Starkhorn social media library

40% — Oracle's share drop as it warned on its AI bet. The AI cloud bill is a board problem now.

2026-07-07/substack-1.png

$145bn — Meta's AI infrastructure spend this year. Even Meta is reselling the excess.

2026-07-07/substack-2.png

83% of CIOs say they'll repatriate some workloads. Almost none fully leave.

2026-07-07/substack-3.png

40% — Oracle's shares fell as it warned on its AI data-centre bet. The AI cloud bill is a board problem now.

2026-07-07/article-header-1.png

$55.7bn — Oracle's AI capex this year, up from $21.2bn. When the cloud bill becomes a board risk.

2026-07-07/article-header-2.png

9% — Meta's stock pop for reselling excess AI compute. The market now rewards cloud cost discipline.

2026-07-07/article-header-3.png

30 security vendors sat the MITRE ATT&CK Enterprise evaluation in 2023, then 19 vendors in 2024, then 11 vendors in 2025. Microsoft, SentinelOne and Palo Alto Networks publicly pulled out of the 2025 round, and MITRE has not said who is sitting the 2026 one.

2026-09-19/li-post5.png

Budgeting for autonomous AI as a headcount reduction gets the equation backwards, and the company making that argument sells the software. The piece ran in CIO.com on 17 September under the byline of ServiceNow's chief innovation officer, so it is a vendor's view, and the vendor is arguing against its own sales pitch.

2026-09-19/li-post4.png

Two technology suppliers changed hands last week, one for £785m and one for a price nobody published. Softcat plc agreed to buy GDT, a Dallas reseller with around 700 enterprise customers, at an enterprise value its filing gives as $1.05bn, or £785m at the filing's rate, and in Montreal a private equity group sold MSP Corp, built through five acquisitions into a managed service provider with more than 2,300 recurring clients, to Niobrara Capital.

2026-09-19/li-post3.png

GitLab has shipped its second critical fix in a month, and the new flaw reads any file on the server from one unauthenticated web request. The flaw scores the maximum ten out of ten on the severity scale, sits in the repository commits API, and was added to CISA's Known Exploited Vulnerabilities catalogue within days of the 14 September disclosure, with probes already seen in the wild.

2026-09-19/li-post2.png

AWS has told its customers that data left in its Bahrain region is not coming back. The status update, reported by Reuters on 15 September, says the damage spanned multiple Availability Zones and exceeded what its regional and multi-AZ services are designed to withstand.

2026-09-19/li-post1.png

If every copy of something sits with one provider, you have one copy.

2026-09-19/li-post6.png

A ransomware attack does not send you an invoice. It sends you a quarter you did not plan for.

2026-07-18/li-post5.png

Microsoft shipped fixes for 622 vulnerabilities in a single update this month. A record. Two of them, according to the security press, were

2026-07-18/li-post4.png

An AI agent has run a ransomware attack from start to finish. Break in, move through the network, encrypt. No human at the keyboard for the

2026-07-18/li-post3.png

Your next cyber insurance renewal is not a form. It is an underwriting exam, and the examiner has read the same 2026 data you have.

2026-07-18/li-post2.png

Ransomware stopped being an IT problem the moment it started setting the price of your insurance renewal, your next acquisition, and your bo

2026-07-18/li-post1.png

The most expensive 100 days in a deal are the ones with nobody owning technology.

2026-07-11/li-post5.png

Global M&A is up 41%. The technology diligence hasn't kept pace.

2026-07-11/li-post4.png

By the time you open the data room, it's too late to fix what the buyer marks down.

2026-07-11/li-post3.png

The most expensive technology decisions on your books are the ones nobody is accountable for. AI just made them bigger.

2026-07-07/li-post5.png

The thing missing from most deals isn't budget. It's the mandate.

2026-07-11/li-post2.png

Oracle and Meta have just made cloud cost a boardroom word. Four questions settle most of the decision.

2026-07-07/li-post4.png

Your AI pilot works. That isn't the same as making money.

2026-07-11/li-post1.png

'83% of companies are leaving the cloud' is the most misread statistic in enterprise technology this year.

2026-07-07/li-post3.png

Meta's share price recently jumped 9% on a surprising admission: it over-bought AI compute.

2026-07-07/li-post2.png

Oracle used its latest annual report to warn investors of every way its AI bet could blow up.

2026-07-07/li-post1.png

Gartner has revised its 2026 global IT spending forecast upward three times this year.

2026-07-25/li-post1.png

Most conversations about IT spend start with the wrong question: "is this too much?"

2026-07-25/li-post2.png

If you want to know who owns your IT budget, ask this: can anyone explain a specific line item's variance without escalating to the CIO firs

2026-07-25/li-post3.png

AI didn't create the IT budget visibility gap. It's just the newest thing exposing one that already existed.

2026-07-25/li-post4.png

A board approves a technology budget once a year. Usually one number. Usually after a short discussion about whether it is higher than last

2026-07-25/li-post5.png

Nearly a quarter of finance leaders can't say who'd be accountable if an AI agent got something wrong.

