Harden Identity, Network and Patch Controls for AI-Driven Risk

What happened

Security leaders warn insider threats now combine deepfake executive impersonation, data‑visibility gaps and agentic AI to create targeted fraud. The piece stresses preserving out‑of‑band command centres and preserving evidence types that may be absent from implicated systems. Watch whether vendors update incident playbooks and supply forensic export formats during procurement conversations

Why the category manager should care

Require vendors to support evidence preservation and out‑of‑band coordination because investigations may be impossible inside compromised systems

Key facts

• Executive impersonation and deepfake video identified as a rising insider threat vector
• Recommendation to preserve an out‑of‑band command centre for incident coordination
• Advice to use autonomous pentesting to measure blast radius of over‑privileged agents

What happened

Okta and Deloitte formed an alliance to offer identity controls aimed at regulated sectors in Australia, integrating product and consultancy capabilities. The partnership targets financial services, government and healthcare and has broad vendor support, making it an operational option for regulated procurement. Watch whether this becomes a preferred integrator in local RFPs and how it structures modular vs bundled scopes

Why the category manager should care

Expect packaged identity-for-AI offers combining product and consultancy; insist on modular deliverables and clear ownership for non‑human identity governance

Key facts

• Alliance focused on financial services, government and healthcare in Australia
• More than 25 technology companies announced support or early adoption

What happened

Research shows AI adoption is already changing traffic patterns—more east‑west flows, continuous automated traffic and concentrated wireless hotspots that stress campus and branch networks. The study found many organisations expect capacity and visibility limits and are accelerating network modernisation as a result. Watch vendor roadmaps and insist on PoV results for internal flow visibility and wireless scaling when sourcing network or desktop services

Why the category manager should care

Require suppliers to demonstrate east‑west monitoring, wireless scaling plans and latency SLAs because AI workloads change traffic shape, not just volume

Key facts

• Survey of 3,472 IT and networking decision-makers reporting AI-driven traffic impact
• Reported increase in east‑west and continuous automated traffic tied to AI workloads
• High share of respondents accelerating network modernisation to meet AI demand

What happened

Frontier AI models are now finding complex vulnerability chains and connecting disparate weaknesses, accelerating exploit construction and reducing the window for patching. The report cites Zero Day Clock data showing a dramatic decline in mean time‑to‑exploit and a rising share of zero‑day attacks, making supplier coordination and faster patch lanes operational priorities. Watch supplier patch SLAs, coordinated disclosure commitments and whether vendors can meet compressed containment timelines

Why the category manager should care

Require suppliers to support faster notification, prioritized patch lanes and joint containment procedures because AI can turn complex chains into working attacks rapidly

Key facts

• Zero Day Clock reported a mean time to exploit of -8 hours as cited in the source
• Zero‑day share in tracked events moved to a majority, indicating more attacks on previously u

What happened

Jazz launched a data loss prevention (DLP) app integrated into the CrowdStrike Falcon console, enabling DLP findings to appear natively within the Falcon workflow. The integration avoids deploying an extra endpoint agent or separate console and positions Jazz inside CrowdStrike's marketplace and control plane. Watch whether buyers with existing Falcon estates prefer marketplace apps to separate DLP vendors and how marketplace billing and data flows are handled in contracts

Why the category manager should care

Treat marketplace apps as material sourcing choices: validate integration behavior, agent footprint reduction and contractual terms for marketplace billing

Key facts

• Jazz released its Melody DLP app on CrowdStrike Falcon Foundry
• Integration surfaces DLP findings inside the Falcon console without extra endpoint agents