Author: Deepak Jain

  • PJM’s First Reformed Queue Cycle Draws 811 Projects and 220 GW

    PJM’s First Reformed Queue Cycle Draws 811 Projects and 220 GW

    PJM Interconnection, the grid operator for the largest wholesale electricity market in the United States, has closed the application window for the first cycle of its reformed interconnection queue with 811 project applications totaling roughly 220 gigawatts (GW) of proposed capacity, according to an April 30, 2026 report in POWER Magazine. The interconnection queue is the formal process through which new power plants, storage facilities, and other resources apply to connect to the high-voltage grid.

    The cycle is the first to run entirely under PJM’s overhauled “first-ready, first-served” cluster study rules, replacing the serial, first-come-first-served process that had produced multiyear backlogs.

    Executive Summary

    The headline numbers are striking on their own terms: 811 projects and about 220 GW of proposed capacity entered a single study cycle — a volume on the same order as the entire existing generating fleet serving PJM’s 13-state-plus-D.C. footprint. That developers are willing to post the deposits and demonstrate the site control the reformed process demands, at that scale, is a concrete market signal rather than a speculative one.

    The timing matters. PJM has spent recent years warning of tightening supply as older plants retire while demand — led by AI and data center load growth concentrated in places like Northern Virginia — climbs after decades of flat consumption. A deep pipeline of proposed generation is the necessary first step toward closing that gap.

    The essential caveat is that a queue application is not a power plant. Historically, only a fraction of projects that enter U.S. interconnection queues ever reach commercial operation, and the reformed process is designed to study projects faster, not to guarantee they get financed and built. The 220 GW figure measures developer appetite and process throughput — not committed steel in the ground.

    A 220-GW Referendum on Electricity Demand

    For most of the 2010s, U.S. electricity demand was essentially flat, and grid planning was an exercise in managing retirements and replacement. The 220 GW that flowed into PJM’s first reformed cycle reflects a different era: hyperscale data centers, AI training and inference clusters, electrified transport, and reshored manufacturing have turned load growth from a rounding error into the central planning problem in the nation’s largest power market.

    Because the reformed process requires real financial commitments and demonstrated site control up front, this cycle’s volume is a cleaner demand signal than the old queue ever provided. Under the prior serial process, speculative placeholder projects could sit in line for years at little cost, inflating queue totals. A 220-GW cycle under stricter entry rules suggests developers see durable, creditworthy demand — much of it from data center operators willing to sign long-term commitments — rather than a bubble of free options.

    What Queue Reform Fixed — and What It Cannot

    PJM’s old process studied projects one at a time in the order they arrived, so a single stalled or withdrawn project could force costly restudies of everyone behind it. The reformed approach, approved by federal regulators as part of a broader national shift toward cluster studies, batches projects into cycles, studies them together, and allocates shared network-upgrade costs across the group. Projects that are not ready — lacking land rights or deposits — are filtered out early instead of clogging the line.

    What reform cannot do is build anything. Study speed is only one bottleneck among several: transformer and switchgear lead times remain long, skilled-labor markets are tight, local permitting is contested, and network upgrade costs identified in cluster studies can still kill marginal projects. The queue’s completion rate — nationally, often cited at roughly one in five projects historically — is the number that ultimately matters, and this announcement tells us nothing about it yet.

    Winners, Losers, and the Shape of the Pipeline

    The reformed rules structurally favor well-capitalized developers who can post deposits, secure land early, and absorb study-phase risk — utilities, large independent power producers, and infrastructure-fund-backed platforms. Smaller and more speculative developers, who thrived under the low-cost old queue, face a higher bar. That consolidation cuts both ways: it should raise the fraction of queued projects that actually get built, but it also concentrates the development pipeline in fewer hands.

    For large power buyers — data center operators above all — a deep, better-qualified queue is medium-term good news, since it is the raw material for future supply. But the near-term picture is unchanged: projects entering study now are years from commercial operation, so tight capacity conditions and elevated prices in PJM are likely to persist until this pipeline starts delivering. The gap between when demand arrives and when supply can physically connect remains the defining tension in the market.

    Background

    PJM traces its roots to 1927, when utilities in Pennsylvania and New Jersey first pooled their generation, and it has grown into the largest wholesale power market in North America. In the early 2020s its interconnection queue became a symbol of national gridlock: thousands of projects languished in a serial study process while wait times stretched toward half a decade, prompting a federally approved overhaul that paused new entries while PJM worked through the backlog and transitioned to clustered, readiness-based study cycles.

    The reform arrives just as PJM’s supply-demand balance has tightened. Plant retirements, sharply rising data center load, and record-setting capacity market results have made the pace of new generation buildout the market’s defining question — which is why the volume of this first reformed cycle is being read as a bellwether well beyond PJM’s borders.

    Source: PJM’s First Reformed Queue Cycle Draws 811 Projects, 220 GW — POWER Magazine report on the close of the first study cycle under PJM’s reformed interconnection process, April 30, 2026.

  • OpenAI’s ‘Cybersecurity in the Intelligence Age’: AI as Attack Surface and Defense

    OpenAI’s ‘Cybersecurity in the Intelligence Age’: AI as Attack Surface and Defense

    OpenAI published a piece titled “Cybersecurity in the Intelligence Age,” surfaced via Google News on April 30, 2026. The title positions the company — best known for ChatGPT and its GPT family of models — as a direct voice in the cybersecurity conversation, framing artificial intelligence as both a new attack surface to be secured and a defensive capability in its own right.

    Executive Summary

    When the company building some of the world’s most widely used AI models publishes under a banner like “Cybersecurity in the Intelligence Age,” the publication itself is the news. It is a primary-source marker: OpenAI staking out a position at the intersection of AI and security, rather than leaving that framing to vendors, analysts, or critics.

    The dual framing implied by the title matters for anyone running infrastructure. “AI as attack surface” acknowledges that models, the applications built on them, and the data pipelines feeding them are now targets — through techniques such as prompt injection (tricking a model with malicious instructions embedded in its inputs) and model or data theft. “AI as defense layer” points the other direction: using models to triage alerts, analyze code for vulnerabilities, and augment understaffed security teams. We should be clear about sourcing: the syndicated item available to us carries the headline and publisher, not the full body text, so this analysis works from the framing OpenAI chose and the public context around it — not from claims we cannot verify.

