Reassess Endpoint and AI Security Procurement Across APAC

What happened

CrowdStrike's Threat Hunting Report shows AI is accelerating attack speed and scale across enterprise environments. The report cites telemetry indicating a large jump in AI‑generated activity and rapid weaponisation of disclosed vulnerabilities within days or hours. This makes faster patching, telemetry access and supplier-run runbooks operational priorities to reduce exposure

Why the category manager should care

Treat the report as an operational signal to tighten SLAs and telemetry requirements, because the evidence is telemetry-driven and indicates real execution pressure on patching and response

Key facts

• More than seven trillion security events processed daily in CrowdStrike telemetry
• Approximately 14 million daily detection leads distilled from that telemetry
• Finding that most vulnerabilities are being weaponised within 48 hours of disclosure

What happened

Acceldata added AI observability features to its xLake platform to trace prompts, model calls and agent activity alongside data lineage. The integration links model behaviour to data quality and pipeline health and includes cost/token usage reporting and offline regression testing. Procurement should treat observability as part of the platform purchase and validate integration effort across hybrid estates

Why the category manager should care

Require model and agent tracing as a must-have in RFPs for AI services because observability materially affects root-cause and remediation time

Key facts

• Tracing for prompts, model calls, tool use and agent activity in a single view
• Includes token usage and cost reporting by project and model
• Supports online evaluation of production traffic and offline regression testing

What happened

SonicWall expanded its Gen 8 NSv virtual firewall range with S, M and L models and shipped SonicOS 8 and Network Security Manager 4.3. The range targets workloads across public cloud, private cloud and virtualised data centres and allows single-layer management as deployments scale. For buyers, this can simplify management across hybrid estates but requires re-evaluating licensing and throughput needs

Why the category manager should care

Consider whether virtual firewall consolidation reduces operational overhead, because unified management can lower multi‑tool complexity in hybrid estates

Key facts

• NSv range extends across S, M and L virtual firewall models
• Throughput scales across the range to support branch to larger distributed workloads
• Management continuity with SonicOS 8 and Network Security Manager 4.3

What happened

FPT was named an OpenAI Select Partner, positioning it to integrate OpenAI models into enterprise systems and emphasise cybersecurity uses like its Patch the Enterprise programme. The partner status suggests access to frontier models and consultancy resources for deployment. Procurement should weigh the supplier’s offshore footprint and insist on clear data residency, flow‑down and staffing models

Why the category manager should care

Treat OpenAI partner announcements as supplier capability signals that still require hands‑on validation because partnership status does not guarantee operational fit

Key facts

• FPT joined the OpenAI Partner Network as a Select Partner
• FPT intends to integrate GPT and Codex security features into its cybersecurity platform
• FPT reports a large-scale engineering bench and international operations

What happened

Interactive appointed a new Managing Director of Cyber Security to expand its Slipstream Cyber business and run a 24/7 sovereign Security Operations Centre in Australia. The hire aims to increase local managed detection, incident response and advisory capacity for Australian customers. Procurement can consider such local offerings for faster onshore response but should verify SLAs and escalation performance

Why the category manager should care

Validate local SOC claims through SLO/SLA evidence and tabletop exercises because hiring alone doesn't prove operational readiness

Key facts

• Appointment covers a 24/7 Australian-based Security Operations Centre and Slipstream Cyber se
• Interactive serves over 2,000 customers and employs more than 600 people
• Focus areas include active defence, digital forensics and incident response