Intelligence Hub | Category Market Intelligence

Decision at a glance

Top move

Google will treat IP addresses as device identifiers for ad measurement in the UK/EU/Switzerland, which turns routing data into regulated personal data and forces buyers to get documented processing and consent commitments from ad/measurement suppliers

Key takeaways

Google will treat IP addresses as device identifiers for ad measurement in the UK/EU/Switzerland, which turns routing data into regulated personal data and forces buyers to get documented processing and consent commitments from ad/measurement suppliers.[2]
A recent Windows update prevents some third‑party apps from launching Office via OLE automation, meaning buyers should expect increased support load and require ISVs to prove compatibility and escalation SLAs for business‑critical integrations.[5]
Nvidia‑backed Coherent announced a major indium‑phosphide wafer capacity expansion for optics, shifting future supplier availability and making capacity roadmaps and lead‑time guarantees a negotiation priority for datacenter optics buys.[3]

Why this matters for the category manager

Google will treat IP addresses as device identifiers for ad measurement in the UK/EU/Switzerland, which turns routing data into regulated personal data and forces buyers to get documented processing and consent commitments from ad/measurement suppliers. A recent Windows update prevents some third‑party apps from launching Office via OLE automation, meaning buyers should expect increased support load and require ISVs to prove compatibility and escalation SLAs for business‑critical integrations. Nvidia‑backed Coherent announced a major indium‑phosphide wafer capacity expansion for optics, shifting future supplier availability and making capacity roadmaps and lead‑time guarantees a negotiation priority for datacenter optics buys. An India Telegram block leaked route announcements that disrupted reachability outside India; this makes carrier route‑validation (RPKI/ROV) and transit failover contractual requirements operationally relevant for cross‑border services

What changed

Added a new privacy/consent procurement issue from Google’s plan to use IPs for ad personalization in the UK/EU/Switzerland, which was not in the prior VPN/SD‑WAN‑focused brief (new supplier processing obligations).
Added an interoperability stability item: Microsoft confirmed Office launch failures from certain third‑party tools after recent Windows updates, introducing a new ISV compatibility and support cost vector.
Added a supply‑chain signal: Nvidia‑backed optics wafer expansion (Coherent) introduces a capacity roadmap discussion for optical interconnect sourcing not present in the prior security‑patch brief.

Category impact

Cost / money

Google’s change will likely create compliance and implementation costs (consent UIs, DPA addenda, measurement fallbacks) for buyers and ad tech suppliers.[2]
The Office/OLE interoperability break will increase short‑term support and remediation costs for buyers that rely on embedded Office workflows and may require paid Microsoft enterprise workarounds.[5]

Supplier / commercial

Coherent’s funded capacity expansion shifts supplier leverage toward firms that can promise early production slots; procurement should seek roadmap‑backed commitments and staged purchase terms.[3]
TfL’s direct extension with Capita demonstrates how incumbents win negotiating leverage during long transitions; buyers should expect stronger supplier commercial positions when procurement timelines slip.[1]

Safety / operations

BGP route leakage during the Telegram block shows collateral connectivity fragility for cross‑border services; operations must treat transit validation and failover as safety‑critical for remote offices and APIs.[4]
Broken Office launches affect operational availability of line‑of‑business tools that automate document workflows; pre‑staged manual workarounds and vendor escalation paths reduce user‑impact during platform fixes.[5]

What to watch

Watch whether Google publishes the technical method (on‑device privacy tech, hashing, or server signals) because implementation choices determine whether existing consent flows and DPAs remain adequate.[2]
Watch carrier statements and RPKI adoption after the Telegram routing incident because attribution and operator posture will change whether this looks like a one‑off leak or a recurring transit risk.[4]

Category manager actions

Action detail for this brief

Today's priorities

Inventory business‑critical third‑party apps that use OLE automation to open Office files and publish a short workaround guide for users and service desk teams.

Do this because Microsoft confirmed affected third‑party integrations may fail to launch Office after recent Windows updates, and buyers need mitigations to reduce operational d...