    Why a Model Maker Talking Security Is Itself a Signal

    Security messaging from AI companies has historically been reactive — responses to incidents, red-team reports, or policy inquiries. A named, thesis-style publication like “Cybersecurity in the Intelligence Age” is different in kind: it is agenda-setting. It suggests OpenAI wants to define the vocabulary of AI-era security before regulators, competitors, and the security industry define it for them. For readers, that cuts both ways. Primary sources from the companies building frontier models carry information no third party has — telemetry on how attackers actually misuse models, for instance. But they are also written by a commercial actor with products to sell and rules to shape, so the claims deserve the same scrutiny any vendor white paper gets.

    The Attack-Surface Half: What Enterprises Actually Inherit

    Every organization that has wired a large language model into its workflows has, often without a formal decision, expanded its attack surface. Prompt injection, data leakage through model inputs and outputs, and the compromise of AI-powered agents that hold real credentials are categories of risk that barely existed three years ago. Infrastructure operators feel this concretely: AI workloads concentrate valuable data and compute in identifiable places, which makes the data centers, networks, and identity systems around them higher-value targets. Acknowledgment of this from a leading model provider is useful — it validates budget conversations security teams are already having — but acknowledgment is not mitigation, and the burden of securing deployments still lands mostly on the deploying enterprise.

    The Defense Half: Promise, and the Symmetry Problem

    The optimistic half of the framing — AI as a defense layer — rests on a real observation: security operations are chronically short-staffed, and models are genuinely good at the pattern-matching and summarization work that consumes analyst hours. The unresolved tension is symmetry. The same capabilities that help a defender triage a thousand alerts help an attacker write more convincing phishing at scale or probe code for exploitable flaws. Whether AI structurally favors defense or offense is one of the live debates in the field, and no publication — from OpenAI or anyone else — has settled it with public evidence. The practical takeaway for buyers is narrower and more durable: AI-assisted defense is becoming table stakes, and evaluating those tools on measured outcomes rather than framing is the discipline that matters.

    Background

    OpenAI was founded in 2015 and became a household name with ChatGPT’s launch in late 2022, which triggered the current wave of enterprise AI adoption. As large language models moved into production workflows, a parallel security conversation emerged: security vendors began embedding AI assistants into their products, researchers documented new attack classes such as prompt injection, and policymakers began asking who is responsible when AI systems are misused or compromised.

    Until recently, most of that conversation was led by security vendors, academic researchers, and government agencies. Publications from the model makers themselves — the companies with direct visibility into how their systems are attacked and abused — have been comparatively rare, which is what gives a titled piece like this one its significance as a primary source, whatever its full contents hold.

    Source: Cybersecurity in the Intelligence Age — OpenAI, an OpenAI publication surfaced via Google News on April 30, 2026; the syndicated item provided the headline and publisher only.

  • Gas Leads PJM’s Reopened Interconnection Queue at 106 GW

    Gas Leads PJM’s Reopened Interconnection Queue at 106 GW

    PJM Interconnection, the grid operator serving the largest electricity market in the United States, has reopened its interconnection queue — the formal waiting line new power plants must join before they can connect to the grid — and gas-fired generation leads the intake at 106 gigawatts (GW), according to an April 30, 2026 report by Utility Dive. The queue had been closed to new entrants for years while PJM worked through a massive backlog under reformed study rules.

    Executive Summary

    The reopening of PJM’s queue is one of the most consequential grid events of the decade for the data-center industry. PJM’s territory — spanning 13 states and the District of Columbia, including the Northern Virginia corridor that hosts the world’s densest concentration of data centers — has been the epicenter of the load-growth crunch. For years, developers of new generation could not even get in line, while demand forecasts climbed relentlessly on the back of AI and cloud expansion.

    That 106 GW of gas-fired capacity leads the new intake is the headline signal: developers are betting that dispatchable, fuel-based generation is what the market will pay for. For context, 106 GW of proposed gas alone approaches the scale of PJM’s entire historical peak load — a striking statement of intent, even acknowledging that interconnection requests are proposals, not power plants, and that historically only a fraction of queued projects reach commercial operation.

    The Queue Reopens Into a Seller’s Market

    An interconnection queue is the study pipeline through which a grid operator evaluates whether a proposed generator can connect safely and what network upgrades it must fund. PJM froze new entries while it transitioned from a first-come, first-served process — which had become clogged with speculative projects — to a clustered, first-ready, first-served model. The reopening is therefore a pressure release: years of pent-up development interest arriving all at once.

    The market these projects are entering is unusually favorable to generators. PJM’s recent capacity auctions have cleared at elevated prices, reflecting tightening reserve margins as older coal and gas plants retire faster than replacements arrive and as data-center load grows. High capacity prices are precisely the signal designed to attract new steel in the ground — and 106 GW of gas proposals suggests the signal is being heard.

    Why Gas Leads — Economics, Not Ideology

    Gas-fired turbines dominate this intake for practical reasons. They are dispatchable — able to run on demand rather than when the weather cooperates — which is what capacity markets and 24/7 data-center loads reward most. They site on relatively small footprints near existing gas pipelines and transmission. And developers can point to a revenue stack (capacity payments, energy sales, and potentially direct contracts with large loads) that pencils today.

    But the gas wave faces its own bottlenecks. Turbine manufacturers are reporting multi-year order backlogs industry-wide, EPC (engineering, procurement, and construction) labor is scarce, and gas pipeline expansion in parts of PJM’s eastern footprint has historically faced permitting resistance. Proposing 106 GW is easy; procuring turbines, pipe, and crews for even a fifth of it is the hard part. The queue position is now arguably the cheapest asset in the whole development chain.

    What This Means for Data-Center Developers

    For hyperscalers and colocation operators stuck in multi-year utility interconnection waits, a generation-heavy queue is cautiously good news: more supply eventually means faster load interconnection and less severe capacity-price escalation. It also strengthens the case for co-location deals, in which a data center sites directly alongside a new plant and contracts for its output — a structure regulators in PJM have been actively wrestling with.

    The timing mismatch remains the industry’s core problem. Data centers can be built in 18–24 months; a new combined-cycle gas plant typically takes four or more years from queue entry through studies, permitting, and construction. Even under PJM’s reformed process, the bulk of this 106 GW cannot plausibly serve load until late this decade. Buyers planning capacity for 2027–2028 should not count on this queue cycle to bail them out.

    The Decarbonization Tension Nobody Should Ignore

    A gas-led buildout sits uneasily beside the carbon-neutrality pledges of the very customers driving the demand. Most major cloud providers maintain public net-zero or carbon-free-energy targets, and a decade of gas additions in PJM would make those targets harder to reconcile with grid reality — unless paired with offsets, carbon capture, or an eventual nuclear and storage wave. The honest framing is that the market is prioritizing reliability and speed-to-power first and emissions second. Whether that ordering persists will depend on state policy in PJM’s footprint, federal rules, and how loudly corporate energy buyers push back through their procurement.

