jain.com — data centers, connectivity and security, analyzed daily

Author: Deepak Jain

  • Corero Adds AI Cloud-Assist to SmartWall ONE as DDoS Attacks Go Automated

    Corero Adds AI Cloud-Assist to SmartWall ONE as DDoS Attacks Go Automated

    Corero Network Security (AIM: CNS; OTCQX: DDOSF), the London-headquartered DDoS protection specialist, announced AI-Augmented Cloud-Assist for its SmartWall ONE platform on August 20, 2026. The new capability layers cloud-delivered AI analysis, threat intelligence, and policy optimization on top of Corero’s existing on-premises, edge-based DDoS mitigation.

    The system analyzes attack telemetry in Corero’s cloud, recommends new protection policies that can be applied manually or automatically in seconds, and keeps Corero’s security experts in an oversight role. It targets AI data centers, NeoCloud providers, service providers, and digital enterprises.

    Executive Summary

    The announcement is Corero’s answer to a problem the whole DDoS defense industry is wrestling with: attackers are using AI to develop and evolve attack campaigns faster than human security teams can write countermeasures. Corero’s proposed remedy is a continuous intelligence loop — on-premises SmartWall ONE appliances at the network edge feed attack telemetry and forensic data to Corero’s cloud, where AI identifies emerging attack behaviors and generates recommended protection policies, which flow back to the edge devices with human experts supervising the loop.

    Why it matters: a distributed denial of service (DDoS) attack floods a network or service with junk traffic until legitimate users cannot get through, and mitigation speed is measured in seconds, not hours. If cloud-scale AI can genuinely shorten the gap between a novel attack pattern appearing and an effective policy being deployed, that is a meaningful operational improvement — particularly for AI data centers and cloud GPU providers (so-called NeoClouds) whose expensive workloads make downtime costly. The release, however, offers no benchmarks, pricing, availability dates, or named customers, so the launch is best read as a directional architecture statement rather than a proven result.

    Fighting Automation With Automation

    The premise of the launch is an arms-race argument: as attackers use AI to mutate DDoS campaigns mid-attack, defenses that depend on humans hand-tuning mitigation policies fall behind. Corero frames AI Cloud-Assist as restoring symmetry — machine-generated attacks met with machine-generated countermeasures, applied “in seconds.” That framing is consistent with where the broader security industry is heading, and the underlying logic is sound: policy generation is the slow, human-bottlenecked step in DDoS response, so it is the rational place to apply AI.

    What the release does not provide is evidence of the improvement. There are no response-time figures, detection-accuracy comparisons, or before-and-after case studies. “Reduce response times, improve protection accuracy, and strengthen operational efficiency” are the intended outcomes, not measured ones. Buyers evaluating the claim will need to ask for data the release does not contain.

    The Hybrid Architecture: Cloud Brains, Edge Muscle, Human Oversight

    The design choice worth noting is what Corero did not do: it did not move mitigation to the cloud. Traffic scrubbing stays on the on-premises SmartWall ONE appliances at the network edge — close to the applications and AI workloads being protected — which preserves low latency, while the computationally heavy analysis moves to the cloud where scale is cheap. This is a sensible division of labor, and it plays to Corero’s installed base: the AI works from SmartWall ONE’s existing telemetry and forensic data rather than requiring a new sensor footprint.

    Equally deliberate is keeping humans in the loop. Recommendations can be applied automatically or manually, with Corero’s security experts providing oversight. That addresses the real operational fear about AI-driven security — a false positive that auto-deploys a policy blocking legitimate customer traffic is itself a denial of service. The trade-off is that human oversight reintroduces some of the latency the automation was meant to eliminate; how customers tune that dial will determine how much of the promised speed they actually realize.

    Reading the Target Market: AI Data Centers and NeoClouds

    Corero names its target buyers explicitly: AI data centers, NeoCloud providers (the newer class of specialized GPU cloud operators), service providers, and digital enterprises. That ordering tells a market story. AI infrastructure operators run revenue-dense, latency-sensitive workloads and are attractive DDoS targets precisely because their downtime is expensive and visible. Positioning a DDoS product launch around them signals where Corero sees growth — and follows its recent momentum with infrastructure operators, including the deal in which its technology powers TierPoint’s Adapt DDoS protection service.

    Competitively, Corero claims the capability “is largely missing in most DDoS solutions.” That is a contestable assertion in a market where large cloud-delivered DDoS providers also advertise machine learning and automated mitigation. Corero’s genuine differentiation argument is narrower and more defensible: combining cloud AI with on-premises edge mitigation and the forensic-grade telemetry its appliances already collect. The release asserts the broader claim without a competitive comparison, so readers should treat the “largely missing elsewhere” framing as positioning rather than established fact.

    What Is Substantiated — and What Is Not

    Substantiated by the release: the product exists as an announced extension of SmartWall ONE; it uses cloud-based AI analysis of attack telemetry; recommendations can be applied manually or automatically; human experts oversee the loop; and it targets edge mitigation for AI-era infrastructure. Unsubstantiated as yet: any quantified performance gain, the nature of the AI models involved, general availability timing, pricing, and customer adoption. None of this is unusual for a product launch release, but the gap between the confident claim that “this is the future of DDoS protection” and the absence of measurable evidence is exactly the space a prospective buyer’s proof-of-concept should fill.

    Background

    Corero Network Security has spent years as a pure-play DDoS specialist, selling automatic detection and mitigation for complex edge and subscriber environments — the kind of always-on, real-time protection that internet service providers and hosting operators embed in their networks. The company is dual-listed on London’s AIM market and the US OTCQX, with operational centers in Massachusetts and Edinburgh.

    The launch continues a run of activity for the company: Corero was recently recognized as a leader and innovator in the 2026 DDoS SPARK Matrix vendor assessment, and its technology powers TierPoint’s new Adapt DDoS protection service — evidence of its strategy of reaching enterprises through infrastructure and service-provider partners. AI Cloud-Assist extends that installed edge footprint with a cloud intelligence layer rather than replacing it.

    Source: Corero Network Security Launches AI-Augmented Cloud-Assist for SmartWall ONE™ — PR Newswire release, August 20, 2026, announcing cloud-delivered AI analysis and policy optimization for Corero’s edge-based DDoS protection platform.

  • Skanska Signs $1.2B Deal to Build Four Data Centers in the Southeast US

    Skanska Signs $1.2B Deal to Build Four Data Centers in the Southeast US

    Swedish construction group Skanska announced on August 20, 2026 that it has signed a contract with an existing client to build four new data centers in the southeast United States. The contract is worth USD 1.2 billion (about SEK 11.2 billion) and will be booked in Skanska’s US order bookings for the third quarter of 2026.

    The four facilities total approximately 75,000 square meters (808,000 square feet). Skanska’s scope covers the building shell plus interior fit-out for technical spaces, support areas, and offices. Construction begins in the third quarter of 2026 and is expected to finish in the third quarter of 2028.

