatile system who doesn’t care about what happens to your livelihood.”

Moving beyond newsletters

McKenzie says that they are going after creators on competing social media platforms to start sharing their video content on Substack.

“Video-first creators, people who are mobile oriented, there’s a whole lot of new possibility waiting to be unlocked once they meet this model in the right place,” McKenzie said. 

Already, Substack has more than 4 million paid subscriptions with over 50,000 creators who make money on the platform, the company said. Substack says that 82% of its top 250 revenue-generating creators have already integrated audio or video into their content, reflecting a growing emphasis on multimedia content.

Prior to the video announcements, Substack allowed creators to post videos on the app to Notes, which is the platform’s front-facing feed format. But the feature did not allow creators to publish video content behind Substack’s paywalls. 

The update enables creators to put video content behind a paywall and it provides data on estimated revenue impact. It also allows them to track viewership and new subscribers.

Carla Lalli Music is a cookbook writer and food creator.

Carla Lalli Music

Our base case for TikTok is that it gets banned in the U.S.: Lead Edge Capital's Mitchell Green

Continue Reading

Technology

Anne Wojcicki has a new offer to take 23andMe private, this time for $74.7 million

Published

on

By

Anne Wojcicki has a new offer to take 23andMe private, this time for .7 million

Anne Wojcicki attends the WSJ Magazine Style & Tech Dinner in Atherton, California, on March 15, 2023.

Kelly Sullivan | Getty Images Entertainment | Getty Images

23andMe CEO Anne Wojcicki and New Mountain Capital have submitted a proposal to take the embattled genetic testing company private, according to a Friday filing with the U.S. Securities and Exchange Commission.

Wojcicki and New Mountain have offered to acquire all of 23andMe’s outstanding shares in cash for $2.53 per share, or an equity value of approximately $74.7 million. The company’s stock closed at $2.42 on Friday with a market cap of about $65 million.

The offer comes after a turbulent year for 23andMe, with the stock losing more than 80% of its value in 2024. In January, the company announced plans to explore strategic alternatives, which could include a sale of the company or its assets, a restructuring or a business combination. 

Read more CNBC tech news

23andMe has a special committee of independent directors in place to evaluate potential paths forward. The company appointed three new independent directors to its board in October after all seven of its previous directors abruptly resigned the prior month. The special committee has to approve Wojcicki and New Mountain’s proposal.

“We believe that our Proposal provides compelling value and immediate liquidity to the Company’s public stockholders,” Wojcicki and Matthew Holt, managing director and president of private equity at New Mountain, wrote in a letter to the special committee on Thursday.

Wojcicki previously submitted a proposal to take the company private for 40 cents per share in July, but it was rejected by the special committee, in part because the members said it lacked committed financing and did not provide a premium to the closing price at the time.

Wojcicki and New Mountain are willing to provide secured debt financing to fund 23andMe’s operations through the transaction’s closing, the filing said. New Mountain is based in New York and has $55 billion of assets under management, according to its website.

23andMe declined to comment.

WATCH: The rise and fall of 23andMe

The rise and fall of 23andMe

Continue Reading

Trending