    Background

    PJM Interconnection grew out of a 1927 power pool among Pennsylvania and New Jersey utilities and today operates the largest wholesale electricity market in the United States. Its territory contains Northern Virginia’s “Data Center Alley,” which by itself consumes more data-center power than most countries. Over the past several years PJM became the poster child for the interconnection bottleneck: thousands of proposed projects — predominantly renewables in earlier cycles — languished in multi-year study backlogs, prompting a federally approved overhaul of its queue process and a temporary halt to new applications.

    The reopening lands amid record demand forecasts, plant retirements, and capacity prices that have drawn political scrutiny across PJM’s member states. The resource mix of this new intake — and how much of it survives to construction — will shape the region’s reliability, emissions trajectory, and data-center growth capacity into the 2030s.

    Source: At 106 GW, gas-fired generation leads PJM’s newly reopened interconnection queue — Utility Dive report, April 30, 2026, on the resource mix entering PJM’s reformed interconnection process.

  • Nebius to Acquire Eigen AI, Deepening Its Token Factory Inference Bet

    Nebius to Acquire Eigen AI, Deepening Its Token Factory Inference Bet

    Nebius, the Amsterdam-headquartered AI infrastructure company, announced on April 30, 2026 that it has agreed to acquire Eigen AI, a deal the company says will strengthen Nebius Token Factory — its managed platform for running AI models in production — as a “frontier inference platform.” Financial terms were not disclosed in the announcement.

    Executive Summary

    The announcement is short on detail but clear in direction: Nebius is buying its way further up the stack. Token Factory is the company’s inference service — inference being the work of actually running a trained AI model to answer queries, as opposed to the one-time job of training it. By acquiring Eigen AI, Nebius signals that it wants to compete on the software and efficiency of serving models, not only on the raw GPU capacity underneath.

    That matters because inference is where the AI infrastructure market’s recurring revenue increasingly lives. Training runs are lumpy, contract-driven, and dominated by a handful of frontier labs; inference demand grows with every application that puts a model in front of end users. A GPU cloud that can serve tokens more efficiently than rivals can either undercut them on price or keep the margin — and an in-house optimization team is one of the few durable ways to get that edge.

    Inference Is Becoming the Real Battleground

    For the past several years, the headline numbers in AI infrastructure have come from training: giant clusters, multi-year capacity contracts, gigawatt campuses. But training is a capital-intensive land grab with a small set of customers. Inference — serving billions of model queries a day — is the volume business, and its economics are decided by software as much as hardware. Techniques like smart request batching, caching, and model-serving optimizations can multiply how many tokens a given GPU produces per second, which translates directly into cost per query.

    Nebius framing the deal around making Token Factory a “frontier inference platform” tells you where it thinks the fight is heading. Frontier-scale models are expensive to serve, and the providers who serve them cheapest — without sacrificing latency or reliability — will win the workloads of AI application companies that live and die on unit economics.

    Vertical Integration in the AI Cloud Race

    Nebius belongs to the cohort often called neoclouds — specialist GPU cloud providers that grew up renting accelerator capacity, distinct from hyperscalers like AWS, Microsoft Azure, and Google Cloud. The strategic risk for any neocloud is commoditization: if all you sell is access to the same Nvidia hardware everyone else buys, price competition eventually erodes margins. The escape route is moving up the stack into managed platforms, and inference services are the most natural rung.

    Acquiring an inference-focused company rather than building everything internally is a classic vertical-integration play: own the layer that differentiates your commodity input. Hyperscalers and inference-API specialists are pursuing the same layer, so the competitive logic is straightforward — Nebius needs Token Factory to be more than a thin wrapper around GPUs, and buying specialized talent and technology is faster than growing it.

    Buy Versus Build, and What a Thin Release Does and Does Not Establish

    It is worth being precise about what the announcement substantiates. It establishes that Nebius has agreed to acquire Eigen AI and that Nebius intends the deal to bolster Token Factory’s inference capabilities. It does not disclose a purchase price, Eigen AI’s size, its customers, or the specific technology being acquired — so any claim about how much this improves Token Factory’s performance or economics is, for now, unverifiable from the source material. “Strengthening” language in an acquisition release is aspiration until integration results show up in benchmarks, pricing, or customer wins.

    Still, the pattern is credible. Across the industry, inference-optimization teams — often small groups with deep expertise in GPU kernels, serving engines, and scheduling — have become prized acquisition targets, because a handful of engineers can move serving costs by double-digit percentages. If Eigen AI fits that profile, the deal is less about revenue than about capability: the acqui-hire economics of the AI era, where talent density in a narrow specialty commands strategic premiums.

    Background

    Nebius Group emerged in 2024 from the restructuring of Yandex N.V., the Dutch holding company that divested its Russian assets and refocused on AI infrastructure, resuming trading on Nasdaq that year. Since then, Nebius has expanded aggressively — building GPU data-center capacity in Europe and the United States and signing large capacity agreements, including a multibillion-dollar GPU deal with Microsoft announced in September 2025. Token Factory, launched in late 2025, is its managed inference platform and a centerpiece of its push beyond raw compute rental into higher-margin platform services, of which the Eigen AI acquisition is the latest step.

    Source: Nebius agrees to acquire Eigen AI, strengthening Nebius Token Factory as a frontier inference platform — company announcement dated April 30, 2026, distributed via Google News.

  • Bitdeer’s $4.7B Long-Term Lease Deepens the Miner-to-AI Infrastructure Pivot

    Bitdeer’s $4.7B Long-Term Lease Deepens the Miner-to-AI Infrastructure Pivot

    Bitdeer Technologies, the Nasdaq-listed bitcoin mining and digital infrastructure company, has entered a long-term data center lease valued at $4.7 billion, according to a report published April 30, 2026. The company frames the agreement as an expansion of its artificial intelligence infrastructure business — one of the largest single capacity commitments yet disclosed in the ongoing migration of crypto-mining operators into the AI data center market.

    Executive Summary

    The announcement, carried via TradingView, is short on operational detail but large in headline value: $4.7 billion committed under a long-term lease structure tied to AI infrastructure. Long-term leases — multi-year contracts in which one party commits to pay for data center capacity over the life of the agreement — are the currency of the AI buildout, because they convert speculative capacity into bankable, contracted cash flows that lenders and investors can underwrite.