    Executive Summary

    Skanska’s announcement is short on specifics — the client, the exact locations, and the facilities’ power capacity are all undisclosed — but the headline numbers tell a clear story: a single customer is committing to four buildings at once, worth $1.2 billion in construction value alone, on a two-year delivery clock. That is a program, not a project, and it reflects how hyperscale and large-enterprise data center buyers now procure capacity in multi-site batches rather than one building at a time.

    The deal also reinforces the southeast US as a serious data center growth corridor. As land, power interconnection queues, and community pushback tighten conditions in established hubs like Northern Virginia, developers have increasingly looked south for available land, comparatively faster utility timelines, and business-friendly permitting. A four-facility award in the region — from a repeat client, no less — suggests that migration of demand is continuing.

    For the construction industry, the contract underscores that data centers have become a core revenue engine for major contractors. Skanska separately announced an additional $238 million data center contract in Virginia, indicating a pipeline of repeat data center work across multiple US regions.

    A Program Buy, Not a Building Buy

    The most telling detail in this release is not the dollar figure but the structure: one client, four facilities, one contract. Data center customers with large, predictable capacity needs — typically cloud platforms, AI companies, or the developers who serve them — increasingly bundle construction into multi-site programs. Bundling locks in contractor capacity, standardizes designs across sites, and compresses delivery schedules, all of which matter when the constraint on growth is how fast physical capacity can be stood up rather than how much capital is available.

    The ‘existing client’ framing matters too. Repeat awards are how construction firms build durable data center franchises: a contractor that has already delivered for a customer carries proven designs, familiar subcontractor networks, and established safety and quality track records into the next award. For Skanska, converting one relationship into a four-building, $1.2 billion follow-on is evidence that this flywheel is working — though it also concentrates revenue exposure in a single customer relationship, a tradeoff worth noting.

    Why the Southeast, and What It Strains

    The southeast US has become one of the fastest-growing data center regions because the traditional hubs are congested. Northern Virginia — the world’s largest data center market — faces multi-year waits for grid interconnection (the process of getting a utility to deliver large blocks of power to a new site), rising land costs, and local zoning battles. States across the southeast have courted the industry with available land, tax incentives, and utilities willing to plan for large new loads.

    But four facilities landing at once in one region illustrates the strain this growth creates. Data centers are extraordinarily power-dense buildings, and every new campus adds load that regional utilities must generate, transmit, and balance. Meanwhile, the specialized trades that data center construction depends on — electricians, mechanical fitters, controls technicians — are in short supply nationally, and the southeast’s simultaneous boom in chip plants, battery factories, and other industrial projects competes for the same workers. The release does not say how these projects will be powered or staffed, and those are precisely the variables that determine whether a Q3 2028 completion date holds.

    The Economics of Shell and Fit-Out

    Skanska’s scope — shell construction plus interior fit-out of technical, support, and office spaces — works out to roughly $300 million per building, or on the order of $1,500 per square foot across the 808,000-square-foot program based on the disclosed figures. That is far above typical commercial construction costs, which reflects what a data center actually is: the building is effectively a machine, dense with structural, electrical, and mechanical infrastructure long before any servers arrive. It is worth remembering that construction cost is only one layer of total project cost; the IT equipment the eventual owner installs typically represents a further large investment not captured in a construction contract.

    For Skanska, the award lands in Q3 2026 order bookings, giving investors a concrete signal about the health of its US commercial pipeline. For the broader market, it is one more data point that data center construction spending remains robust — a useful counterweight to periodic debate about whether AI-driven infrastructure investment is decelerating. One contract cannot settle that debate, but a repeat client committing to four buildings through 2028 is not the behavior of a customer pulling back.

    Background

    Skanska, founded in Sweden and headquartered in Stockholm, is one of the world’s largest construction and development companies, with the United States among its most important markets. Data centers have become a growing line of business for major contractors as cloud and AI operators race to add physical capacity; alongside this award, Skanska announced a further $238 million data center contract in Virginia and a $957 million light rail contract in California, illustrating the breadth of its US order book.

    The US data center market has historically concentrated in hubs like Northern Virginia, but constraints on power, land, and permitting there have pushed a growing share of new development into the southeast, where utilities and state governments have actively courted the industry. Multi-building, single-client construction programs like this one have become a hallmark of how hyperscale capacity is now procured.

    Source: Skanska builds data centers in southeast USA worth USD 1.2 billion, about SEK 11.2 billion — Skanska press release via PR Newswire, August 20, 2026, announcing a four-facility data center construction contract with an existing client.

  • Vectris Claims Up to 73% More AI Throughput From GPUs Already Deployed

    Vectris Claims Up to 73% More AI Throughput From GPUs Already Deployed

    Vectris Labs, a Birmingham, Alabama startup incubated by Thumos Capital, announced on August 20, 2026 that its Waveform software — a “control plane” that sits between AI serving infrastructure and the GPU — recovered substantial unused capacity from GPUs already in production racks. In company-run tests of Mistral inference workloads on RunPod-hosted NVIDIA hardware, Vectris measured 30–73% higher throughput, 51–56% lower energy consumption, and 22–42% faster job completion, with no model retraining, weight changes, or GPU-kernel modifications.

    Waveform launches October 1, 2026 to a limited set of design partners. The results are Vectris-measured and, by the company’s own disclosure, have not yet been independently reproduced in customer production.

    Executive Summary

    The announcement reframes the AI capacity crunch — the industry-wide shortage of GPUs, data-center space, and grid power — as partly a software-efficiency problem. Vectris claims to have found “deterministic structural patterns” in AI inference (the process of running a trained model to answer queries) that reveal where deployed GPUs are wasting cycles, and to have built software that captures that waste as productive output. The company brands the resulting metric Compute Yield™: how much quality-equivalent, accepted AI output an operator gets from infrastructure already in place.

    If the numbers hold up outside Vectris’ own testing, the implications are significant. At even the conservative +30% end of its measured range, the company illustrates that a 10,000-GPU fleet would produce output comparable to 13,000 GPUs — capacity gained without new hardware, new power contracts, or new construction. Vectris is explicit that this is an extrapolation, not a measured deployment.

    The caveats matter as much as the headline. The figures come from one model family (Mistral), one hosting environment (RunPod), and one measuring party (Vectris itself). The release is unusually candid about those limits, which is to its credit — but it also means the claim currently rests entirely on vendor-run benchmarks awaiting independent reproduction.

