Overview

On October 21, 2025, the New York State Department of Financial Services (NYDFS) released comprehensive guidance for registrants regarding management of cybersecurity risks associated with third-party service providers (TPSPs) including cloud computing, file transfer system, AI and fintech solutions.[1] As reliance on external vendors for critical technology services grows, so too do the cyber threats to operations and sensitive customer data. The guidance clarifies regulatory expectations, highlights best practices, and underscores the importance of robust third-party risk management throughout the entire vendor relationship lifecycle.  In summary, companies can outsource functions but will still retain responsibility for cybersecurity oversight.

Government and Federal Aviation Administration (FAA) safety directives have led to a reduction in flights beginning November 7, 2025, to protect people and property from potential accidents. The FAA’s Emergency Order Establishing Limitations on the Use of Navigable Airspace explains that the restrictions are necessary “to ensure the safety of aircraft” and “[t]o maintain the highest standards of safety” in the National Airspace System. For companies whose operations or revenues are affected, these measures may give rise to recoveries under general liability and property insurance policies.

Diversis Capital has announced the acquisitions of three technology companies serving the hospital supply chain management market:

  • Kermit, a cloud-based, bill-only automation, spend-management and analytics platform for physician preference items;
  • Meperia, a supply chain and procurement intelligence platform; and
  • Genesis Automation Healthcare, a clinical traceability and supply chain automation solution.

The combined three…

JLL Partners has announced its acquisition of Parks Medical Electronics.

Parks, established in 1961 and based in Aloha, Oregon, is a manufacturer of Doppler ultrasound systems and vascular labs. Its products, including the Flo-Lab system, are used in medical offices, operating rooms and veterinary practices. 

JLL, founded in 1988 and based in New…

On October 20, 2025, the United States Court of Appeals for the Fifth Circuit issued a significant decision clarifying that an insurer’s duty to defend under Texas law extends to a contractually mandated alternative dispute resolution (ADR) proceeding.[i] The Fifth Circuit reversed a magistrate judge’s dismissal of BPX Production Co.’s (BPX) coverage claims, holding that an ADR proceeding triggers an insurer’s duty to defend and indemnify under a commercial general liability (CGL) policy—thus rejecting the insurer’s argument that a “suit” was required.  Further, the Fifth Circuit held that an insurer’s conduct can waive conditions to coverage. This decision provides important guidance for corporate policyholders navigating insurance disputes involving an ADR proceeding, policy defenses asserted by insurers, and the assignment of insurance rights to maximize an insurance recovery in the circumstance of a bankruptcy.

TPG and Blackstone will acquire Hologic, according to a news release. The deal is valued at up to $18.3 billion.

Hologic (Nasdaq: HOLX), founded in 1985 and based in Marlborough, Massachusetts, is a women’s health technology firm.

TPG, founded in 1992 and based in San Francisco, targets investments in middle market companies. The firm…

Curewell Capital has acquired Wilmington PharmaTech (WPT), according to a news release.

WPT, founded in 2003 and based in Newark, Delaware, is a contract research, development and manufacturing organization focused on custom small molecule API development and manufacturing.

Curewell, founded in 2021 and based in Los Angeles, is a middle market private…