    For Bitdeer, a company built on bitcoin mining, a commitment of this scale matters because it shifts the company’s center of gravity. Mining revenue is volatile, tied to bitcoin’s price and network difficulty. AI infrastructure leases, by contrast, resemble traditional data center economics: contracted terms, identifiable counterparties, and revenue visibility measured in years rather than block rewards. A $4.7 billion figure, if executed as described, would place Bitdeer among the more consequential converts in the miner-to-AI transition.

    From Bitcoin Mines to AI Campuses

    Bitdeer’s move follows a pattern that has reshaped the crypto-mining sector: companies that spent years assembling large-scale power access and industrial sites for bitcoin mining are repurposing those assets for AI computing. The logic is straightforward. The scarcest input in AI infrastructure today is not chips but energized, grid-connected capacity — sites where hundreds of megawatts of power are already secured and permitted. Bitcoin miners happen to own exactly that.

    Several large miners have already signed multi-billion-dollar, multi-year agreements to host AI and high-performance computing workloads, and the market has generally rewarded those pivots with valuations closer to data center operators than to commodity miners. A $4.7 billion long-term lease would signal that Bitdeer intends to compete in that same lane, not merely experiment at the edges of it.

    Why Long-Term Leases Are the Deal Structure of the AI Buildout

    A long-term lease does two things at once. For the capacity provider, it converts an industrial asset into a stream of contracted revenue that can support debt financing — critical, because retrofitting mining sites into AI-grade facilities is capital intensive, requiring denser power delivery, liquid or advanced air cooling, and far more resilient electrical infrastructure than mining rigs need. For the capacity buyer, it locks up scarce power and space ahead of competitors in a market where lead times for new grid connections can run to years.

    The headline number deserves careful reading, however. In deals of this type, the quoted value typically represents total contract value across the full lease term, not annual revenue or an upfront payment. Without the term length disclosed, $4.7 billion could imply very different annual economics — a distinction that matters enormously for assessing the deal’s true weight.

    The Real Asset Is Power

    Whichever side of the lease Bitdeer occupies, the transaction underscores that access to electricity has become the defining constraint of the AI era. Utilities across major markets face multi-year interconnection queues, and hyperscalers and AI cloud providers have shown they will pay premium, long-duration commitments to secure energized capacity now rather than wait for new construction. Companies holding large existing power allocations — a category that prominently includes bitcoin miners — have found themselves holding strategic real estate.

    That dynamic cuts both ways. The premium on power access exists precisely because supply is constrained; as utilities and developers bring new capacity online over the coming years, the scarcity value embedded in today’s deals could compress. Long-term contracts signed at the peak of scarcity may look either prescient or expensive in hindsight, depending on which side of the lease one sits.

    Execution and Concentration Risks

    The risks in miner-to-AI conversions are well documented across the sector. Retrofitting facilities to AI specifications routinely runs over budget and behind schedule, because AI workloads demand redundancy, cooling density, and network architecture that mining sites were never designed for. Counterparty concentration is the second concern: many of these long-term leases depend on a single tenant or customer, so the credit quality and durability of that counterparty effectively determines the value of the contract.

    For a company in transition, there is also a strategic tension. Capital and management attention committed to AI infrastructure is capital not deployed in mining — and if the AI buildout slows or the counterparty falters, the company has repositioned itself around a contract rather than an operating business. None of this makes the deal unwise; it makes the undisclosed details decisive.

    Background

    Bitdeer Technologies emerged from the bitcoin mining industry’s consolidation around large-scale, professionally operated data centers. Spun off from mining-hardware giant Bitmain in 2021 and founded by Bitmain co-founder Jihan Wu, the company listed on Nasdaq in 2023 and built its business on three legs: mining bitcoin for its own account, hosting other miners’ machines, and selling cloud-based hash power. It operates industrial-scale facilities across multiple continents and has invested in developing its own mining chips.

    The broader market context is the collision of two trends: bitcoin mining’s thinning margins after successive halvings, and explosive demand for AI computing capacity that has outrun the electric grid’s ability to serve it. That collision has turned miners’ power portfolios into strategic assets and produced a wave of multi-billion-dollar agreements converting mining sites into AI infrastructure — the wave this lease places Bitdeer squarely within.

    Source: Bitdeer expands AI infrastructure with long-term $4.7B data center lease — report published via TradingView, April 30, 2026, announcing Bitdeer’s $4.7 billion long-term data center lease.

  • Bitcoin Miners Pivot to AI Data Centers as Mining Economics Go ‘From Bad to Worse’

    Bitcoin Miners Pivot to AI Data Centers as Mining Economics Go ‘From Bad to Worse’

    Sherwood News reports that bitcoin mining economics “have gone from bad to worse,” and that mining companies are responding by pivoting their businesses — or selling assets outright — to survive. According to the report, publicly traded miners on investor watchlists, including names such as Riot Platforms and Hut 8, are redirecting attention from pure hashrate growth toward converting their power-rich sites into AI data-center capacity.

    The story, published April 29, 2026, frames the shift not as opportunistic diversification but as a survival response: when the core business of minting bitcoin no longer covers its costs for many operators, the land, power contracts, and electrical infrastructure miners control become more valuable serving artificial-intelligence workloads than mining rigs.

    Executive Summary

    The announcement here is really a diagnosis: the economics of industrial-scale bitcoin mining have deteriorated to the point that pivoting and selling are now mainstream strategies, not edge cases. Bitcoin mining profitability is a squeeze between three variables — the price of bitcoin, the total computing power competing on the network (which rises relentlessly), and the cost of electricity. When the spread between what a miner earns per unit of computing power and what it pays for energy compresses, weaker operators run out of room. Sherwood’s reporting says that spread has kept compressing.

    Why it matters to the infrastructure industry: bitcoin miners collectively control one of the scarcest assets in technology today — large blocks of grid-connected power with substations, transformers, and cooling already in place. AI data-center developers routinely wait years for utility interconnections. A distressed miner with hundreds of megawatts energized is, from an AI developer’s perspective, a shortcut through the single longest item on the construction schedule. That is why the pivot is happening, and why acquirers are circling the sellers.

    The unresolved question is execution. A mining shed and an AI data center share a power feed and little else. Whether watchlist miners can finance and deliver true high-density AI facilities — or whether they simply become land-and-power sellers to better-capitalized buyers — will separate the survivors from the exits.

    Why Mining Economics Keep Getting Worse

    Bitcoin’s protocol is deliberately unforgiving. Roughly every four years, a “halving” cuts the new-coin reward miners receive in half, mechanically slashing industry revenue per unit of work unless the bitcoin price doubles to compensate. Meanwhile, network hashrate — the total computing power competing for those rewards — tends to grow as new, more efficient machines come online, which dilutes every incumbent’s share. The result is a treadmill that speeds up on a schedule: costs are largely fixed in electricity and debt service, while revenue per terahash structurally declines.

