Dear readers,
On Friday we wrote that the burden of proof sat squarely on the bulls — that a rally built on ceasefire hopes needed the ceasefire to hold. Over the weekend, we got our answer, and it was messy.
Iran briefly reopened the Strait of Hormuz, and crude oil futures reacted with the kind of violence that only a crowded trade can produce: WTI plunged more than 12%, careening toward $83. Then Tehran reversed course, citing the ongoing US blockade of its ports. A staggering 128 tankers carrying 160 million barrels of oil remain stranded in the Persian Gulf. The strait giveth and the strait taketh away — all within hours.
Wall Street’s response? Indifference. The S&P 500 surged past 7,100, capping a run that has added more than $7 trillion in market capitalization since late March. The Nasdaq locked in a 13-day winning streak, its longest since 1992.
On Friday we asked whether the market was front-running a peace dividend that hadn’t been delivered. The answer, apparently, is that the market has stopped caring about the physical war altogether. It has found something else to worry about.
The Recovery That Defies the Wreckage
Three weeks. That is all it took for the S&P 500 to travel from the depths of geopolitical panic to fresh all-time highs. The macro data offers partial justification — the US economy added 178,000 jobs in March, and analysts have revised 2026 S&P earnings growth upward by nearly three percentage points.
But the valuation picture is less forgiving. The Shiller PE ratio sits at its second-highest reading in 155 years. March’s Producer Price Index quietly printed at 4%, a three-year high. The market is choosing to look through the physical disruption — 20% of global oil demand bottlenecked at Hormuz — because it has identified a threat it considers far more durable.
The Cyber-Defense Supercycle
On Friday we detailed how Anthropic’s “Claude Mythos” generated 181 working Firefox zero-day exploits in benchmark testing, a capability leap that prompted the US government to restrict a version of the model to federal agencies. That was the theoretical warning. This week delivered the practical one.
The Cybersecurity and Infrastructure Security Agency and major tech vendors issued an urgent mandate to patch 13 critical VPN vulnerabilities affecting Ivanti, Fortinet, and Palo Alto Networks. These are not hypothetical risks. Active exploitation is underway, including unauthenticated remote code execution and deployment of the OVERSTEP rootkit.
The numbers are accelerating. Kaspersky reports that ransomware attacks on educational institutions spiked 69% year-over-year. Ransomware gangs — Qilin, Akira, Dragonforce — accounted for 40% of all global attacks last month. The enterprise security model, built around perimeter defense and periodic patching, is buckling under the weight of threats that now operate at nation-state sophistication.
Russian intelligence has launched phishing campaigns targeting US government and military personnel on Signal and WhatsApp — not by breaking end-to-end encryption, but by compromising the human beings using it. When the weakest link is the user, no protocol can save you.
The Surveillance Paradox
The geopolitical dimension of cybersecurity is sharpening in ways that blur every familiar boundary. Chinese state media outlet Xinhua is pushing the claim that US-manufactured communication devices in Iran failed en masse during recent attacks — an attempt to brand America as a surveillance state with sabotage capabilities embedded in its exports.
Domestically, the picture is no less unsettling. A new report revealed that the FBI successfully extracted a suspect’s deleted Signal messages from an iPhone’s push notification database, bypassing the app’s encryption entirely. When consumer privacy tools, enterprise security infrastructure, and military intelligence operations occupy the same software stack, cybersecurity stops being an IT line item. It becomes mandatory capital expenditure — the kind companies cannot defer and governments cannot underfund.
Bitcoin at $78,000 and the Coinbase Concentration Problem
On Friday we tracked Bitcoin blowing through the $76,000 resistance level. Over the weekend, it pushed past $78,000, a two-month high that drove the global crypto market cap to $2.61 trillion.
BlackRock’s Bitcoin ETF alone absorbed more than $817 million in recent inflows. The institutional demand is relentless. But the infrastructure supporting that demand has developed a structural flaw that deserves more attention than it is getting.
Coinbase Custody now holds 84% of all US spot Bitcoin ETF assets — roughly $77 billion out of $91.7 billion total. The OCC granted Coinbase a National Trust Charter earlier this month, which provides regulatory cover but does nothing to address the concentration itself. The decentralized revolution has, through Wall Street’s financialization of crypto, produced a massive single point of failure. Investors fleeing centralized geopolitical risk are parking $77 billion of supposedly decentralized assets in one corporate vault. The irony writes itself.
The Bottom Line
The market’s ability to shrug off the Hormuz standoff is not irrational. It is a reallocation of focus. The physical supply chain will eventually clear — even if it takes months to move 128 tankers. But the vulnerabilities in our digital infrastructure do not resolve on ceasefire timelines. They compound.
As Q2 2026 deepens, the real question is not when the physical blockades end. It is whether the companies building digital defenses can scale fast enough to match threats that are scaling faster. That is where the capital is flowing, and that is where the conviction trade of this cycle will be won or lost.
I hope you enjoy the rest of your weekend.
Best regards,
The StocksToday.com Editorial
