Throughline Desk · May 13, 2026

Throughline Intelligence — May 13, 2026

Markets at a Glance

U.S. CPI (April): +3.8% year-over-year, +0.6% month-over-month — highest annual rate since May 2023, above the 3.7% consensus.
Real wages: Negative for the first time since April 2023 (prices +3.8% year-over-year vs. wages +3.6% year-over-year).
Energy index (April): +17.9% year-over-year — steepest since September 2022; gasoline +28.4% year-over-year, fuel oil +54.3% year-over-year.
Fed path: CME Group data showed roughly 30% odds of a rate hike by year-end as of May 12, 2026 — a reversal from earlier 2026 cut pricing.
Retail fuel: AAA national gasoline average about $4.50/gallon as of May 12, 2026; oil trading above $100/barrel as of May 12, 2026.
Agentic AI software spend (Gartner forecast): $86.4B (2025) → $206.5B (2026) → $376.3B (2027).

The Thread

A single intelligence finding is doing more work across markets and policy. The U.S. assessment that Iran retains substantial missile capability has contributed to a Strait of Hormuz risk premium in Brent amid shipping and choke-point concerns — one factor keeping gasoline around $4.50 and feeding into April's 3.8% CPI reading. That CPI print is being priced in by markets: market-implied Fed pricing moved from cuts to roughly a 30% probability of a hike by year-end as of May 12, 2026. Real wages went negative for the first time since April 2023. One classified judgment is shaping bond yields, household budgets, and the political calendar simultaneously.

Underneath the macro, the operational layer is reorganizing along the same axis: data fusion plus autonomy, with humans increasingly downstream of the decision. CNN reported that CIA Ground Branch facilitated the March 28 car-bomb attack on a mid-level Sinaloa figure; the disclosure that Immigration and Customs Enforcement (ICE) field agents now carry a 20-million-person Palantir database on iPhones via the ELITE app; and the Pentagon's $450 million green-light for Anduril Lattice drone swarms all describe the same architecture — networked targeting collapsed onto handheld or autonomous endpoints — applied to three different mission sets.

Then there is the counter-current. A Gartner survey released May 5, 2026 of 350 large enterprises found roughly 80% cut staff after piloting automation, yet workforce-reduction rates were nearly identical between firms reporting high return on investment (ROI) and those reporting none. A prior Gartner study put agent task-failure rates near 70%. Capital is committing faster than the capability is maturing — in enterprises and, arguably, in the field systems above.

Developing

Iran missile inventory assessment [DEFENSE/WORLD] — The U.S. intelligence judgment that Iran retains substantial missile capability has contributed to an energy risk premium that helped push prices higher ahead of the April CPI reading and influenced market Fed rate expectations.
Mexico CIA disclosure [WORLD] — CNN's Tuesday exclusive reports the March 28 highway car bombing of Francisco "El Payin" Beltran as CIA-facilitated; both Washington and Mexico City have publicly denied the allegation.
Gartner AI-ROI study [AI/MARKETS] — A Gartner survey released May 5, 2026 of 350 firms has been picked up by Fortune, The Register, and CBS, with Challenger data showing 21,490 AI-attributed layoffs in April 2026 alone.

World & Markets

U.S. inflation accelerates to 3.8% as oil shock erodes real wages. The Bureau of Labor Statistics reported April CPI rose 0.6% month-over-month and 3.8% year-over-year, the highest since May 2023, above the 3.7% Dow Jones consensus. Energy drove over 40% of the monthly increase; food at home jumped 0.7%, the largest gain since August 2022. Real wages turned negative for the first time since April 2023. CME futures priced roughly 30% odds of a Fed hike by year-end as of May 12, 2026. [BLS] [CNBC] [CNN Business]
CNN: CIA Ground Branch facilitated lethal anti-cartel operations inside Mexico. A March 28 car bombing on a major highway outside Mexico City killed mid-level Sinaloa figure Francisco "El Payin" Beltran and his driver; multiple sources told CNN the strike was a targeted assassination facilitated by CIA operations officers. The strategy targets vulnerabilities throughout cartel networks, not just leadership. CIA spokesperson Liz Lyons called the report "false and salacious." Mexico's Security Secretary Omar García Harfuch "categorically" denied any foreign lethal operations on national territory. [CNN Politics] [Al Jazeera]
Australia halves renewable hydrogen funding in 2026-27 budget. S&P Global Energy reports the federal budget cut spending on key renewable hydrogen initiatives by approximately 50%, recalibrating Australia's net-zero export ambitions to Asian markets amid slower-than-expected deployment timelines. The move will ripple through equipment suppliers, project developers, and multinationals with regional hydrogen bets. [S&P Global Energy]
Asian steel mills accelerate EU Carbon Border Adjustment Mechanism (CBAM) compliance. S&P Global Energy reports Chinese, Indian, and Southeast Asian producers are stepping up investment in electric arc furnace (EAF) capacity and renewable energy partnerships ahead of CBAM's phased enforcement. Legacy blast-furnace operators face margin compression unless they secure captive renewable power or offsets. [S&P Global Energy]
[CROSS-DOMAIN] Southern California mayor to plead guilty to acting as unregistered Chinese agent. The mayor resigned Tuesday and will plead guilty to acting as an unregistered agent of the People's Republic of China, according to court filings. The case adds to a pattern of foreign-influence prosecutions targeting local officials — a vector U.S. counterintelligence has flagged as systematically underdefended. Plea specifics pending court record.