Due 3d

high

Request written processing purpose, consent model, and export/access controls from Google and primary ad/measurement suppliers; document gaps in DPAs and consent flows.

Do this because Google’s change converts IP addresses into regulated personal data in the UK/EU/Switzerland and buyers must confirm supplier commitments before the change goes l...

Due 21d

high

Open procurement dialogues with optics and transceiver suppliers to capture capacity ramp timelines, acceptance testing, and lead‑time guarantees; include staged purchase or pre...

Do this because Coherent’s announced wafer capacity expansion changes future optical component availability and buyers should secure commercial protections around delivery and a...

Due 21d

high

Supplier radar

theregister

high

Observed supplier signal

Coherent’s funded capacity expansion shifts supplier leverage toward firms that can promise early production slots; procurement should seek roadmap‑backed commitments and staged purchase terms.

Commercial implication

Coherent’s funded capacity expansion shifts supplier leverage toward firms that can promise early production slots; procurement should seek roadmap‑backed commitments and staged purchase terms.

Next step: Validate the source-backed signal with incumbents and alternates before the next award or pricing decision.

theregister

high

Observed supplier signal

TfL’s direct extension with Capita demonstrates how incumbents win negotiating leverage during long transitions; buyers should expect stronger supplier commercial positions when procurement timelines slip.

Commercial implication

TfL’s direct extension with Capita demonstrates how incumbents win negotiating leverage during long transitions; buyers should expect stronger supplier commercial positions when procurement timelines slip.

Next step: Validate the source-backed signal with incumbents and alternates before the next award or pricing decision.

Negotiation levers

Lever

Inventory business‑critical third‑party apps that use OLE automation to open Office files and publish a short workaround guide for users and service desk teams.

Use when

Do this because Microsoft confirmed affected third‑party integrations may fail to launch Office after recent Windows updates, and buyers need mitigations to reduce operational d...

Expected outcome

Scoped list of affected integrations and a published user/service‑desk workaround reducing immediate productivity impact and support escalation volume.

high confidence

Lever

Request written processing purpose, consent model, and export/access controls from Google and primary ad/measurement suppliers; document gaps in DPAs and consent flows.

Use when

Do this because Google’s change converts IP addresses into regulated personal data in the UK/EU/Switzerland and buyers must confirm supplier commitments before the change goes l...

Expected outcome

Recorded supplier statements (DPA addenda or technical notes) that show whether current consent tooling and contract language suffice or require amendment.

high confidence

Lever

Open procurement dialogues with optics and transceiver suppliers to capture capacity ramp timelines, acceptance testing, and lead‑time guarantees; include staged purchase or pre...

Use when

Do this because Coherent’s announced wafer capacity expansion changes future optical component availability and buyers should secure commercial protections around delivery and a...

Expected outcome

Updated supplier roadmaps and RFx language that protect buyers on lead times, acceptance criteria, and staged supply commitments.

high confidence

Talking points

Google will treat IP addresses as device identifiers for ad measurement in the UK/EU/Switzerland, which turns routing data into regulated personal data and forces buyers to get documented processing and consent commitments from ad/measurement suppliers.

A recent Windows update prevents some third‑party apps from launching Office via OLE automation, meaning buyers should expect increased support load and require ISVs to prove compatibility and escalation SLAs for business‑critical integrations.

Nvidia‑backed Coherent announced a major indium‑phosphide wafer capacity expansion for optics, shifting future supplier availability and making capacity roadmaps and lead‑time guarantees a negotiation priority for datacenter optics buys.

