Halloween, and the scariest thing in tech this week isn't wearing a costume. The AI trade is getting repriced by the market at the exact moment AI is proving it can break into the firm that polices crypto and hijack the tools developers trust. The theme of Black October's last day: the same technology that's on every balance sheet is now on every attacker's roadmap.
The AI trade gets a haircut
The market finally said the quiet part out loud. A fresh test of this year's technology rally sent the Nasdaq composite on Friday to its biggest decline since June, with the Nasdaq 100 falling 3.5% and landing on the brink of a correction. Intel and Reddit were among the hardest hit, and the four hyperscalers — Microsoft, Meta, Amazon, and Alphabet — slipped another 1% to 2% after a bruising week. The concentration is the part to sit with: Capital Economics notes the four hyperscalers have been responsible for more than a third of all the capital spending done by the current S&P 500 constituents over the past twelve months.
The operator's take: when a third of the index's capex sits in four names and those names wobble, the discount you're enjoying today is on loan. The hyperscalers are financing your infrastructure on their balance sheets, and a repricing like this is exactly when account teams get less generous. Keep your workloads portable, lock in terms while you can, and don't build your 2027 budget assuming this year's promotional rates survive a nervous market.
Chainalysis gets hit by its own future
The firm that helps everyone else trace stolen crypto got burned itself. Chainalysis disclosed that a hacker using "offensive agentic techniques" accessed customer names and email addresses, publishing the notice in a blog post Friday evening. The company said the incident is not related to the recent crypto theft at Binance, advised affected firms to turn on two-factor authentication, and did not disclose when it detected the intrusion, how many customers were affected, or exactly how the AI agents played a role.
The operator's take: "agentic attack" is no longer a conference buzzword — it's showing up in breach notices from the companies that are supposed to be the sharp end of security. The lesson isn't exotic; it's that AI lowers the cost of the boring, patient reconnaissance that precedes most intrusions, so attackers can run it against everyone at once. Assume your estate is being probed by something that never sleeps, enforce phishing-resistant MFA, and treat customer contact data as a crown jewel, not metadata.
The extension that turned on you
The supply chain came for the developer this time. A tampered Claude Code extension tried to plant an SSH backdoor on up to 5,000 machines before the campaign was shut down. Cursor pegged the blast radius at "at most 5,000 users," said anyone who installed version 2.1.313 should treat their machine as compromised, and Anthropic published a clean 2.1.314 to Open VSX and the VS Code Marketplace on October 30 while the command-and-control server was taken offline.
The operator's take: your developers' laptops are production — they hold cloud keys, source, and standing access to everything that matters. An AI coding extension runs with the same trust you'd never hand a random browser plug-in, yet it updates silently in the background. Pin extension versions, route installs through a vetted internal registry, and make "treat the machine as compromised" a runbook you can execute in an hour, not a panic you improvise.
Also on my radar
- The round shrinks with the mood. OpenAI trimmed its latest raise to about $20 billion at a $1.25 trillion valuation amid the AI selloff — when even the marquee name takes a smaller check, expect your vendors' "unlimited" credits to get quietly rationed.
- Firewalls in under 15 minutes. Researchers detailed a Chinese-nexus campaign that chained two vulnerabilities to root 24 firewalls plus a management box across the US, Japan, Taiwan, and South Korea in under fifteen minutes — your edge gear is the first door, so patch it like it's the last line.
- Sovereign AI, funded. Canada committed up to C$1.6 billion to Cohere — if data residency is a hard constraint for you, the map of credible non-US frontier options is filling in.
The throughline is that AI is now both the thing being sold and the thing being used against you, and the market noticed both this week. Investors are repricing the spend because the payback is uncertain; attackers are already collecting their return, using agents against the exact firms that police the space and the extensions your engineers install without a second thought. The operator's edge is to stop treating "AI" as a single line item. It's a capability you buy with discipline, and a threat you defend against with the same boring rigor — portable contracts, phishing-resistant MFA, pinned dependencies — that was good advice before any of this had a valuation. That's the Signal for today.
Paul Sapio is the CIO of Mikhail Education and a full-stack AI engineer. Open to contract work in security, networking, AI, and SaaS development — reach out.