    Efficiency Is the New Front in the AI Capacity War

    For three years, the dominant response to surging AI demand has been construction: more GPUs, more data centers, more megawatts. But power availability, capital intensity, and build timelines have become structural constraints — a data center can take years to energize, while inference demand compounds monthly. That makes software that extracts more work from installed hardware strategically interesting regardless of which vendor ultimately delivers it. Vectris’ framing — that the binding economic question is shifting from “how many GPUs can you deploy?” to “how much useful output can deployed GPUs produce?” — is a fair description of where operator economics are heading, and it explains why the company says it has engaged a data-center advisory network representing roughly 300 MW of capacity.

    The energy numbers may be the most consequential part of the claim for infrastructure operators. A 51–56% reduction in energy per unit of inference work, if reproducible, would ease the single tightest constraint in the industry — grid power — and change the calculus on every pending interconnection queue. That is precisely why the figure deserves the most scrutiny before anyone builds plans around it.

    What’s Substantiated — and What Isn’t

    The release is more disciplined than most in this category. It names the hardware (H100, H200, B200 on third-party RunPod infrastructure), the workload (Mistral inference), publishes per-GPU figures rather than a single cherry-picked number, labels the 10,000-GPU example as illustrative, and states plainly that results “have not yet been independently reproduced in customer production.” On Intel silicon, Vectris cites 67% energy savings and 32% faster time-to-result using MLPerf LoadGen, a recognized benchmark harness. AMD hardware has been “tested,” but no numbers are given.

    What remains unsubstantiated is the core of the claim. The release does not describe the baseline configuration Waveform was compared against — a critical omission, because inference throughput varies enormously with batching strategy, serving stack, and tuning. A 73% gain over a poorly tuned baseline is a very different achievement than 73% over a well-optimized production stack. Vectris says Waveform targets waste “that remains after conventional optimization,” but offers no detail on what conventional optimization was applied. Nor does it explain the mechanism: “deterministic structural patterns” is evocative but not technical, and “quality-equivalent accepted output” — the foundation of the Compute Yield metric — is not defined in measurable terms. None of this means the claims are wrong; it means they are, for now, claims.

    Winners, Losers, and the Demand Question

    If Waveform performs as described, the clearest winners are inference-heavy operators who are power- or capital-constrained: neoclouds, enterprise AI platforms, and colocation tenants who could defer hardware purchases while serving more demand. Data-center operators face a more nuanced picture — efficiency software could modestly slow demand for new capacity, but historically, cheaper compute has expanded consumption rather than shrinking footprints, a dynamic economists call the Jevons effect. GPU vendors face the same ambiguity: software that makes an H100 do 30–73% more work makes existing fleets more valuable even as it potentially trims marginal unit demand.

    Vectris also enters a genuinely crowded field. Inference optimization is one of the most active areas in AI infrastructure — serving frameworks, compilers, schedulers, and quantization techniques all chase the same waste. Vectris positions Waveform as complementary, a layer above the optimized stack rather than a replacement for it. Whether meaningful recoverable capacity really persists after state-of-the-art serving optimizations is exactly the question independent testing needs to answer.

    From Benchmark to Business

    The commercial plan is early-stage: an October 1, 2026 launch limited to design partners, technical demonstrations with unnamed “AI-infrastructure and channel leaders,” and no disclosed pricing, customers, or funding. The team’s stated pedigree — backgrounds spanning AMD, Graphcore, Oracle Cloud Infrastructure, ByteDance, the U.S. Department of Energy, and Oak Ridge National Laboratory — is relevant to credibility on low-level GPU behavior, but pedigree is not production validation. The supporting quote from Innovate Alabama Chairman Bill Poole speaks to regional economic-development enthusiasm rather than technical endorsement, and the release’s own disclosure notes that third-party names do not imply endorsement. The sensible read: a credible team making a large, testable claim that the market should now test.

    Background

    Vectris Labs is a newly announced entrant in AI infrastructure software, based in Birmingham, Alabama and incubated by venture firm Thumos Capital — a notable geography in an industry concentrated in traditional tech hubs, and one the release leans into with a supporting quote from Innovate Alabama Chairman Bill Poole. The company says it has completed technical demonstrations with AI-infrastructure and channel leaders and engaged a data-center advisory network representing roughly 300 MW of capacity.

    The market context is the defining tension of the current AI buildout: inference — serving trained models to end users — is becoming the dominant AI workload, while power availability and capital costs constrain how fast new GPU capacity can come online. That squeeze has pushed the industry’s attention toward yield: getting more accepted output per deployed GPU, per megawatt, and per dollar, which is precisely the territory Vectris is staking out.

    Source: Vectris Discovers Recoverable AI Compute Capacity Inside Deployed GPUs, Demonstrating Up to 73% More Productive Capacity — Vectris Labs press release via PR Newswire, August 20, 2026, announcing the Waveform control plane and company-measured GPU efficiency results.

  • The Unverifiable-Claims Problem Isn’t Advertising’s Alone. It’s Infrastructure’s.

    The Unverifiable-Claims Problem Isn’t Advertising’s Alone. It’s Infrastructure’s.

    Pesach Lattin, who writes the advertising newsletter ADOTAT, recently made an argument that deserves a wider audience than the ad industry it was aimed at. Borrowing from the philosopher Harry Frankfurt’s essay On Bullshit, he draws a distinction that matters: a liar knows the truth and conceals it, while a bullshitter simply doesn’t care whether what he says is true. Lattin’s claim is that the advertising business is mostly doing the second thing about AI — making confident, unverifiable assertions with an apparent indifference to whether they hold up. He says he reviewed six months of conference talks and found four claims that were actually checkable.

    I run an infrastructure company, not an ad agency. And reading it, I recognized the pattern immediately — because the same epistemics now govern how artificial intelligence gets sold one layer down, in the data centers, networks, and compute that everything else is built on.

    The tell is verifiability, not sincerity

    The useful part of Frankfurt’s framing is that it takes the argument away from intent. You do not have to decide whether a vendor is honest. You only have to ask a colder question: is this claim the kind of thing I could check? Most of the loudest statements in AI infrastructure marketing are not.

    “AI-optimized” is not a specification. “Cloud-scale” is not a number. “Enterprise-grade reliability” is not an SLA. A GPU cloud that advertises a headline price per hour has told you almost nothing until you know the utilization you can actually achieve, the queue times at your scale, the egress charges, and whether the accelerators you were sold are the ones you get. A data center that markets a power-usage-effectiveness figure has told you something real only if it says whether that number is a design target or a measured annual average, at what load, in what climate. The gap between those two readings is where a year of operating budget hides.

    The one uncontested number

    Lattin points out that in his world, exactly one figure goes uncontested: the collapse in referral traffic as AI answer engines absorb the clicks that used to reach publishers — reductions he puts in the range of 20 to 90 percent. It is uncontested precisely because it is measurable. Everyone can see their own analytics.

    Infrastructure has its own version of the uncontested number, and it is the electricity bill. You can argue about a model’s benchmark scores; you cannot argue with a utility invoice or a substation’s interconnection queue. This is why the most honest conversations in our industry right now are the ones about power and cooling. Megawatts do not bullshit. A grid operator’s capacity map is the least performative document in the AI economy, and it is quietly setting the ceiling on all of the confident projections layered above it.