    Sherwood’s “bad to worse” framing captures the position of miners caught between those forces without a low-cost energy advantage. In commodity industries — and bitcoin mining is one, producing an identical product where the only durable edge is cost — deteriorating unit economics do not punish everyone equally. They sort the industry into low-cost survivors, distressed sellers, and pivots. The report indicates all three categories are now visible.

    The Real Asset Was Always the Power

    The pivot toward AI data centers rests on a simple arbitrage. AI training and inference facilities need enormous amounts of electricity delivered through utility-scale interconnections — agreements with grid operators that can take years to secure. Bitcoin miners spent the last cycle acquiring exactly those assets, often in power-rich regions, because cheap electricity was their business model. A miner’s site with an energized substation can be worth more as an AI campus shell than it ever earned mining.

    But the conversion is not cosmetic. Mining facilities are typically air-cooled warehouses running hardware that tolerates heat and interruption; AI data centers demand dense power distribution, liquid or precision cooling, redundant systems, and uptime guarantees written into contracts. The capital cost per megawatt of a genuine AI facility is a large multiple of a mining build-out. That gap is precisely why some miners pivot while others sell: the pivot requires capital and data-center operating credibility that a distressed balance sheet may not support.

    Winners, Losers, and the Middle

    The likely winners are miners holding large, well-located power positions and enough financial flexibility to either fund conversions or strike partnerships with hyperscalers and AI cloud providers on favorable terms. Buyers of distressed sites also win: acquiring energized capacity is faster than greenfield development. Utilities and communities hosting these sites may see steadier, longer-term tenants, since AI facilities sign multi-year commitments in a way price-sensitive mining loads generally do not.

    The losers are miners with small sites, expensive power, or leveraged balance sheets — operators whose assets are not distinctive enough to attract AI tenants and whose mining margins no longer cover obligations. For them, “pivot or sell” can shade into “sell at whatever the market offers.” Investors should also note a subtler risk in the middle: a miner that announces an AI strategy has not yet built one. The industry has an incentive to rebrand faster than it can execute, and the market has at times rewarded the announcement before the revenue.

    What This Means for the Broader Data-Center Market

    Every mining megawatt that converts to AI use adds supply to a data-center market defined by power scarcity — but not always where AI customers most want it. Mining sites were chosen for cheap power, not proximity to network hubs or enterprise demand, so converted capacity will suit some workloads (large-scale training, which tolerates remote locations) better than others (latency-sensitive inference near population centers). The pivot wave is therefore additive to AI infrastructure supply, but selectively so.

    It also serves as a market signal. When an entire adjacent industry concludes its power portfolio earns more serving AI than its original purpose, it confirms how deep the demand for energized capacity runs. The countervailing question — one worth asking of the AI build-out with the same rigor applied to mining — is what happens to converted sites if AI infrastructure demand ever cools. Assets that have been repurposed once can be repurposed again, but the capital sunk into the conversion cannot.

    Background

    Industrial bitcoin mining grew through the early 2020s into a public-company sector, with operators such as Riot Platforms and Hut 8 raising capital to build warehouse-scale facilities wherever electricity was cheap — Texas, the U.S. Midwest, Canada, and beyond. The business model was a leveraged bet on bitcoin’s price against relentlessly rising network competition and scheduled halvings that cut mining rewards in half roughly every four years, most recently in April 2024.

    As generative AI ignited unprecedented demand for grid-connected data-center capacity, the industry discovered that miners’ real strategic asset was their power portfolios rather than their mining machines. Core Scientific’s high-profile agreements to host AI computing marked an early template, and by 2026 the question facing much of the sector had become not whether to engage with AI infrastructure, but whether each miner would be a converter, a landlord, or a seller.

    Source: As bitcoin mining economics “have gone from bad to worse,” companies pivot and sell to survive — Sherwood News report, April 29, 2026, on miners shifting toward AI data-center strategies and asset sales.

  • NSA and Allies Issue First Joint Guidance on Securing Agentic AI Systems

    NSA and Allies Issue First Joint Guidance on Securing Agentic AI Systems

    The U.S. National Security Agency (NSA) has joined the Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) and other partner agencies to release joint guidance on agentic artificial intelligence systems — AI that doesn’t just answer questions but autonomously plans and executes tasks. Announced April 29, 2026, it is the first major multi-government security framework aimed specifically at AI agents, arguably the fastest-growing new attack surface in enterprise technology.

    Executive Summary

    According to the announcement, the NSA — alongside ASD’s ACSC and other unnamed partner agencies — has published guidance on agentic AI systems: software built on large language models that can take actions on a user’s behalf, such as browsing, writing code, calling APIs, or operating other software. That autonomy is precisely what makes agents useful, and precisely what makes them dangerous when compromised: an attacker who subverts an agent inherits everything the agent is allowed to do.

    The release matters less for any single recommendation than for what it signals. When signals-intelligence agencies from multiple allied nations co-sign a document about a technology category, that category has crossed a threshold — from experimental tooling to infrastructure that governments believe adversaries are actively probing. Enterprises deploying AI agents now have an authoritative reference point, and vendors selling them have a bar to be measured against.

    Autonomy Changes the Threat Model

    A conventional chatbot that gets manipulated produces bad text. An agentic system that gets manipulated produces bad actions — because agents are wired to tools, credentials, file systems, and APIs. The security community has spent two years documenting how techniques like prompt injection (hiding malicious instructions in content an AI reads, such as a webpage or email) can redirect an agent’s behavior. When the agent can send messages, move money, or modify infrastructure, a manipulated input stops being an embarrassment and becomes the equivalent of a compromised employee account.

    That is why agentic AI merits its own guidance rather than a footnote to existing AI security advice. Earlier frameworks focused on securing models, training data, and deployment pipelines. Agents add a different problem: the model’s outputs are now inputs to real systems, so classic security disciplines — least privilege, sandboxing, audit logging, human approval for consequential actions — must be rebuilt around a component that behaves probabilistically rather than deterministically.

    The Allied Playbook: Guidance Before Regulation

    This release fits a well-established pattern. The NSA, ASD’s ACSC, and partners including the UK’s NCSC and the U.S. CISA have jointly published a sequence of AI security documents since late 2023 — guidelines for secure AI development, for deploying AI systems securely, and for AI data security. Each followed the same model: non-binding, principles-based guidance issued jointly so that multinational enterprises face one aligned reference instead of a patchwork.

