Reassess Telecom Cyber Defences and OT Segmentation Plans Now

What happened

Acronis identified a malware cluster targeting telecommunications providers and related infrastructure in South Asia and Afghanistan, linking the activity with moderate confidence to an APT actor. The cluster uses three previously undocumented implants and abuses legitimate cloud services (Google Sheets, GitHub Gists) for command-and-control, making normal URL-blocking ineffective. Watch whether indicators expand into regional supplier tooling or escalate to broader telco support channels

Why the category manager should care

Treat telco and MSP contracts as a first line of cyber defence; the supplier’s operational response capability materially affects buyer incident outcomes

Key facts

• Three new malware families identified (PATCHCORD, SHEETCORD, HACKERAI C2 Agent)
• Campaign targets telecom, government, defence and energy organisations
• Malware abuses Google Sheets and GitHub Gists for command-and-control

What happened

Security commentary emphasises that attackers exploit weaknesses in physical and connected infrastructure (routers, cameras, HVAC) to pivot into networks, and many devices can’t run endpoint protection. The article notes faster exploit timelines and recommends isolating unsupported devices onto separate networks as the most practical control. Watch for supplier pushback when segmentation requires changes to vendor support or service models

Why the category manager should care

If devices cannot be hardened, require network isolation, asset visibility and managed-segmentation support from suppliers as part of procurement

Key facts

• Connected physical devices (cameras, HVAC) considered high-risk network entry points
• Average time from disclosure to exploitation materially shortened, increasing containment val
• Zero trust and isolation recommended where device hardening is impossible

What happened

Bugtri launched in Sydney with early-access customers to filter and triage high volumes of vulnerability reports, addressing the rise of AI-generated low-quality submissions. The product connects to shared security inboxes and returns structured decisions and risk scores, reducing analyst triage load; it has early adoption and ASD partner program acceptance. Watch how it integrates with existing ticketing and supplier remediation workflows

Why the category manager should care

Consider lightweight triage tools to filter noise before engaging suppliers for remediation, reducing wasted supplier cycles and support costs

Key facts

• 11 organisations in early-access phase
• Platform returns structured decisions, risk score and summary into the security inbox
• Accepted into the Australian Signals Directorate Partner Program

What happened

A market report projects accelerating demand for OT firewalls as industrial networks digitise and operators prioritise uptime and containment. The shift makes OT-focused firewalls and management features (industrial protocol awareness, centralised management) more procurement-relevant for utilities and factories. Watch vendor roadmaps for cloud-managed options that balance control with production continuity

Why the category manager should care

Prioritise OT firewall solutions that support industrial protocols and centralised management to reduce configuration drift and speed incident containment

Key facts

• Report ties demand to digitalisation of factories, utilities and energy networks
• Operators judge firewall buys against downtime cost and production impact
• Shift toward cloud-managed deployments while on-prem remains common for mission-critical sites