Cybersecurity and AI Chip Stocks Are Soaring, While Software Stocks Are Crashing. Blame IBM.

IBM pre-announced weak Q2 results: revenue +1% to $17.2B vs $17.85B consensus and adjusted EPS $2.27 vs $3.02, sending the stock down as much as 26% and on track for its worst day. Management attributed the miss to clients shifting capex toward servers/storage/memory for supply-constrained infrastructure, supporting AI-adjacent vendors (e.g., Micron +5%, Sandisk +5%) while hurting enterprise software (ServiceNow -4%, Microsoft -1%). IBM also flagged clients pausing cybersecurity spend until they understand the “Mythos” implications, benefiting CrowdStrike and Okta (+10%+) but adding pressure to broader enterprise software sentiment.

Analysis

This read-through is less about IBM and more about budget triage inside CIO spend: infrastructure protection and security are getting funded ahead of workflow/software expansion. That is constructive for names with direct exposure to urgent, non-discretionary risk reduction and capacity bottlenecks, but negative for platform software that depends on broader seat expansion and multi-quarter sales cycles. The immediate market reaction looks exaggerated on the software side, but the mechanism is real if clients are deferring new projects rather than merely shifting timing.

The second-order winner is the component layer behind AI infrastructure, especially memory/storage, because pull-forward buying tends to lengthen lead times and support spot pricing for another quarter or two. That favors MU and SNDK tactically, but the trade is crowded and may already discount a lot of good news; upside is more about duration of tightness than a fresh demand shock. For cyber, CRWD and OKTA benefit from security budgets being protected, and that spend is stickier than generic software because breaches create urgency and board-level approval.

The contrarian risk is that investors are extrapolating one preannouncement into a broad enterprise freeze. If July/August bookings from NOW/MSFT stabilize, the current selloff in software could reverse quickly because deferred spend usually reappears once budgets reset. The key falsifier is whether the next two enterprise IT commentaries confirm lower net-new deal velocity; if not, this is a rotation, not a structural demand impairment.

Key Decisions for Investors

• Long CRWD / short NOW for the next 4-8 weeks: pair captures budget migration toward urgent security spend versus deferred workflow software; target 1.5-2.0x downside capture if software bookings soften again.
• Buy OKTA on any post-gap consolidation, not the first spike: use a 2-3 month horizon; thesis is that identity/security is one of the last enterprise budgets to be cut. Falsify if net retention or RPO commentary weakens in the next print.
• Tactical long MU or SNDK only on pullbacks after the initial gap-up: this is a 1-2 quarter trade on supply tightness and capex pull-forward, but avoid chasing because the names are already momentum-owned.
• Underweight/short NOW into relief rallies if enterprise spend commentary stays cautious: risk/reward improves if management follows IBM with slower deal closure or longer sales cycles; cover if billings or cRPO re-accelerate.
• Set an alert on MSFT and NOW next earnings for booking deceleration vs. stable guidance: if they hold up, the software selloff is likely overdone and the pair-trade should be reduced.