    A working buyer’s test

    None of this is a case for cynicism. The technology is real, and the demand is real. The point is narrower and more practical: when someone sells you AI infrastructure, sort every claim into two piles before you sort it into true or false.

    • Testable now: Can it be written into a contract with a number and a penalty? Latency percentiles, delivered throughput, measured PUE over a defined period, uptime with real credits, a fixed price with the egress spelled out. Ask for the measurement method, not the headline.
    • Testable later: Can you run a bounded pilot that produces your own data — a parallel workload, a real month of your traffic — rather than the vendor’s reference benchmark? Insist on it before the multi-year commitment, not after.
    • Not testable: Adjectives, roadmaps, and transformation narratives. These are not lies. They are simply not evidence, and they should carry the weight of things that are not evidence.

    The vendors worth working with will not flinch at this. In my experience, the willingness to be measured is the single most reliable signal of whether a claim was meant to be true or merely meant to be said. The ones who lead with the utility bill, the SLA, and the pilot are telling you something. So are the ones who change the subject to the future.

    Lattin’s essay is about advertising, and it is worth reading on its own terms. But its real subject is a habit of mind that has spread well past his industry. The infrastructure layer is the last place that habit can safely live, because down here the claims eventually meet a power meter, a thermal limit, and a bill. Ask for the number. If there isn’t one, you have your answer.

    Source and inspiration: Pesach Lattin, “Nobody Is Lying to You About AI. Almost Nobody Is Telling You the Truth Either,” ADOTAT.

  • Cloudforce Doubles Maryland HQ, Pledging 250 New Jobs in AI Platform Expansion

    Cloudforce Doubles Maryland HQ, Pledging 250 New Jobs in AI Platform Expansion

    Maryland Governor Wes Moore announced on August 12, 2026 that AI platform company Cloudforce will expand its headquarters at National Harbor in Prince George’s County, leasing an additional 15,000 square feet of office space — roughly doubling its footprint — while retaining more than 130 employees and committing to add 250 new Maryland jobs over the next five years.

    To support the project, Cloudforce is eligible for a $1.25 million conditional loan through the state’s Advantage Maryland program, a $125,000 conditional loan from the Prince George’s County Economic Development Corporation, and potentially state and local tax credits including the Job Creation Tax Credit.

    Executive Summary

    Cloudforce, which grew from a Microsoft cloud consultancy into what the release calls a “frontier AI platform company,” says it evaluated expansion sites across the DC-Metro region before choosing to stay in Maryland. Its flagship product, nebulaONE, gives universities and public-sector organizations governed access to leading AI models — meaning institutions can offer students and staff AI tools inside a controlled, private environment rather than sending them to open consumer services. Named customers include the University of Maryland, UCLA, London Business School, and the University of Oxford, and Cloudforce was Microsoft’s 2025 global Education Partner of the Year.

    The announcement matters less for its physical scale — this is an office lease, not a data center — than for what it signals: the software layer of the AI boom is creating conventional white-collar jobs in metro markets, and states are competing for those jobs with comparatively small, conditional incentive packages rather than the nine-figure deals attached to AI infrastructure projects. It is also a data point for the growing “governed AI” market serving education and government buyers, a segment defined by security and compliance requirements rather than raw compute.

    An Asset-Light Expansion in an Asset-Heavy Boom

    Most AI expansion headlines in 2026 involve gigawatts, water permits, and construction cranes. This one involves 15,000 square feet of office space — a useful reminder that the AI economy has two very different layers. Cloudforce sits in the platform layer: it does not build or operate the underlying compute, but packages access to models running on hyperscaler infrastructure (its roots are as a Microsoft cloud specialist) into a product institutions can govern and audit. That business scales with headcount in sales, engineering, and customer success rather than with land and power, which is why its expansion looks like a traditional corporate office deal.

    For economic developers, that trade-off cuts both ways. An office expansion of this kind promises far more jobs per dollar of incentive than a data center, and jobs of a different character — the release emphasizes career pathways for interns, Service Year members, and recent graduates. On the other hand, an office lease is inherently more portable than a substation-anchored campus. The retention framing in the release — Cloudforce says it had “every option on the table, including markets across state lines” — makes clear Maryland was competing to keep a company that could plausibly have moved.

    The Governed-AI Niche in Higher Education

    nebulaONE’s pitch, as described in the release, is “private, secure, and equitable AI access at scale” — governed access to leading models and agentic workflows (AI systems that can carry out multi-step tasks, not just answer questions). For universities, the appeal is concrete: they face student demand for AI tools, faculty concern about academic integrity and data privacy, and procurement rules that make consumer AI subscriptions awkward. A governed platform lets an institution offer one sanctioned front door to multiple models, with usage policies attached. The customer list — Maryland, UCLA, Oxford, London Business School — and the Microsoft Education Partner of the Year award suggest real traction in that niche.

    The strategic question the release does not address is durability. Cloudforce’s position depends on model providers and hyperscalers continuing to leave room for an intermediary layer. Microsoft, whose ecosystem Cloudforce grew up in, sells its own education-focused AI offerings, and model vendors increasingly court universities directly. Aggregation platforms thrive when the underlying market is fragmented and compliance-heavy — both true today in higher education — but a 250-job, five-year hiring plan is implicitly a bet that this intermediary role persists. That is a reasonable bet, not a guaranteed one.

    What $1.375 Million in Conditional Money Buys

    The incentive package is notably modest: a $1.25 million conditional loan from Advantage Maryland, a $125,000 conditional county loan, and possible eligibility for tax credits such as the Job Creation Tax Credit. Against a promise of 250 jobs, the headline loan math works out to roughly $5,500 per pledged job — a small fraction of what states routinely commit per job for capital-intensive AI infrastructure projects. Conditional loans of this type also typically convert to grants only if hiring milestones are met, which gives the state some downside protection, though the release does not spell out the conditions.

    The honest read is that incentives were probably not decisive. Cloudforce’s stated reasons — technical talent, proximity to universities it both sells to and hires from, and an existing rooted workforce — are the kinds of factors that dominate site selection for a company whose main asset is people. The University of Maryland relationship is particularly interesting: the university is simultaneously a customer, a talent pipeline, and a philanthropic partner. That triple relationship is a genuine competitive moat locally, though it also concentrates a lot of the company’s Maryland story in a single institution.

    A Data Point in the DC-Metro Talent Contest

    Cloudforce says it ran an “extensive analysis of potential expansion sites across the DC-Metro region,” which frames this as a win for Maryland over Virginia and the District in the ongoing regional contest for technology employers. Northern Virginia has dominated the region’s data center buildout; Maryland landing an AI software headquarters plays to a different strength — its university system and federal-adjacent talent pool — and the state clearly intends to market it that way.