Recommended actions

Do now

Inventory business‑critical third‑party apps that use OLE automation to open Office files and publish a short workaround guide for users and service desk teams.
Why: Do this because Microsoft confirmed affected third‑party integrations may fail to launch Office after recent Windows updates, and buyers need mitigations to reduce operational d...
Owner: Ops
Expected outcome: Scoped list of affected integrations and a published user/service‑desk workaround reducing immediate productivity impact and support escalation volume.
[5]

Next few weeks

Request written processing purpose, consent model, and export/access controls from Google and primary ad/measurement suppliers; document gaps in DPAs and consent flows.
Why: Do this because Google’s change converts IP addresses into regulated personal data in the UK/EU/Switzerland and buyers must confirm supplier commitments before the change goes l...
Owner: Contracts
Expected outcome: Recorded supplier statements (DPA addenda or technical notes) that show whether current consent tooling and contract language suffice or require amendment.
[2]
Open procurement dialogues with optics and transceiver suppliers to capture capacity ramp timelines, acceptance testing, and lead‑time guarantees; include staged purchase or pre...
Why: Do this because Coherent’s announced wafer capacity expansion changes future optical component availability and buyers should secure commercial protections around delivery and a...
Owner: Category
Expected outcome: Updated supplier roadmaps and RFx language that protect buyers on lead times, acceptance criteria, and staged supply commitments.
[3]

Watch

Negotiate carrier contract language to require RPKI/route‑origin validation support, transit filtering practices, and documented routing incident escalation steps.
Why: Do this because the Telegram routing leak caused cross‑border reachability issues and contractual routing obligations reduce collateral outage risk for buyer services that span...
Owner: Contracts
Expected outcome: Contract addenda or SLAs that require carriers to support RPKI/ROV practices and provide incident evidence and escalation playbooks.
[4]
Update procurement templates and ISV SOWs to require Office interoperability testing, agreed patch windows, and named escalation contacts for automation integrations.
Why: Do this because the Microsoft issue shows platform changes can break automation paths, and explicit procurement requirements reduce future remediation and supplier response ambi...
Owner: Category
Expected outcome: Procurement templates and SOW clauses that vendors must meet to demonstrate compatibility and provide measurable escalation and remediation commitments.
[5]

What to watch

Watch whether Google publishes the technical method (on‑device privacy tech, hashing, or server signals) because implementation choices determine whether existing consent flows and DPAs remain adequate
Watch carrier statements and RPKI adoption after the Telegram routing incident because attribution and operator posture will change whether this looks like a one‑off leak or a recurring transit risk
Watch whether Google publishes the technical method (on‑device privacy tech, hashing, or server signals) because implementation choices determine whether existing consent flows and DPAs remain adequate.: Watch whether Google publishes the technical method (on‑device privacy tech, hashing, or server signals) because implementation choices determine whether existing consent flows and DPAs remain adequate
Watch carrier statements and RPKI adoption after the Telegram routing incident because attribution and operator posture will change whether this looks like a one‑off leak or a recurring transit risk.: Watch carrier statements and RPKI adoption after the Telegram routing incident because attribution and operator posture will change whether this looks like a one‑off leak or a recurring transit risk
Google will treat IP addresses as device identifiers for ad measurement in the UK/EU/Switzerland, which turns routing data into regulated personal data and forces buyers to get documented processing and consent commitments from ad/measurement suppliers
A recent Windows update prevents some third‑party apps from launching Office via OLE automation, meaning buyers should expect increased support load and require ISVs to prove compatibility and escalation SLAs for business‑critical integrations
Nvidia‑backed Coherent announced a major indium‑phosphide wafer capacity expansion for optics, shifting future supplier availability and making capacity roadmaps and lead‑time guarantees a negotiation priority for datacenter optics buys
An India Telegram block leaked route announcements that disrupted reachability outside India; this makes carrier route‑validation (RPKI/ROV) and transit failover contractual requirements operationally relevant for cross‑border services

Market pulse

Index	Latest	Change	As of
Palo Alto (PANW)	320	+0.00 (+0.00%)	Jun 18, 2026, 10:08 AM
CrowdStrike (CRWD)	285	+0.00 (+0.00%)	Jun 18, 2026, 10:08 AM
Zscaler (ZS)	195	+0.00 (+0.00%)	Jun 18, 2026, 10:08 AM
Fortinet (FTNT)	72	+0.00 (+0.00%)	Jun 18, 2026, 10:08 AM

Fortinet: Fortinet remains relevant to VPN/identity risk discussions and contractual telemetry requirements; keep FTNT in supplier risk reviews
Palo Alto: Network security posture influences SD‑WAN and routing controls; PANW should be considered when assessing controller and segmentation risk
CrowdStrike: Endpoint detection signals affect incident response costs and supplier escalation expectations; include CRWD in monitoring of response capacity

Evidence and sources

Inline citations jump here. Expand a source to read stored evidence excerpts.

