This is the Market Pulse edition of Oct 15, 2026, kept as it was published. Read the current edition → · All past editions
Hardware pricing and supply, vendor deals and licensing changes, security alerts and funding signals shaping IT and security operations for businesses and public organizations alike, read from the practitioner's side of the table.
HPE closed its Juniper acquisition in July 2025. From Nov 1, Juniper partners move to HPE Partner Ready Vantage. What it means: if your firewalls or switches are Juniper, confirm your reseller's standing and support path before your next renewal or E-Rate bid.
Irving ISD has a nearly $1 billion bond package on the Nov 3 ballot, including $40 million in Proposition B for student and staff technology; early voting runs Oct 19 to 30. The figures come from a July report on the board's vote. What it means: bond-funded device and network projects usually reach the market months after the vote. If your district is on the ballot, expect refresh bids in 2027, and plan for memory-driven price increases and shorter quote windows. Source: Texas Scorecard
IDC's tracker (released Sep 10) put external enterprise storage revenue at $10.3 billion in 2Q26, up 33.6% from a year earlier. It ranked Dell Technologies first at 23.8% share (up 42.5%), then Huawei 11.3%, NetApp 9.6% (up 35.7%), Everpure 8.1% (up 50.0%) and HPE 6.8% (up 31.9%). IDC credits component price inflation and buyers pulling purchases forward, and does not expect meaningful NAND and DRAM relief before 2028. Separately, NetApp and Oracle announced on Sep 29 a managed NetApp storage service on Oracle Cloud Infrastructure, which the companies say will be generally available within 12 months. What it means: much of the growth is price, not just volume. If a storage refresh is on your 2027 list, expect higher flash pricing and short quote windows, get the capacity and drive spec in writing, and keep a migration path in mind if you are also re-planning your hypervisor or cloud footprint. Source: IDC Source: ITPro
On Oct 14 CISA added four flaws to its Known Exploited Vulnerabilities catalog: a code-injection bug in Palo Alto Networks PAN-OS, a path-traversal bug in Cisco Secure Email Gateway, and an improper-authentication bug and a command-injection bug in Ahsay's AhsayCBS. Palo Alto's advisory rates its flaw high severity, reports very limited exploitation through the management interface, and says no workaround exists. What it means: if you run PAN-OS firewalls or Panorama, check the advisory for your release, schedule the fix and make sure the management interface is not reachable from the internet. Cisco email gateway and AhsayCBS owners should check each vendor's advisory the same day. Source: CISA Source: Palo Alto Networks
TrendForce expects the nine largest cloud providers to spend about $957 billion in 2026 and more than $1.5 trillion in 2027, a 60% rise it lifted from 50%. It says higher server prices, rising component quotes and suppliers demanding advance payment drove the revision, and that memory shortages are pushing up the price of next-generation AI racks. What it means: the biggest buyers are absorbing supply and setting price levels for everyone else. Plan server, memory and storage purchases for 2027 with more cushion and shorter quote windows, and ask suppliers whether they require deposits. Source: TrendForce
Ivanti disclosed an authentication-bypass flaw in Connect Secure on Oct 13 and said it had been exploited against a limited number of customers before disclosure. Fixes are out for the affected release lines, though attackers also used a separate privilege-escalation flaw that Ivanti says it will fix later. CISA listed the bug the same day. What it means: if you use Connect Secure for remote access, treat the update as an emergency change, then look for signs of compromise even after patching, because vendor indicators are limited. Source: Rapid7
BleepingComputer counts 1,411 flaws fixed in October's release, a record, including an exploited Windows Shell bypass of Mark of the Web protections that CISA also listed. It reports that Windows 11 24H2 Home and Pro reached end of support with this update and that 23H2 Enterprise and Education stop receiving security updates next month. What it means: put the exploited Shell fix at the front of your patch ring, and check your fleet for Windows 11 builds that are about to lose support so device refresh planning starts now. Source: BleepingComputer
E-Rate Central's Oct 12 newsletter says initial comments on the FCC's E-Rate rulemaking closed Oct 13, with replies due Nov 12 and a separate reply deadline on USF administration on Oct 30. USAC's FY2027 administrative window opens Oct 21, FY2025 recurring-service invoices are due Oct 28, and the FY2026 Form 486 deadline for Waves 1 to 9 is Oct 29. FY2026 funding stands at $2.12 billion, with 87.7% of applications funded. What it means: districts and libraries should calendar these dates now, update entity profiles when the window opens, and decide whether to file reply comments, including on whether Category 2 budgets should cover cybersecurity products. Source: E-Rate Central
TrendForce expects global notebook shipments to fall by a low-single-digit percentage in 2027, and by a high-single-digit percentage if brands pass all cost increases on to buyers. For a $900 notebook, the CPU, DRAM and SSD made up about 68% of build cost in 3Q26, and TrendForce says DRAM supply stays tight while NAND constraints may ease in the second half of 2027. What it means: laptop and desktop refreshes for staff and students will probably cost more next year, with fewer cheap configurations. If a 2027 device purchase is planned, price it early, ask for the memory and storage spec in writing, and shorten the time between quote and order. Source: TrendForce
TrendForce expects conventional DRAM contract prices to rise 10% to 15% and NAND flash 15% to 20% quarter over quarter in 4Q26. Enterprise SSD is the one category where increases should speed up, while client SSD increases are being held back. Server DRAM stays tight. What it means: quotes for memory-heavy servers, virtualization hosts and storage are likely to move up again and expire sooner. Lock in pricing on planned refreshes now, and spend your flexibility on laptops and desktops, where increases are milder. Source: TrendForce