    One cultural detail is worth noting for real estate watchers: CEO Husein Sharaf explicitly tied the expansion to “a company culture rooted in bringing our people together in one place.” A software company doubling physical office space in 2026 is a small but real counterpoint to the remote-first assumptions that have weighed on office demand, and a welcome signal for a mixed-use development like National Harbor, whose landlord Peterson Companies was given prominent billing in the announcement.

    Background

    Cloudforce is a Prince George’s County, Maryland company that started as a Microsoft cloud consultancy and repositioned itself around AI platform services as institutional demand for controlled AI access grew. Its nebulaONE product found a niche in higher education, where universities want to give students and staff AI capabilities without surrendering control over data, privacy, and usage policy — traction that earned Cloudforce Microsoft’s global Education Partner of the Year award in 2025.

    The expansion lands amid an intense economic-development contest across the DC-Metro region. While Northern Virginia has captured most of the area’s AI data center investment, Maryland has courted the software and talent side of the AI economy, leaning on its university system and programs like Advantage Maryland, the Department of Commerce’s conditional-loan tool for business expansion and retention.

    Source: Governor Moore Announces Cloudforce Chooses Maryland for Major AI Platform Expansion, Bringing 250 New Jobs to the State — press release from the Office of Maryland Governor Wes Moore, August 12, 2026.

  • Password Spraying Surges 155x as Attackers Slip Through MFA Gaps

    Password Spraying Surges 155x as Attackers Slip Through MFA Gaps

    Security firm Huntress reported a 155x increase in password spraying attacks in the first half of 2026, driven largely by a campaign targeting Microsoft’s Azure CLI that generated more than 81 million login attempts and 78 account compromises in a single two-week window in mid-June. The traffic originated from an IPv6 range operated by hosting provider LSHIY LLC under a bring-your-own-IP arrangement.

    The striking finding: most compromised organizations had multi-factor authentication (MFA) deployed. Attackers succeeded anyway by abusing Resource Owner Password Credentials (ROPC), a legacy OAuth login flow that bypasses MFA prompts entirely.

    Executive Summary

    Password spraying — trying one common password against many accounts, slowly enough to dodge lockout rules — is one of the oldest tricks in the attacker playbook. What Huntress documented in H1 2026 is that trick industrialized: a 155-fold volume increase, with a single campaign against Azure command-line logins producing 81 million attempts in two weeks. The attackers sharpened the technique by recycling valid username-and-password pairs from old breaches that were never rotated, making each attempt far more likely to land than a blind guess.

    The deeper story is not password hygiene but policy scoping. Of 23 affected businesses Huntress analyzed, eight had no MFA at all — but the other 15 did, and were breached anyway because their Conditional Access policies (Microsoft’s rules engine for when to demand MFA) excluded the specific sign-in path the attackers used. The abused path, ROPC, is a deprecated OAuth grant that sends the username and password straight to the token endpoint with no interactive prompt where an MFA challenge could occur.

    For any organization running Microsoft Entra ID — and for the infrastructure providers hosting them — the takeaway is blunt: MFA that is deployed but incompletely scoped provides the feeling of protection without the fact of it.

    MFA You Bought Isn’t MFA You’re Getting

    The most commercially significant number in the Huntress data is not the 155x surge — it is that 15 of 23 breached organizations had MFA deployed and it simply did not apply to the attack. Their Conditional Access policies were limited to certain applications or user groups, trusted ‘safe’ network locations, or sat in report-only mode, a testing setting that logs violations without blocking them. Each of those is a reasonable-sounding operational compromise, usually made to avoid locking out legitimate users or breaking a line-of-business app.

    This reframes the identity-security market. The gap is no longer ‘do you have MFA?’ — adoption is widespread — but ‘can you prove every authentication path enforces it?’ That favors vendors and managed service providers selling policy auditing, attack-path validation, and identity posture management over those selling MFA seats. It also shifts liability conversations: an organization that attests to having MFA for cyber-insurance purposes, while ROPC sits unprotected, may find that attestation contested after a breach.

    ROPC: The Legacy Door That Skips the Guard

    Resource Owner Password Credentials is an OAuth grant designed years ago as a migration bridge: it lets an application collect a username and password directly and exchange them for an access token, with no interactive login screen. No login screen means no place to insert an MFA prompt. The grant is deprecated in OAuth 2.1, yet it remains available in many Microsoft Entra tenants — often because some old script or application still depends on it, and nobody wants to be the person who breaks it.

    That is the economics of legacy authentication in miniature. The cost of leaving ROPC enabled is invisible until an incident; the cost of disabling it is an immediate, attributable helpdesk headache. Attackers systematically arbitrage that asymmetry. As Huntress’s Andrew Brandt put it, ROPC is technically ‘an impersonation method’ — a reused password that still works becomes an active session, no second factor required.

    BYOIP and IPv6 Turn Blocking Into Whack-a-Mole

    The campaign’s infrastructure choices matter as much as its authentication trick, and they land squarely on the hosting industry. The attackers used a bring-your-own-IP (BYOIP) service — a legitimate offering that lets a hosting customer route traffic through a provider using address space the customer owns. When LSHIY terminated the activity, the spraying resurfaced from FranTech-hosted IPv6 ranges, then from 3xK Tech on IPv4. Combine provider-hopping with IPv6’s effectively unlimited address pool and IP-based blocklists become a losing game: defenders block a range, attackers announce a new one.

    For hosting and connectivity providers, this is a growing abuse-desk and reputation problem. BYOIP customers bring their own address space and, with it, their own history — providers that vet BYOIP onboarding lightly are effectively renting their network’s reputation to whoever shows up. Expect pressure, commercial if not regulatory, for stronger BYOIP due diligence and faster abuse response as these campaigns keep routing through legitimate infrastructure.

    81 Million Attempts, Zero Follow-Through — and Why That’s Ominous

    Huntress observed no post-compromise activity after the successful logins — no lateral movement, no data theft. Their assessment is that the operators were likely validating credentials for resale on dark-web markets. That points to a maturing supply chain: one group industrializes the guessing, verifies which credentials actually work, and sells confirmed access to others who specialize in monetization through business email compromise or ransomware.

    The practical consequence for defenders is counterintuitive, and Huntress states it directly: do not prioritize response by spray volume. The most heavily sprayed tenants were often the least compromised. The right triage signal is credential validity — whether any attempt actually succeeded — not how much noise the attacker made. A quiet, successful login against a stale account is worth more attention than a million failures.

    Background

    Password spraying has been a staple of credential attacks for over a decade precisely because it exploits policy, not software: lockout rules watch for many failures on one account, while spraying spreads failures thinly across many. Its effectiveness has been amplified by the steady accumulation of breach dumps — billions of real username-and-password pairs that attackers replay against organizations where rotation never happened. Meanwhile, the industry’s answer, multi-factor authentication, has gone from rarity to near-mandate, pushed by cyber insurers and frameworks alike.

