🫧 Bubble trouble

1. Key Themes

Theme: Political backlash against AI is now a market-moving risk factor

Election outcomes on AI regulation and data center restrictions triggered a violent repricing of AI-buildout stocks, even though the actual constraints are narrow.

Election results directly triggered the selloff

"The overwhelming rejection of AI in this week's elections — from wins for AI-cautious Democrats in governors' races in hotbeds of development to overwhelming support for ballot measures restricting data center construction — has pushed investors to reevaluate their previous bets on companies profiting from the data center boom."

Market reaction exceeded the substance of the regulation

"Many of the proposed constraints on AI are limited in nature and do not apply to projects already underway. Even so, the market reaction has been ferocious."

Theme: The pain concentrated in AI infrastructure "picks and shovels," not hyperscalers

The selloff hit suppliers of physical build-out inputs (optics, cooling, servers, chips, electrical equipment) hardest, while the platforms were relatively insulated.

Supply-chain names took the biggest hits

"Stocks tied to the AI buildout were hit particularly hard yesterday, with makers of everything from fiber optic connections (Coherent down 13%, Ciena down 15%) to HVAC systems (Comfort Systems, -11.6%), servers (Dell dove 15%) and semiconductors (Advanced Micro Devices, -17.3%) knocked down."

Hyperscalers fell less because slower capex may help them

"The so-called hyperscalers — Amazon, Alphabet, Microsoft, Meta and Oracle — were all down, too, though their losses were less lurid, as they could benefit from any slowdown in AI spending as a result of increased regulatory scrutiny."

Electrical and industrial exposure is a hidden leg of the trade

"Engineering, electrical and industrial equipment stocks closely tied to the boom also collapsed. Quanta Services and Vertiv Holdings plunged 12% and 14%, respectively."

Theme: Booms are hard to decelerate gracefully; bubble history is the lens

The article frames the selloff within the historical pattern that deflating a boom tends to produce stampedes rather than soft landings.

Orderly deflation is historically rare

"The historical record shows that once major investment booms are in motion, it can be difficult to temper them without sparking a stampede of investors out of assets."

Expert view: sentiment, not policy, drives the break

"'We can't control it,' John D. Turner... tells Axios. 'People just get spooked, and as soon as they do, then, you know, prices head down. And that's what happens in historical bubbles, and it can happen quite quickly.'"

Theme: Market structure signals deteriorating sentiment

Magnitudes were historically large, and retail behavior flipped from dip-buying to selling.

Severity of the drawdown

"The Nasdaq Composite Index fell 5.5% — its worst daily showing since the quasi-panic of President Trump's 'Liberation Day' tariffs in April 2025." "The SOX semiconductor index also endured its worst day since the pandemic, plummeting 12.3% yesterday." "The Nasdaq 100... is now down roughly 14% since its Oct. 7 peak. Its 6.4% drop yesterday was its steepest since the March 2020 pandemic panic."

Retail stopped buying the dip

"Retail investors, who in past market downturns have swarmed in to buy the dip, instead dumped shares, acting as heavy sellers of tech stocks yesterday, said Jai Malhi, senior equity strategist at Vanda Research."

Theme: AI is accelerating offensive cyber operations

AI and automation are compressing attack timelines and scaling state-backed operations, widening the attacker-defender gap.

Speed and scale of AI-driven campaigns

"China-linked hackers used an AI-powered tool called Artex to target more than 200 organizations across 14 countries in just 11 days last month, CrowdStrike found." "Google researchers said last week that multiple hacking groups have used automated security testing tools in recent attacks. One China-linked group gained deep access to a victim's network in as little as 15 minutes."

Attackers are combining models and agents

"The hackers paired Artex with DeepSeek and a commercial AI model to run agents that automated much of the operation."

Dual-use risk of pen-testing tools

"Other AI-powered security testing tools, including Cairn and Strix, could be repurposed for similar attacks, Meyers said."

