Bizarre moment at Berkshire's annual meeting spotlights cyber risk🤖

Berkshire’s annual meeting highlighted cyber risk after Greg Abel revealed the first Q&A question was a deepfake of Warren Buffett, underscoring AI-enabled fraud and cybersecurity exposure. Buffett called AI "scary," while Berkshire reiterated cyber as a major enterprise risk. The article also reviewed macro crosscurrents: the Fed held rates at 3.5%-3.75%, core PCE inflation rose to 3.2% y/y, Q1 GDP grew 2.0%, and the S&P 500 hit a new high.

Analysis

The deepfake segment is less about Berkshire-specific optics than a broader signal that cyber risk is moving from an IT expense to a valuation variable. The second-order effect is that firms with large consumer franchises, dense payment flows, or high-trust brands face the steepest incremental cost of defense because the marginal damage from one successful impersonation is reputationally asymmetric. That disproportionately favors security vendors with identity, fraud, and AI-content authentication exposure, while pressuring companies where trust is the product rather than just a support function.

The macro backdrop is still constructive, but the mix is becoming more inflationary and more uneven. Higher energy prices are forcing a “bad inflation / okay growth” regime, which usually helps pricing power and hurts duration-sensitive assets if it persists for more than a couple of prints. The more interesting second-order effect is that consumer and business hard data are holding up while sentiment weakens; that tends to keep earnings estimates resilient longer than macro bears expect, especially for companies that have already slimmed costs and can lever modest revenue growth into outsized EPS.

The complacency angle matters for positioning: cyber shocks rarely build in visible economic data until the event hits, which makes them poor consensus tail-risk candidates but potent volatility catalysts. If a meaningful breach lands at a household-name financial or industrial platform, the market will likely re-rate not just the victim but adjacent peers on perceived control quality, much like how fraud headlines can spread across payment networks and custodians. Berkshire’s emphasis on deepfakes also reinforces that AI is simultaneously a productivity tool and an attack surface, so the market may be underpricing the spend required to secure AI deployments over the next 12-24 months.

Key Decisions for Investors

• Go long CRWD vs short a broad financials basket for 3-6 months: the market is underestimating cyber budget persistence, and a headline-driven breach cycle would expand multiple premium on best-in-class security software while compressing trust-sensitive financials.
• Add BAC as a relative-value hedge only on weakness, not as a directional short: cyber and fraud spending should remain sticky, but the stock is less exposed than pure trust-premium names; use it to balance a long cyber book rather than make a standalone call.
• Use ADP as a barometer long in a defensive labor-quality basket: if hard data keeps outperforming soft data, payroll and HR workflow vendors should hold up; best expressed via a 3-6 month call spread rather than outright stock.
• Consider a pair trade long software-security enablers / short low-margin IT services for 6-12 months: AI rollout increases demand for identity, monitoring, and compliance tooling faster than it increases discretionary consulting spend.
• If energy stays elevated for another 1-2 months, rotate toward names with pricing power and away from long-duration growth; a simple expression is long XLP/XLE relative to unprofitable tech, with tight stops if oil rolls over.