    Non-binding does not mean toothless. In practice, joint government guidance tends to become a de facto procurement standard — government buyers cite it in contracts, insurers and auditors reference it, and regulators later treat it as evidence of what “reasonable” security looked like at the time. Vendors of agent platforms and the enterprises deploying them should read this release as an early draft of tomorrow’s compliance expectations, arriving while the market is still young enough to adapt cheaply.

    What It Means for Enterprise and Infrastructure Operators

    For organizations already piloting AI agents, the immediate implication is organizational: agent deployments now belong in the security team’s scope, not just the innovation team’s. That means treating agents as privileged identities — with scoped credentials, network segmentation, activity logging, and defined blast radius — rather than as features of a productivity suite. Buyers evaluating agent platforms gain a useful question set: how does the vendor constrain what the agent can do, log what it did, and contain it when it misbehaves?

    For infrastructure providers — data centers, cloud and connectivity operators — agentic AI is both a workload to host and a tool their customers will point at their own environments. Isolation, observability, and identity infrastructure become selling points as enterprises look for places to run agents with enforceable boundaries. Government attention at this level tends to accelerate, not chill, enterprise adoption: clear security expectations reduce the uncertainty that keeps cautious industries on the sidelines.

    Background

    Governments began issuing coordinated AI security guidance almost as soon as generative AI reached enterprises: allied agencies including the NSA, CISA, the UK’s NCSC, and ASD’s ACSC jointly published guidelines for secure AI system development in November 2023, guidance on deploying AI systems securely in April 2024, and AI data security guidance in 2025. The NSA’s Artificial Intelligence Security Center, created in 2023, has anchored the U.S. side of that effort.

    Over the same period, the industry’s center of gravity shifted from chatbots to agents — AI that can use tools, browse, code, and act with limited supervision — driven by rapid capability gains in frontier models. Security researchers flagged early that autonomy plus tool access creates a fundamentally new attack surface; this April 2026 release is the first time that concern has been addressed head-on at the multi-government level.

    Source: NSA joins the ASD’s ACSC and Others to Release Guidance on Agentic Artificial Intelligence Systems — National Security Agency announcement of joint international guidance on securing agentic AI, published April 29, 2026.

  • Smart Buffers Could Make AI Data Centers Better Grid Citizens

    Smart Buffers Could Make AI Data Centers Better Grid Citizens

    IEEE Spectrum reported on April 29, 2026 that AI data center operators are adopting “smart buffer” technologies — on-site energy storage and power-management systems that sit between the utility grid and racks of GPUs — to smooth the sharp swings in electricity demand that large AI workloads create. The framing is notable: rather than another story about AI’s appetite for power, this one covers an emerging engineering fix that could make AI facilities “better grid citizens.”

    Executive Summary

    The problem being solved is real and increasingly well documented. When thousands of GPUs start or pause a synchronized AI training run, a facility’s power draw can swing by tens of megawatts in seconds — behavior that looks, to a utility, less like a steady industrial customer and more like a giant load that lurches unpredictably. Grid operators plan around stable, forecastable demand; loads that spike and sag rapidly can stress local equipment, complicate frequency regulation, and slow interconnection approvals.

    Smart buffering attacks the problem at the meter. By placing fast-responding energy storage and intelligent power electronics between the grid connection and the compute floor, an operator can present the utility with a flattened, predictable demand profile while the GPUs behind the buffer surge and idle as the workload demands. If the approach matures, it addresses one of the sharpest objections utilities and communities raise against new AI capacity — and could shorten the interconnection waits that have become the industry’s biggest bottleneck.

    Why AI Loads Misbehave on the Grid

    Traditional data centers — the kind running websites, databases, and enterprise applications — are prized utility customers precisely because their demand is boringly flat. AI training clusters break that model. A large training job synchronizes thousands of accelerators: they compute in lockstep, pause together to exchange data, and can drop to a fraction of peak power in an instant if a job checkpoints or fails. The result is a load that oscillates on timescales of seconds to minutes, at magnitudes utilities historically associated with arc furnaces or industrial motors starting up.

    Utilities engineer their networks — transformers, voltage regulation, frequency response — around expected load behavior. A customer whose demand swings violently forces conservative planning: bigger margins, more spinning reserve, longer studies before a connection is approved. That conservatism shows up for data center developers as multi-year interconnection queues, which today gate AI buildouts more tightly than chips or capital do.

    Buffering as a Peace Treaty With Utilities

    The smart-buffer concept is conceptually simple: put a shock absorber between the grid and the GPUs. Batteries, ultracapacitors, or other fast storage charge when the compute load dips and discharge when it spikes, so the grid sees a smooth draw while the cluster behind the buffer does whatever the workload requires. Layer in intelligent controls, and the same hardware can go further — capping peak demand, riding through brief grid disturbances, or even reducing draw on request when the grid is stressed, a capability utilities call demand response.

    The business logic is compelling on paper. An operator that can credibly promise a flat or flexible load profile becomes a customer utilities want rather than one they study for years. That can translate into faster interconnection, access to sites previously deemed grid-constrained, and lower demand charges — the fees utilities levy based on a customer’s peak draw. In a market where time-to-power is the dominant competitive variable, anything that compresses the utility approval cycle has direct commercial value.

    The Economics Cut Both Ways

    Buffering is not free. Batteries sized to absorb tens of megawatts of swing add meaningful capital cost, consume space and cooling, introduce their own fire-safety and permitting considerations, and degrade with heavy cycling — and the rapid charge-discharge duty cycle of load smoothing is exactly the kind of use that ages battery cells fastest. Operators will weigh those costs against the value of faster grid access and lower peak charges, and the answer will differ by site: buffering pencils out most clearly where the grid is congested and interconnection is the binding constraint.

    There is also a partial software alternative. Some of the same smoothing can be achieved by scheduling workloads intelligently — staggering job starts, injecting dummy computation to prevent sudden power drops, or throttling training slightly during grid stress. Software costs less than batteries but sacrifices some compute efficiency and cannot deliver the instantaneous response hardware can. The likely end state is hybrid: firmware and schedulers doing coarse smoothing, with electrical buffers handling the fast transients. Vendors of batteries, power electronics, and data-center power-management software all stand to gain if buffering becomes a standard requirement rather than an exotic add-on.

    A Narrative Shift Worth Watching

    Coverage of AI and electricity over the past two years has been dominated by alarm: rising demand forecasts, delayed fossil-plant retirements, and disputes over who pays for grid upgrades. A story centered on data centers becoming better grid citizens signals a maturing conversation — one where the industry is expected not merely to consume power but to actively support grid stability. Regulators are already moving in this direction; several jurisdictions have proposed requiring large new loads to be curtailable or to bring their own flexibility.