    The unresolved seam between those two trends is legacy authentication. Protocols and grants that predate MFA — ROPC among them — persist inside cloud identity platforms like Microsoft Entra ID for backward compatibility, and each one is a path where a password alone still suffices. Campaigns like the one Huntress documented are best understood as the market discovering, at industrial scale, exactly where those seams are.

    Source: Password spraying attacks surge 155x as hackers exploit MFA gaps — a BleepingComputer article, sponsored and written by Huntress Labs, detailing the H1 2026 password-spraying surge and the LSHIY campaign against Azure CLI logins.

  • Study: Data Centers Raise Nearby Phoenix Temperatures by Up to 4 Degrees

    Study: Data Centers Raise Nearby Phoenix Temperatures by Up to 4 Degrees

    A peer-reviewed study published in ASME’s Journal of Engineering for Sustainable Buildings and Cities (Vol. 7, Issue 2) reports that data centers raise temperatures in their surrounding areas by up to 4 degrees in Phoenix, Arizona — one of the largest and fastest-growing data center markets in the United States.

    The research, which frames data center waste heat as an emerging urban heat source, drew broad attention on August 19, 2026, when it reached the Hacker News front page with 267 points and more than 375 comments — a signal that the industry itself is taking the question seriously.

    Executive Summary

    The finding is simple to state and hard to dismiss: the electricity a data center consumes does not disappear. Nearly all of it becomes heat, and cooling systems must eject that heat into the surrounding air. In a dense cluster of facilities, that ejected heat measurably warms the neighborhood — by as much as 4 degrees, according to this study of Phoenix.

    Why it matters: Phoenix is both a top-tier data center hub and the hottest major city in America, where summer heat is already a public-health and grid-reliability issue. A peer-reviewed number linking data centers to local warming gives residents, city councils, and regulators something they have not had before — citable evidence. Expect it to surface in zoning hearings, permitting conditions, and community-benefit negotiations well beyond Arizona.

    For operators and their customers, the study reframes waste heat from an engineering afterthought into a siting externality alongside power draw, water use, and noise — one that will increasingly shape where and how new capacity gets built.

    Heat Is the New Noise: An Externality Goes on the Record

    Data center opposition has historically centered on three complaints: power consumption, water use, and the low-frequency hum of cooling plants. Localized warming now joins that list with something the others took years to acquire — a peer-reviewed citation. Once a measurable external cost is published in an engineering journal, it tends to migrate into environmental-impact reviews, zoning board testimony, and eventually permit conditions. That is how noise limits and water-reporting requirements became standard, and waste heat is positioned to follow the same path.

    The practical consequence is that thermal impact modeling may become part of the pre-construction diligence package. Developers who can show — with sensors and models, not assurances — that a facility’s heat plume will not worsen conditions for adjacent neighborhoods will move through approvals faster than those who cannot. In a market where time-to-power already decides deals, an avoidable six-month permitting fight over heat is real money.

    Why Phoenix Is the Stress Test for the Whole Industry

    Phoenix became a data center magnet for rational reasons: comparatively cheap land, available power, low natural-disaster risk, and proximity to California customers without California costs. But the same desert climate that makes the land cheap makes cooling expensive and makes every added degree socially costly. Extreme heat is already the region’s deadliest weather phenomenon, so a study saying nearby temperatures rise by up to 4 degrees lands very differently in Phoenix than it would in a temperate metro.

    There is also an economic feedback loop worth naming: hotter ambient air makes chillers and evaporative systems work harder, which consumes more electricity and water, which ejects more heat. If clustered facilities are warming their own microclimate, they are marginally degrading their own cooling efficiency — and everyone else’s. That is a classic commons problem, and commons problems invite regulation when the industry does not self-organize first.

    From Liability to Asset: The Waste-Heat Reuse Question

    In Nordic countries, data center waste heat is piped into district heating networks that warm homes — the externality becomes a product. The awkward truth is that this playbook works worst exactly where the U.S. is building fastest: Phoenix has essentially no heating demand for most of the year, and the low-grade heat that air-cooled facilities reject is difficult to transport or upgrade economically. Reuse candidates exist — industrial preheating, water treatment, agriculture — but none absorb hyperscale volumes in a desert.

    That points the mitigation conversation toward engineering rather than reuse: liquid cooling that captures heat at higher, more usable temperatures; facility siting and airflow design that lofts exhaust away from neighborhoods; and honest accounting of the water-versus-heat trade-off, since evaporative cooling ejects less sensible heat into the air but consumes scarce water to do it. Operators who get ahead of this with published thermal data will own the narrative; those who wait will have it written for them.

    Background

    Metro Phoenix has spent a decade becoming one of America’s leading data center markets, attracting hyperscale and colocation development with affordable land, available power, low disaster risk, and proximity to West Coast demand. The AI buildout has accelerated that growth just as the region confronts record-breaking heat and long-term water constraints.

    Urban heat island science, meanwhile, has decades of history attributing city warming to pavement, buildings, and vehicles. What is new is peer-reviewed work isolating data centers — among the most energy-dense buildings ever constructed — as a distinct and growing contributor, arriving at the exact moment communities nationwide are weighing the local costs and benefits of hosting them.

    Source: “Data Center Waste Heat as an Emerging Urban…”, ASME Journal of Engineering for Sustainable Buildings and Cities (Vol. 7, Issue 2) — a peer-reviewed study reporting that data centers raise nearby temperatures by up to 4 degrees in Phoenix, surfaced via the Hacker News front page.

  • AI-Assisted Defense Hardens Satellite Communications After 2022 Russian Hack

    AI-Assisted Defense Hardens Satellite Communications After 2022 Russian Hack

    An AI-assisted cybersecurity tool has been credited with helping secure a satellite communication system in the aftermath of the 2022 Russian hacking campaign, according to a report from the Associated Press. The 2022 incident — the most consequential known cyberattack on commercial satellite communications to date — struck at the opening of Russia’s full-scale invasion of Ukraine and disrupted connectivity for users across Europe.

    The report positions the tool as a working example of artificial intelligence applied to defending space-based connectivity infrastructure, an area regulators and militaries have flagged as critically exposed since that attack.

    Executive Summary

    The announcement, carried by AP, describes an AI-assisted tool that helped secure a satellite communication system following the 2022 Russian hack — widely understood to reference the attack on Viasat’s KA-SAT network on the day Russia invaded Ukraine. That attack used wiper malware to disable tens of thousands of satellite modems, cutting off Ukrainian users and collateral customers across Europe, including remote monitoring for thousands of German wind turbines.

