Strengthen Contracts and SLAs for AI‑Accelerated Cyber Risk

What happened

SonicWall joined Anthropic's Project Glasswing to use a frontier AI model for defensive vulnerability discovery and code review. The company is applying the model across its software and partner‑delivered edge appliances, which could speed internal detection and remediation cycles. Watch whether that participation translates into shorter customer patch timelines and how firms document the capability in SLAs

Why the category manager should care

Treat supplier participation in shared AI defence labs as evidence of engineering capability and require proof this shortens remediation cycles in your environment

Key facts

• SonicWall applied frontier AI to vulnerability discovery and code review
• Work targets embedded products and partner-delivered edge appliances

What happened

Reporting shows AI is shortening the time between vulnerability disclosure and exploitation to hours in some cases, prompting firms to prioritise automation for hygiene and containment. Security teams are shifting focus from buying more detection tools to integrating telemetry, playbooks and remediation orchestration. Watch supplier demos for real containment evidence rather than feature claims

Why the category manager should care

Prioritise suppliers that can show tested incident handoffs and live remediation orchestration, not only detection coverage

Key facts

• Reported compression of disclosure-to-exploit timelines to 'hours' in some cases
• Shift from buying more tools toward overhauling hygiene and containment processes

What happened

Ericsson won the contract to design, supply, integrate, test and commission a private 5G platform for the first stage of Queensland's Wave rail programme. The delivery includes radio access, a geographically redundant 5G core and cloud infrastructure, supporting ETCS Level 2 digital signalling and using Band n101 (1900 MHz). Procurement should lock in redundancy, failover and acceptance testing tied to signalling availability

Why the category manager should care

Treat private 5G suppliers as critical infrastructure partners and require network resilience and failover in contracts

Key facts

• Ericsson to design, supply, integrate, test and commission private 5G for Sector 1 North
• Includes geographically redundant 5G core and use of Band n101 (1900 MHz)
• Supports ETCS Level 2 digital train control

What happened

SecurityBrief highlights that mid-market CFOs often buy discrete cybersecurity tools but lack a named cyber leader to translate alerts into business decisions and priorities. The piece shows tools alone don't manage financial or operational impacts like redirected supplier payments or payroll compromise. Watch whether vendors propose managed-owner models or continue to push licence-heavy solutions without accountability

Why the category manager should care

Force vendor proposals to state who will be accountable for business outcomes — a named internal leader or a managed service with clear SLAs

Key facts

• Mid-market firms commonly list owned tools but not the business outcomes they protect
• CFO sign-off common on tool purchases, creating governance and accountability gaps

What happened

Interactive appointed Anneliese McDowell as Managing Director of Cyber Security to lead its Slipstream Cyber business and a 24/7 Australian Security Operations Centre. The hire signals an intent to expand onshore incident response and managed services, but procurement should verify whether the appointment increases frontline SOC capacity or is focused on strategy and sales. Watch for concrete changes in SLAs, shift rosters and onshore escalation paths

Why the category manager should care

Validate whether new leadership expands onshore SOC capacity and shift coverage that can be called out in SLAs

Key facts

• Role covers Slipstream Cyber and operation of a 24/7 Australian Security Operations Centre
• Interactive works with more than 2,000 customers and employs over 600 staff