2026-08-01/li-post1.png

14,000 UK charities have been locked out of online banking since 24 July, with no restoration date.

2026-08-01/li-post2.png

The average data breach now costs $4.99m. The median UK business puts its worst breach of the year at £0.

2026-08-01/li-post3.png

Two AI-security startups were bought in the same week, and any shortlist in that category is now out of date.

2026-08-01/li-post4.png

Half of generative AI projects were abandoned after proof of concept last year.

2026-08-01/li-post5.png

Something small for Monday morning, if you want one.

2026-08-01/li-post6.png

When you buy an AI platform now, you increasingly buy people with it.

2026-08-08/li-post1.png

Amgen's breach didn't happen on Amgen's systems.

2026-08-08/li-post2.png

Over 40% of enterprises say an AI incident cost them $2 million or more last year.

2026-08-08/li-post3.png

26,000 technology jobs went in July, and unemployment among IT professionals fell.

2026-08-08/li-post4.png

If your business gets bought or bolted onto something else this half, you inherit the integration.

2026-08-08/li-post5.png

One line worth writing down before any vendor starts building something for you.

2026-08-08/li-post6.png

Cutting a role on an AI promise is a bet. Almost nobody prices the downside.

2026-08-15/li-post1.png

71% of security leaders spend more than ten hours preparing for a single board meeting.

2026-08-15/li-post2.png

Under 5% of enterprise applications carried a task-specific AI agent last year. Gartner expects 40% by the end of this one.

2026-08-15/li-post3.png

Most AI budgets are set annually. Token consumption is not.

2026-08-15/li-post4.png

If Workday runs your HR or your finance function, its ownership is in play this week.

2026-08-15/li-post5.png

You start somewhere new and there is already an AI tool running.

2026-08-15/li-post6.png

The Dutch regulator has fined Uber nearly EUR 825 million over driver deactivations it found were fully automated.

2026-08-22/li-post1.png

Your consolidation deck shows how many vendors you removed. It never shows how many of the ones you kept you could actually replace.

2026-08-22/li-post2.png

The GPU price per hour is the least useful number in your AI budget.

2026-08-22/li-post3.png

An AI agent got out of its test environment this month and compromised infrastructure at another company.

2026-08-22/li-post4.png

The AI deadline everyone feared in February came and went, and nobody got fired.

2026-08-22/li-post5.png

Most technology inventories are lists of systems. Very few of them include the automations that act on a person.

2026-08-22/li-post6.png

The Cyber Security and Resilience Bill puts a 24-hour clock on incident notification.

2026-08-29/li-post1.png

Manchester Airports Group put the number of customers affected by its data breach at 8.7 million.

2026-08-29/li-post2.png

The Post Office picked its Horizon replacement in May. It is still paying Fujitsu to run Horizon until at least March 2027.

2026-08-29/li-post3.png

Twelve hundred AI agents were meant to be isolated from each other. A package repository introduced them.

2026-08-29/li-post4.png

A small energy generator in the UK was shut down for four days last month after a cyber-attack. Almost nobody had to be told.

2026-08-29/li-post5.png

If I were starting somewhere new on Monday, the first thing I would put in place is not a policy.

2026-08-29/li-post6.png

Most CIO job specs describe the person who last held the job.

2026-09-05/li-post1.png

A migration argument six months later comes down to whichever side has numbers from before it started.

2026-09-05/li-post2.png

BCG says the most common source of M&A value destruction is not the price.

2026-09-05/li-post3.png

"Exercises do not test all parts of the response cycle." That is the NCSC's own wording for a recovery plan nobody has run.

2026-09-05/li-post4.png

Ask your broker what evidence the new £20m enterprise band is being underwritten on.

2026-09-05/li-post5.png

Start Monday with: the one thing that has to be true by Friday, written down before you open anything else.

2026-09-05/li-post6.png

The European Commission did not cut anyone's SAP support bill in July. It changed what a support contract is allowed to lock in.

2026-09-12/li-post1.png

Zeiss started planning its move to SAP's cloud six years ago. Last week the company told Bloomberg the bill had passed €200m and the whole approach was being reversed.

2026-09-12/li-post2.png

80% of the 1,719 people McKinsey surveyed this summer say AI has made them personally more productive. 37% of their organisations can see any of it in profit.

2026-09-12/li-post3.png

14% of UK businesses reviewed the cyber risk from their immediate suppliers last year. 7% looked any further down the chain.

2026-09-12/li-post4.png

"Does the board have sufficient knowledge to make strategic decisions about cyber security?" That question is printed in the NCSC's toolkit for boards, and most UK boards have now seen some version of it.

2026-09-12/li-post5.png

Enterprise software renewal notices dated for the end of the year are landing in inboxes, from Oracle, SAP, Microsoft and the smaller vendors behind them. Until July, a notice like that was an invoice with a signature line.

2026-09-12/li-post6.png