AI & Agents

[CROSS-DOMAIN] Gartner: 80% of large firms cut staff for AI, but layoffs do not generate returns. A Gartner survey released May 5, 2026 of 350 global executives at firms above $1B revenue found that roughly 80% who piloted intelligent automation reported workforce reductions — but high-ROI firms and low-ROI firms had nearly identical layoff rates. Gartner Distinguished VP Helen Poitevin: "Workforce reductions may create budget room, but they do not create return." A prior Gartner study found AI agents fail office tasks about 70% of the time. Agentic software spend is forecast at $206.5B in 2026 and $376.3B in 2027. [Fortune] [Gartner press release] [The Register]
Salesforce Agentforce moves to General Availability with "Atlas" reasoning engine. Salesforce moved its action-taking agent suite from beta to General Availability (GA), enabling autonomous workflow execution inside its customer relationship management (CRM) platform — processing refunds, rescheduling logistics. The new Atlas reasoning engine is positioned to reduce "hallucination-to-action" risk, the core safety concern for agents that take real-world actions on behalf of users. [Salesforce]
AI cited in 21,490 of 88,387 April U.S. job cuts. Challenger, Gray & Christmas data puts AI as the leading reason for layoffs for the second consecutive month, accounting for more than one in four cuts in April 2026. Cumulative 2026 AI-attributed layoffs now total 49,135 — nearly equal to all of 2025. [CBS News]
Microsoft's $1B Kenya AI data center stalls on grid capacity. The Kenyan government has indicated the facility's power requirements would demand capacity equivalent to switching off roughly half the country's grid. The project is part of Microsoft's Africa AI infrastructure push; no revised timeline has been issued. The episode illustrates the physical-infrastructure ceiling on AI buildout in energy-constrained markets. (Confirmed via viral secondary coverage; primary corporate or government statement pending.)

Defense & Cyber

Lockheed Martin awarded $2.8B for F-35 Lot 18 production. The U.S. Air Force contract covers Lot 18 airframes with advanced sensor-fusion upgrades, announced Tuesday evening. [DoD Contracts]
Pentagon greenlights $450M Anduril Lattice drone swarm deployment. The Department of Defense approved an initial 500-unit autonomous drone swarm deployment for Indo-Pacific intelligence, surveillance, and reconnaissance (ISR) missions using Anduril's Lattice artificial intelligence platform. The procurement decision is the first at-scale operational commitment to autonomous swarm ISR in the theater. [Breaking Defense]
U.S. Navy hypersonic Conventional Prompt Strike (CPS) test from Virginia-class submarine. On May 12, 2026, a test in the Pacific reached Mach 8+, demonstrating sub-launched conventional hypersonic capability — a capability the U.S. has been racing to close versus Chinese and Russian systems. [U.S. Navy]
CVE-2026-5123 (CVSS 9.8): Cisco IOS XE HTTP/2 zero-day under active exploitation. Critical remote code execution (RCE) vulnerability in Cisco IOS XE via HTTP/2, with 15+ intrusions attributed to People's Republic of China (PRC)-linked actors. Patch released May 13, 2026, Wednesday morning. Exploitation confirmed in the wild. [Cisco Security Advisory]
CVE-2026-28901 (CVSS 9.1): Microsoft Exchange privilege escalation, eight nation-state operations. Critical Exchange Server privilege-escalation flaw exploited in confirmed wild operations attributed to Russian and Chinese actors. Patch released May 12, 2026, Tuesday afternoon. [Microsoft Security Update Guide]
LockBit 4.0 exfiltrates 450 GB from Aerojet Rocketdyne, including propulsion specifications. The DoD contractor confirmed the ransomware intrusion Tuesday night; five servers disrupted. [BleepingComputer]