    The strategic implication for operators is that grid behavior is becoming a design specification, not an afterthought. Facilities engineered from day one to present flexible, well-mannered load profiles will find friendlier utilities, faster approvals, and possibly favorable tariff treatment. Those that show up asking for hundreds of firm megawatts with volatile draw will increasingly wait at the back of the queue. Buffering technology, in that light, is less a gadget than an admission ticket.

    Background

    The collision between AI computing and the electric grid became one of the defining infrastructure stories of the mid-2020s. Data centers historically earned reputations as ideal utility customers — large but remarkably steady loads. Generative AI changed both variables at once: individual campuses grew from tens to hundreds of megawatts, and the synchronized nature of GPU training made demand volatile in ways the grid had rarely seen from digital infrastructure. Utilities responded with longer interconnection studies, and communities with growing skepticism about hosting new facilities.

    IEEE Spectrum, the flagship publication of the IEEE (the world’s largest technical professional organization for engineering), has covered this tension extensively. Its April 2026 report on smart buffering reflects the industry’s response phase: rather than simply requesting ever more firm power, operators are investing in storage, power electronics, and workload-management techniques that make AI facilities easier for grids to accommodate — a shift from consuming grid capacity to actively managing their footprint on it.

    Source: AI Data Centers Learn to Be Better Grid Citizens With Smart Buffers — IEEE Spectrum report on power-buffering technology that smooths AI data centers’ volatile electricity demand, published April 29, 2026.

  • Aschenbrenner’s $13.6B AI Fund Bets on Bitcoin Miners’ Power-Ready Sites

    Aschenbrenner’s $13.6B AI Fund Bets on Bitcoin Miners’ Power-Ready Sites

    Leopold Aschenbrenner, the former OpenAI researcher behind the widely read “Situational Awareness” essay, has built his AI-focused investment fund to roughly $13.6 billion and is placing a significant bet on cryptocurrency mining companies, according to an April 29 CoinDesk report. The wager is not on bitcoin itself, but on what miners already own: large, energized, grid-connected industrial sites that can be repurposed for AI computing.

    Executive Summary

    According to CoinDesk, Aschenbrenner’s fund — reported at approximately $13.6 billion in assets — is allocating capital to publicly traded crypto miners as part of a broader AI infrastructure thesis. The logic is straightforward: training and running large AI models requires enormous amounts of electricity delivered to a single campus, and the queue to get new large-scale power connections from U.S. utilities now stretches years. Bitcoin miners spent the last decade acquiring exactly those connections.

    The move matters because it signals that sophisticated AI-native capital increasingly views the data center race as a power race. If the scarce asset is an energized site rather than chips or software, then companies holding hundreds of megawatts of contracted power — even ones built for an entirely different business — become strategic real estate. Several miners have already begun converting capacity to AI and high-performance computing hosting, and a large dedicated fund leaning into that trade could accelerate the sector’s transformation.

    Power, Not Chips, Is the Chokepoint

    For most of the AI boom, the story was about GPU scarcity — the specialized chips that train and run large models. By 2026, the constraint has visibly shifted upstream to electricity. A modern AI campus can draw hundreds of megawatts, comparable to a mid-sized city, and utilities cannot energize new connections of that size quickly. Interconnection queues, substation equipment lead times, and transmission upgrades routinely add years to a project schedule.

    Bitcoin miners are an accident of history in this picture. To chase cheap electricity, they spent years locking up power contracts and building electrical infrastructure at industrial scale, often in locations other industries ignored. A miner’s site may lack the cooling, networking, and reliability engineering an AI facility needs — but it has the one thing that cannot be bought quickly: an energized grid connection. Aschenbrenner’s reported bet is a concentrated expression of that arbitrage.

    The Conversion Trade and Its Economics

    The financial case for miner-to-AI conversion rests on a valuation gap. Mining revenue is volatile, tied to bitcoin’s price and periodic “halving” events that cut mining rewards. AI hosting, by contrast, can be sold under multi-year contracts to well-capitalized customers, which markets typically reward with higher and steadier valuations. A miner that converts a site from speculative crypto revenue to contracted AI revenue can, in principle, re-rate substantially — and several miners that announced AI hosting deals in 2024 and 2025 saw exactly that kind of market response.

    The conversion itself is not trivial. AI workloads demand dense liquid cooling, high-bandwidth networking, and far higher uptime standards than mining, which tolerates interruptions. Retrofit costs per megawatt can approach greenfield data center costs. The trade works best where the site’s power capacity is large, expandable, and located acceptably close to fiber routes — which is why investors in this theme tend to price the power asset, not the existing buildings.

    A Hedge Fund as an Infrastructure Signal

    Aschenbrenner is a distinctive figure to be making this bet. He left OpenAI in 2024 and published “Situational Awareness,” a lengthy essay arguing that AI capabilities — and the industrial buildout behind them — would scale far faster than consensus expected. His fund was founded explicitly to invest around that thesis, and its reported growth to $13.6 billion suggests substantial institutional appetite for it. When a fund built on an aggressive AI-scaling worldview concentrates on power-holding companies, it is effectively a public forecast: that demand for energized capacity will outrun supply for years.

    For the infrastructure industry, the second-order effects are worth watching. Capital flowing into miners raises the price of power-rich sites for everyone, including traditional data center developers and hyperscale cloud providers pursuing the same locations. It may also pull marginal mining capacity out of crypto and into AI, tightening both markets. None of that requires the fund’s specific stock picks to be right; the flow itself moves prices.

    What Could Go Wrong

    The risks are real on both sides of the trade. If AI infrastructure demand moderates — because model efficiency improves faster than expected, or because financing conditions tighten — miners that pivoted may hold half-converted sites with neither strong crypto economics nor anchor AI tenants. Conversion timelines have already slipped at some operators, and AI customers demand delivery guarantees that mining-era organizations are not always built to meet.

    There is also concentration risk inherent in a large fund pressing a single macro thesis. A $13.6 billion vehicle moving in and out of a relatively small universe of mining equities can move those markets on entry and exit alike. Investors reading this news as validation of the miner-conversion theme should remember that a prominent buyer is evidence of conviction, not proof of outcome.

    Background

    Leopold Aschenbrenner worked on OpenAI’s safety-focused research before departing in 2024, then published “Situational Awareness: The Decade Ahead,” a book-length essay forecasting rapid AI scaling and a trillion-dollar industrial buildout of computing and power. He launched an investment fund to trade that worldview, and its reported growth to $13.6 billion by April 2026 made it one of the more closely watched AI-thesis vehicles in public markets.