    Why it matters: satellite links carry traffic that terrestrial fiber cannot reach — rural broadband, maritime and aviation connectivity, military communications, and backup paths for critical infrastructure. The 2022 attack proved a nation-state could take a commercial satellite network’s user base offline in hours. Evidence that AI-assisted tooling has since been used to harden such a system marks a shift in defensive AI from lab pilots and vendor demos to operational deployment on infrastructure that has already been targeted in wartime.

    For infrastructure operators, the signal is that AI-augmented defense is becoming table stakes for any network — space-based or terrestrial — that adversaries consider a strategic target.

    From Pilot to Proven: Defensive AI Grows Up

    For years, ‘AI in cybersecurity’ mostly meant anomaly-detection features bolted onto marketing decks. What makes this report notable is the context: the tool is credited with helping secure a system that suffered one of the most damaging real-world attacks on record, not a simulated range exercise. Securing a post-breach environment is the hardest test in the discipline — the adversary has demonstrated capability and intent, and defenders must assume they will return.

    AI’s genuine advantage in this setting is scale and speed of pattern analysis. Satellite ground networks generate enormous telemetry streams from modems, gateways, and management servers. Human analysts cannot review that volume; machine-learning systems can flag deviations — an unusual firmware push, an unexpected management-plane login path — fast enough to matter. That is precisely the vector the 2022 attackers exploited, reaching modems through a compromised management network.

    The Ground Segment Is the Soft Underbelly of Space

    A persistent misconception is that hacking a satellite network means attacking the spacecraft. The 2022 incident showed otherwise: the attackers never touched the satellite. They compromised the terrestrial management infrastructure — the ‘ground segment’ — and used it to push destructive commands to customer modems. Wiper malware, which destroys a device’s software rather than stealing data, rendered the modems inoperable.

    That architecture lesson generalizes across all infrastructure: the management plane is the crown jewel. Data centers, carrier networks, and cloud platforms share the same exposure — whoever controls the orchestration layer controls everything downstream. AI-assisted monitoring of that layer, rather than only the customer-facing edge, is where defensive investment is now flowing.

    Market Stakes: Space Cybersecurity Becomes a Line Item

    The commercial satellite connectivity market has expanded rapidly since 2022, driven by low-Earth-orbit constellations, in-flight and maritime connectivity, and government demand for resilient communications. Every new terminal is an endpoint an adversary can target. Insurers, defense customers, and regulators have all raised security expectations for satellite operators since the 2022 attack, and demonstrated AI-assisted hardening gives operators something concrete to point to in procurement and compliance conversations.

    Winners in this shift are operators who can prove security posture, and vendors selling AI-driven monitoring for operational-technology environments. Under pressure are smaller operators and legacy VSAT (very-small-aperture terminal) networks running aging ground infrastructure that predates modern security assumptions — retrofitting is expensive, and the talent to do it is scarce.

    The Limits: AI Defends, But Humans Still Own the Outcome

    Caution is warranted. AI-assisted defense narrows the detection gap but does not eliminate the fundamentals: patching, segmentation of management networks, and credential hygiene — the exact weaknesses exploited in 2022. AI models also introduce their own attack surface, from data-poisoning risks to false-positive floods that exhaust analysts. And adversaries use AI too, accelerating vulnerability discovery and phishing at the same pace defenders accelerate detection.

    The realistic read is that AI has become a force multiplier for well-run security programs, not a substitute for them. The systems most likely to benefit are those where operators pair AI tooling with disciplined architecture — which, based on this report, appears to be the path taken here.

    Background

    Commercial satellite communications became a wartime target on the first day of Russia’s 2022 invasion of Ukraine, when the KA-SAT broadband network operated by Viasat was hit with wiper malware delivered through its ground-based management systems. The attack disabled tens of thousands of modems, disrupted Ukrainian communications at a critical moment, and caused collateral outages across Europe. Western governments formally attributed it to Russia, and the incident became the canonical case study in space-infrastructure cybersecurity.

    Since then, satellite connectivity has grown strategically and commercially — low-Earth-orbit constellations, aviation and maritime services, and military resilience programs have multiplied the number of networked terminals in orbit and on the ground. That growth has drawn sustained investment into securing the ground segment, where artificial intelligence is increasingly applied to detect intrusions and harden systems at a scale human teams cannot match.

    Source: AI-assisted tool helped secure satellite communication system after 2022 Russian hacking — Associated Press report on defensive AI deployed to harden satellite communications infrastructure targeted in the 2022 Russian cyberattack.

  • Advantech’s New Tustin HQ Is a Bet on North American Edge AI Demand

    Advantech’s New Tustin HQ Is a Bet on North American Edge AI Demand

    Advantech (TWSE: 2395), the Taiwan-based edge computing and industrial IoT company, announced on August 19, 2026 the opening of its new North American headquarters in Tustin, California. The 10-acre campus at Tustin Legacy in Orange County pairs a six-story, 110,000-square-foot corporate headquarters with a 79,000-square-foot Integration & Service Center.

    The company says the site — located near the Ports of Los Angeles and Long Beach, John Wayne Airport, and major Southern California freight corridors — will anchor product innovation, customer collaboration, and expanded integration and logistics operations across the region, alongside its existing Milpitas, California and Ottawa, Illinois facilities.

    Executive Summary

    Advantech is consolidating its North American presence into a purpose-built campus that puts engineering, sales, customer experience, technical support, and executive leadership under one roof — plus an immersive AIoT showroom where customers can explore real-world applications across vertical markets. Ween Niu, General Manager of Advantech North America, framed the move as “a long-term investment in innovation, our employees, our partners, and the future of Edge AI.”

    The more strategically interesting half of the announcement is the Integration & Service Center: 79,000 square feet of dedicated integration and warehouse space with expanded dock bays, advanced scanning and routing systems, cross-dock operations supporting same-day and next-day processing, and automation infrastructure designed to scale. For a hardware company whose products — industrial PCs, embedded platforms, edge AI systems — typically require configuration before deployment, that is a statement about where value gets added: increasingly, on US soil, close to the customer.

    Why it matters: edge computing means putting processing power at or near where data is generated (a factory floor, a retail store, a cell tower) rather than in a distant cloud data center. As enterprises deploy AI at the edge in volume, the vendors who can integrate, stage, and ship configured hardware fastest gain a real advantage — and Advantech is spending to be one of them.

    Edge AI Is a Logistics Business, Not Just a Silicon Business

    Cloud AI concentrates hardware in a handful of hyperscale data centers; edge AI scatters it across thousands of customer sites. That inversion changes what wins deals. A customer rolling out AI-enabled systems across dozens of locations cares less about a spec-sheet edge and more about whether units arrive configured, imaged, and ready to mount — and whether a failed unit can be swapped quickly. Advantech’s investment in cross-dock operations, staging areas, and shipment-accuracy technology treats fulfillment and service as product features, which for industrial hardware they effectively are.