[1] Transport for London keeps Capita behind wheel of road charging ops in £912M extension

theregister.com · Jun 18, 2026

Original linkExpand

Source excerpts

PUBLIC SECTOR Replacement deal now expected in mid-2029 as body says safe transition will take at least five years Transport for London (TfL) has extended supplier Capita's two road user charging contracts at a potential cost of £912 million including VAT after delaying the start of a combined replacement by two years. TfL announced it was directly awarding the contract extensions to Capita on June 11, saying this was required given the time it will take to buy and implement a replacement support service for its

Both extensions are for five years with the option to extend them to a total of seven. "Due to the scale and complexity of the existing services and the need to design, build, integrate and safely deploy a replacement solution, the full procurement, mobilisation and transition is expected to require a minimum of five years based on current programme assumptions," TfL said in the notices

"Due to the scale and complexity of the existing services and the need to design, build, integrate and safely deploy a replacement solution, the full procurement, mobilisation and transition is expected to require a minimum of five years based on current programme assumptions," TfL said in the notices. It added that it will have rights to end the extended contracts early, "enabling TfL to transition to a replacement supplier at the earliest point at which it is technically feasible and operationally safe to do

Open original source

[2] Google to use UK and EU user IP addresses for ad personalization

bleepingcomputer.com · Jun 17, 2026

Original linkExpand

Source excerpts

google

It is not a consent step in itself: it attaches to the personalization purposes, which require user consent rather than legitimate interest. Google's email notification sent June 17, 2026 to advertisers (BleepingComputer) The company frames the change around privacy-enhancing technologies, or PETs, listing on-device processing, trusted execution environments and secure multi-party computation

What changes on August 3 is the purpose: the same addresses will be used to identify devices for measurement and ad personalization, which is the use that triggers consent requirements under UK and EU law

Open original source

[3] Nvidia-backed optics vendor to boost wafer output by 4x to meet AI interconnect demand

theregister.com · Jun 17, 2026

Original linkExpand

Source excerpts

These supply chains are so important to Nvidia’s future growth that, in March, the GPU slinger invested $2 billion in the optics vendor to bolster its production capacity. Coherent is wasting little time putting those funds to use

Coherent is not the only optics vendor Nvidia is bankrolling

Now, Nvidia-backed photonics vendor Coherent plans to boost indium phosphide (InP) wafer production at its Sherman, Texas, fab by 4x in anticipation AI proliferation will trigger an explosion in optical interconnect demand

Open original source

[4] India's Telegram ban hit the UAE too. Here's how to get around it

bleepingcomputer.com · Jun 17, 2026

Original linkExpand

Source excerpts

The routing anomaly is documented

Chidambaram, Congress MP for Sivaganga, asked on X whether blocking Telegram was really the master stroke that would stop exam paper leaks, tagging the NTA. Telegram replied to him in kind, suggesting the government should also shut every shopping mall in case one had a shoplifter, and close the roads because someone might be speeding

Public routing data cited by network observers shows AS18101 began announcing Telegram prefixes around the time the domestic block went live, which would explain why users outside India lost access. The routing disruption itself is not in question

Open original source

[5] Microsoft confirms Office apps launch issues after June updates

bleepingcomputer.com · Jun 17, 2026

Original linkExpand

Source excerpts

"This issue affects certain third-party applications that use OLE automation to interact with Microsoft Office applications. In some cases, the Office application or document might fail to open without displaying an error message

This known issue affects Word, Excel, PowerPoint, Access, and other Microsoft Office applications when launched from within the affected third-party apps. "Microsoft has received reports of an issue in which certain third-party applications might be unable to launch Microsoft Office applications or open documents after installing the Windows updates released on or after June 9, 2026," the company said in updated advisories