每个工作日，吉姆·克雷默的CNBC投资俱乐部都会发布“收盘冲刺”——一份可操作的午后更新，正好赶在华尔街交易最后一小时之前。股市下跌，本周的抛售已蔓延至科技股之外。道琼斯指数是周五最大的输家，跌幅超过1%，防御性股票加入了本周以疲软AI交易为主的跌势。科技板块也有亮点，如网络安全和芯片股，使该板块当日微幅收涨，但不足以让标普500指数和纳斯达克指数摆脱下跌。
Every weekday, the CNBC Investing Club with Jim Cramer releases the Homestretch — an actionable afternoon update, just in time for the last hour of trading on Wall Street. Stocks are lower as this week's selling goes beyond tech. The Dow is the big loser Friday, down more than 1% as defensive stocks join what has largely been a weaker AI trade this week. There are some bright spots in technology, like cybersecurity and chip stocks, keeping the sector modestly in the green on the day but not enough to keep the S & P 500 and Nasdaq out of the red.
俱乐部持仓股美光科技和英特尔上涨。唯一另一个上涨的板块是能源，表现强劲。这是因为中东局势紧张升级，推高油价。美国基准西德克萨斯中质原油（WTI）升至每桶103美元以上。国际布伦特原油突破116美元，创六个月新高。油价高企加上近期政府物价数据升温，使通胀担忧成为焦点，市场静待下周美联储会议。
Club names Micron and Intel are higher. The only other positive sector is energy, which is having a strong session. That's because oil prices are surging on rising tensions in the Middle East. The U.S. benchmark West Texas Intermediate crude is above $103 per barrel. International Brent topped $116 for a six-month high. These elevated oil levels and recently hotter government price data are keeping inflation fears front and center ahead of next week's Federal Reserve meeting.
据CME“美联储观察”工具，美联储为期两天的会议结束后，周三下午加息的概率相当低，仅略高于10%。市场预期12月加息的概率近78%。如果成行，这将是美联储2026年的第二次加息，继9月首次加息后，那是三年来首次加息。就本周而言，道指微涨，而标普500指数和纳斯达克指数微跌。帕洛阿尔托网络和CrowdStrike是周五及本周的赢家。
According to the CME FedWatch tool, the odds are pretty low, just over 10%, for an interest rate hike Wednesday afternoon following the central bank's two-day gathering. The market puts the chances of a December rate increase at nearly 78%. If that happens, it would be the Fed's second rate hike in 2026 following the one in September, which was the first in three years. For the week, the Dow is modestly higher, while the S & P 500 and Nasdaq are modestly lower. Palo Alto Networks and CrowdStrike are our winners Friday and for the week.
原因在于？研究人员发现，AI可利用PHP中的安全漏洞，PHP是一种用于近70%网站的编程语言，属于应用最广泛的服务器端语言之一。这些漏洞已为人所知多年，但利用它们一直被认为对黑客而言过于困难且耗时。
The reason? Researchers discovered that AI could exploit security flaws in PHP, a programming language used on nearly 70% of websites, among the most widely used server-side languages. The vulnerabilities had been known for years, but exploiting them was considered too difficult and time-consuming for hackers.
AI 改变了这一局面，它找出了如何入侵脆弱服务器、潜在窃取敏感信息并控制网站的方法。这一发现引发了政府的紧急预警，并促使各方争相安装安全补丁，因为漏洞细节提前泄露了。CrowdStrike 首席执行官乔治·库尔茨周五对 CNBC 表示：“这影响着数千万台面向互联网的服务器。”尽管补丁已于周三发布，但许多过时版本的 PHP 仍在使用中，而且该补丁几乎肯定无法修复 PHP 的所有问题。
AI changed that, figuring out how to break into vulnerable servers, potentially steal sensitive information, and take control of websites. The discovery prompted urgent government warnings and a rush to install security fixes after details of the vulnerabilities leaked ahead of schedule. "This affects tens of millions of internet-facing servers," CrowdStrike CEO George Kurtz told CNBC on Friday. Although patches were released Wednesday, many outdated versions of PHP are still in use, and the patch almost certainly didn't fix all of PHP's problems.
库尔茨警告说：“在未来几个月里，你将看到大量因该漏洞导致的入侵事件发生。”更大的启示是，AI 正使复杂的网络攻击变得更容易、更廉价，从而增加了对先进网络安全防御的需求。库尔茨表示，CrowdStrike 观测到的 AI 驱动攻击从 7 月到 9 月每月翻倍。“除非你使用防御性 AI 来对抗进攻方的所作所为，否则这几乎变得不可持续，而这正是 CrowdStrike 专注的方向，”他说。
"You're going to see a lot of breaches happening in the coming months from this," Kurtz warned. The bigger takeaway is that AI is making sophisticated cyberattacks easier and cheaper to carry out, increasing the need for advanced cybersecurity defenses. Kurtz said AI-powered attacks observed by CrowdStrike doubled each month from July through September. "It almost becomes unsustainable unless you're using defensive AI to be able to combat what the offense is doing, and that's what CrowdStrike is focused on," he said.
这一日益增长的威胁强化了我们的信念，即网络安全是长期受益于 AI 的赢家。我们周五决定在股价大涨后减持 CrowdStrike，纯粹是为了将仓位调整至合适规模，并非对业务信心发生改变。CrowdStrike 在我们投资组合中的权重已膨胀至近 5%。此次减持将其降回 4.25%，并锁定了 2024 年底买入股票约 187% 的收益。
That growing threat reinforces our conviction in cybersecurity as a long-term AI winner. Our decision Friday to trim CrowdStrike after a strong rally was strictly about right-sizing our position, not a change in confidence in the business. CrowdStrike's weighting in our portfolio had swelled to nearly 5%. The trim brought it back down to 4.25% and secured a gain of roughly 187% on stock purchased in late 2024.
下周是财报季最繁忙的一周。标普 500 指数成分股中约三分之一将发布季度业绩，其中包括投资组合中的 11 家公司。周二，波音将在开盘前发布业绩。周三上午是 GE Vernova，晚上则是 Alphabet、微软和联邦快递。林德和礼来将于周四开盘前发布，而亚马逊、英特尔、星巴克和联邦快递货运将于周四晚上发布。()
Next week is the busiest of earnings season . About a third of the S & P 500 is scheduled to report quarterly results, including 11 companies in the portfolio. On Tuesday, it's Boeing before the opening bell. Wednesday features GE Vernova in the morning and Alphabet , Microsoft , and FedEx in the evening. Linde and Eli Lilly report before Thursday's open, while Amazon , Intel, Starbucks , and FedEx Freight are out that evening. ()