2. Contrarian Perspectives

Hyperscalers may be net beneficiaries of an AI slowdown

The consensus reads "AI backlash" as uniformly bearish for AI-linked equities, but the article notes the largest platforms have a different exposure than their suppliers. Capex restraint helps their spending burden even as their stocks fell.

"The so-called hyperscalers... were all down, too, though their losses were less lurid, as they could benefit from any slowdown in AI spending as a result of increased regulatory scrutiny."

The selloff may be mechanical, not fundamental

The market's "ferocious" reaction to narrow rules, plus premarket futures being up, hints at forced or institutional selling rather than a thesis change.

"To some, the sudden tumble in the markets — futures were actually up a bit in premarket trading — suggested that a large institutional investor may have moved to sell a sizable chunk of a portfolio that had turned south after Wednesday's post-election slump in AI shares."

The broader bull market is intact despite the headline carnage

Amid bubble talk, the article's "reality check" offers a more measured view.

"The 4-year-old bull market for the blue chips still holds: The S&P 500 is off 6% from its high and is up 7.4% on the year."

3. Companies Identified

Anthropic

• Description: Frontier AI lab.
• Why mentioned: Possible IPO plans being watched amid volatility; separate research suggests accelerating model development pace.
• Quotes:

  "For any indications that the volatility hitting the AI trade could prompt Anthropic and rival OpenAI to reconsider plans to offer shares to the public." "Anthropic may have doubled the pace at which it is developing AI models, according to new research from METR."

OpenAI

• Description: Frontier AI lab.
• Why mentioned: Potential IPO plans under watch.
• Quotes:

  "...could prompt Anthropic and rival OpenAI to reconsider plans to offer shares to the public."

Coherent / Ciena

• Description: Fiber optic connectivity makers.
• Why mentioned: Examples of AI-buildout suppliers hit hard.
• Quotes:

  "Fiber optic connections (Coherent down 13%, Ciena down 15%)."

Comfort Systems

• Description: HVAC systems provider.
• Why mentioned: Data center cooling exposure.
• Quotes:

  "HVAC systems (Comfort Systems, -11.6%)."

Dell

• Description: Server maker.
• Why mentioned: AI server demand exposure.
• Quotes:

  "Servers (Dell dove 15%)."

Advanced Micro Devices (AMD)

• Description: Semiconductor company.
• Why mentioned: Largest cited single-name drop.
• Quotes:

  "Semiconductors (Advanced Micro Devices, -17.3%)."

Quanta Services / Vertiv Holdings

• Description: Electrical/engineering services and data center infrastructure/power-cooling equipment.
• Why mentioned: Industrial companies tied to the build-out.
• Quotes:

  "Quanta Services and Vertiv Holdings plunged 12% and 14%, respectively."

Amazon, Alphabet, Microsoft, Meta, Oracle (hyperscalers)

• Description: Largest AI infrastructure spenders.
• Why mentioned: Fell less than suppliers; may benefit from slower spending.
• Quotes:

  "They could benefit from any slowdown in AI spending as a result of increased regulatory scrutiny."

CrowdStrike

• Description: Cybersecurity firm.
• Why mentioned: Uncovered the Artex-enabled campaign.
• Quotes:

  "China-linked hackers used an AI-powered tool called Artex to target more than 200 organizations across 14 countries in just 11 days last month, CrowdStrike found."

SentinelOne

• Description: Cybersecurity firm.
• Why mentioned: Linked Russian-aligned hackers to prior refrigeration attacks.
• Quotes:

  "SentinelOne researchers reported Tuesday that Russian-aligned hackers have previously claimed attacks on European refrigeration systems."

Google (threat intelligence researchers)

• Description: Tech platform with threat research arm.
• Why mentioned: Documented automated tooling in attacks.
• Quotes:

  "Multiple hacking groups have used automated security testing tools in recent attacks."

Chainalysis

• Description: Blockchain analytics firm.
• Why mentioned: Assessed North Korean use of automation in the Binance heist.
• Quotes:

  "North Korean hackers behind last week's record-setting Binance heist also likely used automation to move stolen cryptocurrency and cover their tracks, according to Chainalysis."

