Cybersecurity and software have the clearest confirmation. Semiconductor withdrawals challenge strong operating results, while grid and housing inflows anticipate improvement before prices validate it.
The thematic ETF map points to a market assigning greater value to proven demand and less confidence to the financing of future growth. This morning’s news emphasizes chip competition, AI funding constraints, security risks and persistent energy disruption. The investment distinction is where those developments strengthen earnings visibility and where they raise the cost of delivering expected growth. Our preference is for cybersecurity and selected software, with more selective exposure to the physical AI buildout.
| Theme / ETF | 1W return | 1W net flow ($m) | 1M return | 1M net flow ($m) |
| Cybersecurity / CIBR | −0.31% | +251.9 | +14.20% | +1,209.4 |
| Cybersecurity / BUG | −0.08% | −13.7 | +21.60% | +270.0 |
| Software / IGV | +0.11% | +291.3 | +9.61% | +343.6 |
| Cloud software / WCLD | +2.69% | −5.2 | +11.42% | −13.2 |
| Semiconductors / SMH | −6.56% | −1,061.0 | +3.95% | −1,631.8 |
| Semiconductors / SOXX | −7.57% | −121.8 | +3.44% | −1,305.6 |
| AI and technology / AIQ | −1.69% | +104.0 | +3.03% | +108.9 |
| Grid infrastructure / GRID | −3.04% | +145.5 | −0.95% | +145.9 |
| Nuclear energy / NLR | −8.43% | −26.4 | −11.50% | −102.0 |
| Oil and gas producers / XOP | +3.09% | −7.5 | −0.32% | +61.6 |
| Oil services / OIH | −0.71% | −18.9 | −7.60% | −15.5 |
| Gold / GLD | −0.03% | −100.3 | −4.17% | +1,136.6 |
| Homebuilders / ITB | −3.40% | +105.4 | −5.40% | +392.1 |
| Homebuilders / XHB | −3.41% | +9.5 | −3.95% | +292.2 |
Positive flows indicate net creations; negative flows indicate net redemptions. Returns and flows use matching trailing periods from the supplied October 13 file.
Cybersecurity has the strongest agreement between capital demand, monthly returns and the business narrative. CIBR, HACK and BUG attracted a combined $1.74 billion over one month. The intensity matters: CIBR’s inflow equaled approximately 6.3% of its reported assets, while BUG’s reached 11.8%. Those are substantial additions. Operating evidence supports the theme: Palo Alto Networks reported fiscal fourth-quarter revenue growth of 34% and remaining performance obligations growth of 34%. These companywide figures do not measure industrywide organic growth, but they establish contracted demand beyond the security headlines. Palo Alto Networks
The opportunity is that greater AI adoption creates more systems, identities and workflows to protect. The risk is that investors have already priced in considerable success: BUG rose 21.60% over one month but experienced weekly withdrawals. Cybersecurity can have resilient customer spending while its stocks remain sensitive to valuation and interest rates. The demand thesis supports selective additions on weakness; it provides less justification for assuming the recent pace of appreciation will continue.
Software’s support is becoming more visible. Approximately 85% of IGV’s monthly net inflow arrived in the latest week—a stronger indication of recent commitment than its 9.61% monthly return alone. Microsoft’s July 29 earnings call reported 43% Azure revenue growth and more than 30 million paid Microsoft 365 Copilot seats. Adoption therefore has operating evidence behind it. However, Microsoft also reported pressure on cloud gross margins from infrastructure investment and increased usage. AI revenue growth and AI profitability require separate judgments. microsoft.com
The contrast with WCLD is instructive: an 11.42% monthly gain accompanied withdrawals equivalent to approximately 4.4% of reported assets. The price recovery has not persuaded investors to add capital consistently. Cheaper models could improve application economics, but they could also make undifferentiated products easier to replicate. Our preference is for vendors demonstrating paid adoption, customer retention and cash generation; a software label alone offers little assurance.
Semiconductors present the central conflict. SMH and SOXX lost a combined $2.94 billion over one month even though both retain positive monthly returns. Their weekly declines reveal how quickly leadership has weakened. Yet Broadcom’s September 2 release reported $16.7 billion of quarterly AI semiconductor revenue and guided to $21.7 billion for the following quarter. That guidance predates this week’s selling, but argues against equating withdrawals with an established collapse in operating demand. Broadcom Inc.
