AI Attacks, Y2K-Style Cleanup
Wambsgans Capital@wambscapital
The idea
I believe AI is about to make attacks on infrastructure like power, water, factories, hospitals and government systems much more common, and the response will echo Y2K: a scramble to find weak spots, patch them, back them up and call in outside help. Since the big security platforms already ran up a lot this year, I put most of the weight in the layers that get paid once attacks actually land: cleanup contractors, vulnerability scanners, backup and recovery, and industrial-systems security, with a smaller tilt toward security leaders.
What it owns
- Governments and utilities bring in outside help to respond, patch and rebuild after attacks land. · Booz Allen HamiltonIt does cyber defense and response work for federal agencies, providing the outside help that gets called when government systems are hit., CACI InternationalIt does cyber and IT work for defense and intelligence agencies, so attacks on government systems mean more cleanup contracts., Leidos HoldingsIt builds and runs large government and health systems, many of them old, so a rush to patch and harden them lands on its desk., Parsons CorporationIt works on critical infrastructure like transit, water and utilities and sells cyber protection for them., Science Applications InternationalIt modernizes old government IT, ripping out or rebuilding fragile systems that agencies need to update.23%
- Finding every weak spot across IT and industrial systems is the first step in a scramble to patch and harden. · Tenable HoldingsIt sells scanners that find weak spots across IT and industrial equipment, which is the first step of hunting through old systems., QualysIt scans for weak spots and helps push fixes, matching the find-it-and-patch-it rush that follows attack news., Rapid7It does scanning plus hands-on incident response, getting paid both before and after attacks land.21%
- When an attack lands, organizations pay first to get systems and data back online. · RubrikIt sells backup built to survive ransomware and get systems running again, which hospitals and cities need after an attack lands., Commvault SystemsIt is the long-standing enterprise backup vendor that helps organizations restore copies of data after attacks., NetAppIt stores data with ransomware defenses built in, so customers tend to upgrade storage for safer copies when attacks rise.20%
- Power plants, water systems and factories run on old control systems that AI-driven attackers can find and break fastest. · FortinetIt makes the firewalls that sit between attackers and industrial control systems, so rising infrastructure threats drive demand for upgrades., Rockwell AutomationIt runs equipment on a huge number of old factory lines and now sells security for them, so factory owners can patch their gear., Cisco SystemsIt connects plants and utilities through switches and routers while selling security tools on top, so hardening old networks runs through its products., Honeywell InternationalIt runs control systems inside refineries, plants and buildings, and owners call it to secure and patch old systems after attacks.18%
- Broad security platforms that companies consolidate onto tend to win when security budgets jump across the board. · ZscalerIt is a top security platform that tends to win when security budgets jump across the board., Palo Alto NetworksIt offers a security platform that companies migrate their defenses onto during periods of heightened threat activity., CrowdStrike HoldingsIt protects laptops and servers and is a first call after a breach, so it tends to win when security budgets jump.8%
- Cash10%