Binance

• Description: Crypto exchange.
• Why mentioned: Victim of a record heist.
• Quotes:

  "$6.3 billion crypto heists."

Artex (tool) and DeepSeek

• Description: AI-powered offensive security tool and Chinese AI model.
• Why mentioned: Core components of Vapor Panda's campaign.
• Quotes:

  "The hackers paired Artex with DeepSeek and a commercial AI model to run agents that automated much of the operation."

Arm (sponsor)

• Description: Chip designer.
• Why mentioned: Sponsor message promoting Arm AGI CPU (sponsored, not editorial).
• Quotes:

  "Independent analysis shows Arm AGI CPU delivers nearly 2x modeled performance per rack across tested workloads."

METR

• Description: AI research/evaluation organization.
• Why mentioned: Research on Anthropic's development pace.
• Quotes:

  "METR, a research organization that's part of an experiment in 'embedded' evaluations."

4. People Identified

John D. Turner

• Description: Finance professor, Queen's University Belfast; co-author of "Boom and Bust: A Global History of Financial Bubbles."
• Why mentioned: Historical perspective on bubble dynamics.
• Quotes:

  "'People just get spooked, and as soon as they do, then, you know, prices head down.'"

Jai Malhi

• Description: Senior equity strategist, Vanda Research.
• Why mentioned: Data on retail investor behavior.
• Quotes:

  "Retail investors... instead dumped shares, acting as heavy sellers of tech stocks yesterday."

Cynthia Kaiser

• Description: Former deputy director of the FBI's cyber division.
• Why mentioned: Attribution analysis of refrigeration attacks.
• Quotes:

  "It's hard to imagine this is not the work of a nation state pretending to be a criminal actor."

Adam Meyers

• Description: SVP of counter adversary operations, CrowdStrike.
• Why mentioned: Hands-on testing of Artex.
• Quotes:

  "It was doing the stuff that you, as a pen tester, would do. But it does it really at a scale and a speed that I think a human would not be able to do."

Dario Amodei

• Description: Anthropic CEO.
• Why mentioned: Subject of a New York Times profile.
• Quotes:

  "Dario Amodei gets the New York Times treatment, which looked into how his 'thinking on artificial intelligence was shaped.'"

5. Operating Insights

Stress-test exposure to political and permitting risk, not just demand

If you sell into the AI build-out, a narrow regulatory change can reprice your equity regardless of whether your contracts are touched.

"Many of the proposed constraints on AI are limited in nature and do not apply to projects already underway. Even so, the market reaction has been ferocious."

Reconsider IPO and capital-raising timing against sentiment

Late-stage AI companies planning public offerings should expect volatility to affect window timing and valuation.

"For any indications that the volatility hitting the AI trade could prompt Anthropic and rival OpenAI to reconsider plans to offer shares to the public."

Assume attackers are automating; shorten your detection and response cycles

AI tools have compressed intrusion timelines to minutes, so defenders relying on human-speed response face a widening gap.

"One China-linked group gained deep access to a victim's network in as little as 15 minutes." "State-backed hackers are finding new ways to launch cyberattacks at remarkable speed and scale, with AI and automation threatening to widen the gap between attackers and defenders."

6. Overlooked Insights

Operational technology (OT) like refrigeration is an emerging physical-world attack surface

Hackers hit cold-chain systems in grocery stores, French blood banks and possibly Pentagon bases, which makes IoT/OT security for food, health and military logistics a notable, underappreciated category.

"French blood banks were also affected in the attacks on European refrigeration systems, authorities said Wednesday." "The Pentagon has also been investigating a series of suspected hacks of refrigeration systems on its military bases over the summer."

Frontier lab development pace may be accelerating, an input to the bubble debate

Alongside the selloff, METR's finding implies capability progress may not be slowing, which matters for judging whether valuations reflect real trajectory.

"Anthropic may have doubled the pace at which it is developing AI models, according to new research from METR."