The market may instead be reducing confidence in how much growth can be financed and how profitable it will be. Broadcom’s June announcement of a platform with Apollo and Blackstone, launched with a $35 billion financing tranche, illustrates how material external capital has become to expansion. Broadcom Inc. Our interpretation is that investors are demanding a larger margin of safety around customer funding, order delivery and future returns. Custom-chip competition can redistribute revenue among suppliers without eliminating semiconductor spending. A stronger bullish signal would combine stable customer commitments, realized revenue and an end to persistent withdrawals. AIQ’s weekly inflow despite a declining price shows that selected AI portfolios still attract capital.
Grid infrastructure offers the most credible early opportunity, with an important timing gap. GRID’s $145.5 million weekly inflow accounts for almost all its monthly net inflow, while its price declined 3.04% over the week. Eaton’s second-quarter release reported 41% growth in the rolling twelve-month average of Electrical Americas orders and 43% growth in total electrical backlog. Equipment demand is already entering company order books. eaton.com
Nevertheless, a grid bottleneck does not guarantee every proposed data center will be built. The IEA projects data-center electricity consumption rising from 485 TWh in 2025 to 950 TWh in 2030, while explicitly identifying capital-market access as a constraint on expansion. IEA Grid investment also serves utility and industrial demand, broadening its potential support beyond AI. Our preference is for equipment suppliers with funded orders and demonstrated margins. NLR’s simultaneous monthly decline and withdrawals show that the power-demand narrative is receiving selective endorsement across technologies.
Energy remains a useful hedge despite limited flow confirmation. XOP’s 3.09% weekly gain despite withdrawals contrasts with OIH’s weaker performance. That is consistent with investors valuing near-term commodity exposure more than a broad expansion in oil-service spending. The EIA’s October outlook assumes constrained Middle East oil flows through the fourth quarter and identifies depleted inventories and shipping costs as sources of price risk; its forecast inputs were finalized October 1. eia.gov
The portfolio implication is significant: sustained crude strength can support producers while keeping inflation and financing costs elevated for AI infrastructure, housing and other capital-intensive themes. Diplomacy and a lasting recovery in physical oil flows would weaken the hedge case and improve conditions for those rate-sensitive opportunities. GLD’s monthly inflow alongside a negative return similarly shows that demand for protection does not guarantee immediate hedge effectiveness.
Housing is the largest contrarian commitment relative to fund size. Monthly inflows into ITB and XHB equaled approximately 16.6% and 19.5% of their reported assets, respectively, while both declined. That scale deserves attention, but prices have not validated the purchases. Waller’s October 8 speech supported further tightening if the economy develops as expected, establishing a policy hurdle to the recovery thesis. Federal Reserve Board Housing buyers need lower borrowing costs and firmer order trends; strong inflows alone cannot offset deteriorating affordability.
For thematic allocations, the strongest current case is profitable AI adoption and security spending. Grid infrastructure warrants measured exposure where order books support the outlook. Semiconductor selling creates potential opportunity, but requires renewed funding and earnings confirmation. Energy retains value as protection against supply-driven inflation. The decisive pivot is whether inflation and financing pressures ease while AI revenue growth holds up. If that combination emerges, the opportunities attracting capital despite weak prices could gain broader support.
Primary sources
- Palo Alto Networks fiscal Q4 and full-year 2026 results—September 1: revenue, contracted obligations and profitability.
- Microsoft fiscal Q4 2026 earnings call—July 29: Azure growth, paid Copilot adoption and cloud margins.
- Broadcom fiscal Q3 2026 results—September 2: AI semiconductor revenue and guidance.
- Broadcom, Apollo and Blackstone financing platform—June 9: announced external funding.
- Eaton Q2 2026 results: electrical orders and backlog.
- IEA, Key Questions on Energy and AI, 2026: electricity-demand projections and financing constraints.
- EIA, October 2026 Short-Term Energy Outlook: oil-flow assumptions, inventories and shipping pressures.
- Federal Reserve, Waller speech—October 8: inflation risks and monetary tightening.
Data and methodology: ETF figures come from the supplied October 13 CSV; morning developments come from the supplied news compilation. Flow percentages use reported current AUM. Weekly periods overlap monthly periods. Flows do not identify investor motives or prove transfers between themes. Company guidance reflects its publication date.
.csv data sourced from FactSet Research Systems Inc.
Disclaimer: For informational purposes only; not individualized investment advice. ETFs involve risk, including loss of principal. Thematic funds may carry concentrated industry and valuation risks. Past performance, flows and management forecasts do not guarantee future results.