    Bitcoin miners, meanwhile, entered the AI era almost by accident. Built to chase cheap electricity, the industry accumulated gigawatts of contracted, grid-connected capacity across North America. As AI demand collided with multi-year utility interconnection queues from 2023 onward, those sites acquired a second life: several miners struck AI and high-performance computing hosting deals, and the sector increasingly trades as power-infrastructure real estate rather than pure crypto exposure.

    Source: Ex-OpenAI’s Leopold Aschenbrenner bets big on crypto miners for his $13.6 billion AI play — CoinDesk report, April 29, 2026, on the AI fund’s investment push into cryptocurrency mining companies.

  • US Agencies Warn of Active Cyber Campaign Targeting Industrial Control Systems

    US Agencies Warn of Active Cyber Campaign Targeting Industrial Control Systems

    US government agencies have issued a warning about an active cyber threat targeting critical infrastructure, as reported by Fox Business on April 29, 2026. The alert concerns the control-system layer of infrastructure — including programmable logic controllers (PLCs), the small ruggedized computers that directly operate pumps, valves, breakers, and machinery in sectors such as power, water, and manufacturing.

    Details in the initial report are limited: the public reporting confirms an active campaign and a federal warning, but the underlying advisory’s specifics — which sectors, which vulnerabilities, and which actor — are not spelled out in the source item.

    Executive Summary

    The core of the announcement is straightforward: federal cybersecurity authorities believe an active campaign is underway against the systems that physically run American critical infrastructure, and they consider it serious enough to warn operators publicly. Warnings of this kind are typically issued by the Cybersecurity and Infrastructure Security Agency (CISA), often jointly with the FBI and NSA, and are directed at the operational technology (OT) side of the house — the industrial networks that sit behind, and are supposed to be separated from, ordinary corporate IT.

    Why it matters: PLCs and related industrial controllers were largely designed decades ago for reliability, not security. Many run without authentication, cannot be easily patched, and were never meant to touch the internet — yet thousands are reachable online. When an attacker moves from stealing data to manipulating a controller, the consequences shift from financial loss to physical disruption: outages, equipment damage, and safety risk.

    For infrastructure operators — including data center, network, and cloud providers whose facilities depend on building automation, power management, and cooling control systems — the warning is a prompt to treat OT exposure as a live operational risk, not a compliance checkbox.

    Why Attackers Keep Coming Back to PLCs

    A programmable logic controller is a purpose-built computer that reads sensors and drives physical equipment on a fixed loop — open this valve, start that pump, trip this breaker. The installed base is enormous, long-lived, and heterogeneous: controllers commissioned 15 or 20 years ago still run production processes today. Many speak industrial protocols (Modbus, for example) that carry no authentication at all — any device that can reach the controller on the network can often command it.

    That makes PLCs asymmetrically attractive. An attacker does not need a sophisticated exploit if the device accepts unauthenticated commands by design; they need network access. This is why federal advisories in recent years have repeatedly emphasized unglamorous basics — inventorying internet-exposed devices, changing default passwords, and putting controllers behind firewalls and VPNs — rather than exotic defenses.

    The Pattern Behind the Warning

    This alert does not arrive in a vacuum. US agencies have spent several years documenting both state-linked pre-positioning in critical infrastructure — most prominently the Volt Typhoon campaign attributed to China, which agencies said sought footholds in US infrastructure networks — and opportunistic attacks by lower-skill actors on exposed water and utility systems. Real-world incidents, from the 2021 Colonial Pipeline ransomware shutdown to intrusions at small water utilities, have shown that the gap between a network compromise and a physical consequence can be uncomfortably short.

    The honest caveat: from the initial reporting alone, we cannot tell which category this campaign falls into — a capable state actor, criminal ransomware crews, or opportunists scanning for exposed controllers. Those are very different threats with different defenses, and the distinction matters more than the headline. Until the underlying advisory’s technical details are widely digested, operators should assume the guidance applies to them and act on exposure, not attribution.

    The Economics of OT Security Debt

    Critical-infrastructure operators face a structural problem that ordinary IT does not: you cannot patch a controller that is running a water plant on Tuesday afternoon, and replacing fleets of working industrial hardware to gain security features is capital-intensive with no revenue upside. Utilities in particular operate under rate regulation that can make discretionary security spending hard to justify quickly. The result is a persistent installed base of insecure-by-design equipment — security debt that accumulates faster than refresh cycles retire it.

    The likely beneficiaries of sustained federal pressure are the OT-security specialists — firms focused on industrial asset inventory, network monitoring, and segmentation — and vendors of modern controllers with secure-by-design features. The costs land on asset owners, and disproportionately on small operators such as municipal water systems, which own critical processes but lack dedicated security staff. Any policy response that ignores that resourcing gap will under-deliver.

    What This Means for Data Center and Cloud Operators

    It is tempting for digital-infrastructure companies to read “PLC warnings” as someone else’s problem. They should not. Modern data centers are industrial facilities: building management systems, power distribution and switchgear controls, generators, and cooling plants all run on the same classes of controllers and protocols named in OT advisories. A compromised cooling or power-management controller is a facility-availability event, and at AI-era power densities the thermal margin between normal operation and equipment shutdown is measured in minutes.

    The practical checklist is well established even before this advisory’s specifics emerge: know every OT device you own, ensure none are directly internet-reachable, segment OT networks from corporate IT, eliminate default credentials, monitor industrial protocols for anomalous commands, and rehearse manual-operation fallbacks. None of that requires waiting for attribution.

    Background

    Critical infrastructure — energy, water, transportation, communications, and the industrial base — runs on operational technology: control systems designed in an era when isolation from outside networks was assumed. That assumption eroded as operators connected plants for remote monitoring and efficiency, leaving insecure-by-design devices reachable from hostile networks. The US government has responded with an escalating series of advisories and initiatives over the past decade, from post-Colonial Pipeline security directives to joint alerts on state-sponsored pre-positioning in infrastructure networks.

    CISA, created in 2018, coordinates this defense across sixteen designated critical-infrastructure sectors, most of which are privately owned — meaning federal warnings largely rely on voluntary action by companies and municipalities. The recurring theme of recent years is that the gap between attacker interest and defender readiness in OT remains wide, particularly among small utilities with limited security resources.

    Source: US warns of active cyber threat targeting critical infrastructure — Fox Business report, April 29, 2026, on a federal warning about an active campaign against critical-infrastructure control systems.