What Most People Missed

Real wages flipped negative — first time since April 2023. Headlines focused on the 3.8% print, but the deeper datapoint is that prices (+3.8% year-over-year) outran nominal wage growth (+3.6% year-over-year). The political economy of an inflation-driven oil shock differs from a demand-driven one: policy choices that squeeze one side of the ledger tend to expand pain elsewhere. [CNN Business]
Sheinbaum's prior threat to sanction Chihuahua officials. Before the CNN exclusive, Mexican President Claudia Sheinbaum had already threatened to sanction authorities in Chihuahua for permitting CIA personnel to participate in raids on clandestine drug labs — surfacing after two Americans reportedly working for the CIA died in a car crash. The Tuesday denials sit on top of a months-long sovereignty fight that was already live. [Al Jazeera]
Twin-brother insider wipe of 96 government databases in minutes. Speed of the destruction implies pre-staged scripts or unrevoked privileged credentials at the moment of termination — a textbook failure of identity and access management offboarding. Specific agency and recovery status pending official disclosure; primary court documentation not yet surfaced. The class of failure is the story: privileged-access lifecycle gaps at federal IT scale.
CISA flags Iranian Revolutionary Guard "Predatory Sparrow" intrusions into Israeli defense networks. Cybersecurity and Infrastructure Security Agency (CISA) advisory attributes intrusions via a SolarWinds vulnerability chain to Islamic Revolutionary Guard Corps (IRGC)-affiliated actors, affecting three Israeli defense organizations — this sits alongside the U.S. intelligence assessment that Iran retains missile capability. [CISA Known Exploited Vulnerabilities Catalog]
BlackCat (ALPHV) leaks 200 GB of BAE Systems subsidiary avionics data. The UK Ministry of Defence supplier intrusion halted production at two facilities and exposes sensitive avionics designs — a defense-industrial-base exposure with potential intelligence value beyond the financial extortion. [The Record]

What to Watch

If May CPI (released mid-June) prints at or above April's 3.8% — [WORLD/MARKETS] short-term Treasury yields could rise further, tightening financial conditions for growth-sensitive risk assets; that dynamic could force a re-evaluation of market positioning in duration and TIPS and increase political pressure to adjust naval posture in the Strait of Hormuz.
If Mexico's Sheinbaum government formally requests the recall or expulsion of named CIA personnel — [WORLD/DEFENSE] bilateral intelligence-sharing on counternarcotics could be disrupted, and would likely force renegotiation of data-sharing protocols and delay joint operations targeting fentanyl supply chains.
If Salesforce Agentforce production deployments produce a publicly disclosed "hallucination-to-action" incident — [AGENTIC] enterprise procurement timelines for action-taking agents across CRM, ERP, and finance stacks could be paused, insurers could exclude liability coverage for autonomous-action incidents, and auditors or regulators could require human-in-loop attestations for automated transactions.
If a second Cisco IOS XE or Microsoft Exchange zero-day surfaces tied to the same PRC or Russian clusters within 30 days — [CYBER] CISA could issue an Emergency Directive imposing federal agency mitigation and disconnection timelines, with downstream spillover to managed service providers and critical infrastructure operators that rely on affected stacks.
If court filings in the Southern California mayor case name specific PRC handlers or intermediary entities — [CROSS-DOMAIN] this could prompt a wave of municipal-government counterintelligence reviews and would likely lead to Department of Justice FARA investigations or civil enforcement actions targeting intermediaries.
If the Kenyan government publicly confirms the Microsoft data center capacity dispute — [AI/WORLD] hyperscaler site-selection assumptions across Sub-Saharan Africa and Southeast Asia would be re-priced, driving contract clauses that require sovereign grid guarantees and increasing capex allocations for local generation or guaranteed power purchases.

The Closer

A single classified judgment — that Iran retains substantial missile capability — is propagating through energy risk premia, gasoline prices around $4.50, an April CPI print of 3.8%, negative real wages for the first time since April 2023, and market-implied odds of a Fed hike near 30% as of May 12, 2026. Meanwhile, the same architecture that CNN reports produced the March 28 Sinaloa car bombing, the disclosure that ICE agents can access a 20-million-name Palantir ELITE dataset on mobile devices, and the $450M Anduril Lattice swarm decision is being deployed faster than Gartner's data on roughly 70% agent failure rates suggests the underlying autonomy is ready to support. The gap between deployment velocity and demonstrated reliability is the exposure no line item captures.