IBM is the casualty. The pattern is a one-way enterprise capex rotation.

Enterprise IT budgets are running a one-way reallocation, and IBM is the cleanest casualty. In the last weeks of June, corporate buyers stopped expanding software infrastructure and started hoarding the physical layer underneath AI: servers, storage, and memory. Software subscriptions are the easiest line item to pause; GPU racks are the hardest, and the firms that already own them set the next price.

Krishna named the mechanism in an investor letter: clients "shifted their quarterly capex spend toward servers, storage, and memory purchases to secure supply-constrained infrastructure ahead of expected price increases." That is a rotation, not a downturn. The same week that punished IBM rewarded the cybersecurity cohort — Palo Alto, Fortinet, Check Point, CrowdStrike, Cloudflare — because AI-driven threats, including Anthropic's reported "Mythos" model, said to be capable of advanced hacking, pulled security capex into the same priority lane as the hardware. Accenture, IBM's consulting rival, and ServiceNow fell with IBM because they live on the software-and-services side of the same divide.

The reusable category: when a supply-constrained input gets repriced, software vendors absorb the pause; hardware vendors absorb the premium. Two reads survive: vendor misread first, demand-weakness second. The cybersecurity cohort's rally rules out the demand read. IBM's z17 mainframe, its flagship server, sat on the wrong side of the line.

A single reallocation moved IBM 25% in a day. The next vendor to misread it pays the same toll.