    The site selection reinforces this reading. Proximity to the Ports of Los Angeles and Long Beach — the primary gateway for trans-Pacific goods entering the US — shortens the distance between inbound manufactured hardware and outbound integrated systems. For a company headquartered in Taiwan, that positioning compresses the slowest part of the supply chain.

    Onshoring Support Capacity Without Onshoring Manufacturing

    Advantech’s move fits a broader pattern among Asia-based hardware vendors: rather than relocating manufacturing wholesale, they are onshoring the final, high-touch stages — integration, configuration, service, and warehousing — where proximity to the customer matters most. The release describes a two-hub integration footprint (Tustin, California and Ottawa, Illinois) that gives the company coverage on both the West Coast and the Midwest, while Milpitas continues supporting customers through the transition.

    This is a capital-efficient hedge. It shortens delivery times and improves responsiveness for North American buyers without the cost and complexity of standing up full production lines, and it signals commitment to a region where industrial automation, embedded AI, and IoT deployments are growth priorities for enterprise buyers.

    The Showroom as a Sales Strategy for an Invisible Product

    Edge infrastructure suffers from a demonstration problem: the product is a box in a cabinet, but the value is a transformed operation. The campus’s immersive AIoT showroom — where customers explore applications across vertical markets — is Advantech’s answer. Co-locating that experience with engineering and executive leadership turns the headquarters into a sales and co-development instrument, consistent with the company’s stated model of co-creating solutions with domain-focused partners rather than shipping components alone.

    Who Feels the Pressure

    Competing industrial PC and edge hardware vendors serving North America now face a rival with a stated same-day and next-day processing capability near the country’s busiest port complex. For customers, the practical effect — if Advantech executes — is faster deployments and shorter service loops. The risk side is equally real: a large fixed-cost campus is a bet that edge AI demand keeps growing; if enterprise edge spending slows, the company carries the overhead regardless.

    Background

    Founded in 1983, Advantech built its business on industrial computers and embedded platforms — the specialized hardware inside factory equipment, kiosks, medical devices, and network infrastructure. As industry adopted IoT (internet-connected sensors and machines), big data, and AI, the company repositioned around ‘Edge Intelligence’: hardware and software that runs analytics and AI where data is generated. It works through domain-focused partners to co-create sector-specific industrial IoT solutions rather than selling components alone.

    The Tustin campus extends a North American footprint that has included operations in Milpitas, California and integration capabilities in Ottawa, Illinois. The move lands amid broad enterprise momentum behind edge AI and industrial automation, where deployment speed and local service capacity increasingly shape vendor selection.

    Source: Advantech Announces New North American Headquarters and Service Center in Tustin, California — PR Newswire release, August 19, 2026, announcing Advantech’s 10-acre Tustin Legacy campus and Integration & Service Center.

  • Data Centers Become a Toxic Wedge Issue in Governors’ Races

    Data Centers Become a Toxic Wedge Issue in Governors’ Races

    The Associated Press reports that governors’ races across the United States are being increasingly buffeted by what it calls the toxic politics of data centers. The facilities that power the AI and cloud economy — and the electricity, water, and land they consume — have moved from zoning-board obscurity to the center stage of statewide campaigns.

    Executive Summary

    According to AP’s reporting, data centers have crossed a political threshold: they are no longer a local land-use question decided quietly by county boards, but a statewide campaign issue that candidates for governor are being forced to answer for. The word choice matters — ‘toxic’ signals that the issue now carries more downside than upside for politicians, regardless of party.

    For the infrastructure industry, this is a material shift in the operating environment. Governors appoint utility commissioners, sign or veto tax-incentive legislation, and set the tone for state permitting agencies. When the people seeking that office campaign against — or hedge on — data center growth, the political risk premium on every new site goes up. Siting risk, long treated as a paperwork problem, is becoming an electoral one.

    From Zoning Boards to the Ballot Box

    For most of the industry’s history, data center approvals were decided in county planning meetings that almost nobody attended. The AI build-out changed the scale of the ask: modern campuses draw utility-grade electricity, meaningful volumes of water for cooling, and large tracts of land, often near residential areas. That scale made the facilities visible, and visibility made them political. AP’s framing — governors’ races ‘buffeted’ by the issue — captures the escalation: the debate has jumped two levels of government, from town hall to statehouse.

    The mechanism is straightforward. Residents connect rising electricity bills, strained grids, and changed landscapes to the server farms appearing nearby, and they take that frustration to the most visible official on the ballot. Candidates then face a bad trade: embrace data centers and own the utility-bill anger, or oppose them and own the lost jobs and tax revenue. That no-win structure is what makes an issue ‘toxic’ in campaign terms.

    Why Governors Matter More Than Mayors

    A hostile county board can kill one project; a hostile governor can reshape an entire state’s pipeline. Governors influence public utility commissions that decide who pays for grid upgrades, sign the tax-abatement packages that make site economics work, and direct the environmental agencies that issue water and air permits. If campaigning against data centers proves to be a winning message, the policy consequences will outlast any single election cycle.

    The economics compound the risk. Data centers are decade-scale capital commitments made against assumptions about power pricing, tax treatment, and permitting timelines. An election that flips a state from courting the industry to constraining it can strand those assumptions mid-project. Operators and their investors now have to underwrite political volatility the way they underwrite grid interconnection queues.

    Winners, Losers, and the Flight to Friendly Ground

    The likely near-term effect is sorting. Capital will tilt toward jurisdictions where the political climate is settled — states, and increasingly specific utility territories, where community benefit agreements, transparent power-cost allocation, and water-efficient designs have kept the backlash manageable. States where data centers become a campaign punching bag risk watching projects, and the associated construction jobs and tax base, route around them.

    The industry’s own conduct will help decide which column each state lands in. Secretive land assemblies, non-disclosure agreements around utility deals, and cost-shifting onto residential ratepayers are the fuel of the backlash. Operators that show up early, disclose resource demands, pay their full share of grid costs, and design for minimal water draw are effectively buying political insurance. In an environment where a governor’s race can reprice a state’s entire pipeline, that insurance is no longer optional.

    Background

    Data centers are the physical backbone of the internet, cloud computing, and artificial intelligence — warehouse-scale buildings full of servers that require enormous amounts of electricity and, in many designs, water for cooling. For two decades states actively courted them with tax incentives, prizing their construction jobs and property-tax revenue while their modest visibility kept public attention low.

    The generative-AI boom broke that equilibrium. Facilities grew from tens of megawatts to campus-scale power draws rivaling heavy industry, land acquisitions became front-page news in host communities, and questions about who pays for grid expansion landed on residential utility bills. The AP’s report marks the point at which that accumulated friction became statewide electoral politics.

    Source: Governors’ races are being increasingly buffeted by the toxic politics of data centers — Associated Press reporting, via Google News, on how data center siting has become a contentious statewide campaign issue.