| Sturnella Signals |
Vol. 1 · Issue 019
Wednesday, August 26, 2026 |
Yield Control · Strategic Capital · AI-Assisted OT
Critical minerals · Energy infrastructure · Defense supply chains · Cyber
|
| |
|
In Memoriam
Dolly Parton
1946 – 2026
A singular American voice whose wit, independence and generosity reached far beyond country music. You will be missed.
|
|
This week in Sturnella Signals
The Treasury is trying to manage the long end; the bond market may have other ideas.
Scott Bessent is pushing harder against America's rising cost of borrowing just as governments on both sides of the Atlantic deploy more public capital directly into mines, processing plants and industrial capacity. Meanwhile, cyber risk is moving in the same direction: deeper into the operational systems underneath critical infrastructure.
|
Gold ~$4,650 |
Silver ~$68 |
WTI ~$80 |
Brent ~$86 |
10Y UST ~4.65% |
Metals, crude and the 10-year yield as of Wednesday, August 26
|
|
Macro & Geopolitical Signal
Bessent Is Testing the Bond Market
Editor's note: This is market commentary, not investment advice.
|
Treasury has doubled its planned long-end bond buybacks in an effort to improve market functioning and ease pressure at the long end. Stanley Druckenmiller's warning to "let the bond market speak" captures the larger risk: that Washington begins suppressing the fiscal signal instead of addressing the deficit producing it.
|
Gold: the fiscal-credibility trade is back
Gold remains around the mid-$4,600s even after July PCE came in slightly hotter than expected, as investors balance sticky inflation against Treasury intervention in the bond market. The important signal is less about the next Fed meeting than renewed concern over debt, yields and the credibility of the U.S. fiscal path.
UK: critical minerals policy becomes industrial policy
Britain's £71 million Hemerdon tungsten package combines government equity, lending and potential offtake, putting public capital directly behind domestic mining and processing. The UK is moving from talking about critical-mineral security to co-financing the physical supply chain needed to achieve it.
| Sturnella lens: This is not formal yield-curve control. But the line between debt management and active management of the market's price signal is getting considerably more interesting. |
|
|
Capital, IPO & Project Flow
State Capital Keeps Moving Down the Supply Chain
|
Serra Verde — $750M Department of War Investment Strategic Capital
USA Rare Earth · ~$1.55B capitalization · Five-year government purchase commitment
USA Rare Earth's proposed Serra Verde structure now includes a $750 million DoW investment within a roughly $1.55 billion capitalization, plus a five-year government rare-earth purchase commitment. This is strategic capital tied directly to securing non-Chinese rare-earth supply.
|
|
DOE — $500M for Critical Minerals and Batteries Seven Projects
Seven projects were selected to expand U.S. critical-mineral processing, battery manufacturing and recycling capacity. That is the middle of the supply chain, where dependence remains hardest to unwind.
|
|
DOE Critical Materials Innovation Hub — $10M for Early-Stage R&D Seven Projects
Office of Critical Minerals and Energy Innovation · Heavy rare earths, gallium, copper
DOE awarded $10 million to seven projects aimed at the early-stage research and development needed to recover and refine critical materials more efficiently for energy technologies. The Department frames the target as "leapfrog" technologies. Assistant Secretary of Energy Audrey Robertson said the work is intended to unlock new production methods that strengthen domestic supply chains and give American manufacturers access to the materials they need.
|
|
Cleveland-Cliffs — $500M Toward Middletown Works 2,300 Jobs
Ohio · ~$1B total modernization
DOE awarded $500 million toward the roughly $1 billion Ohio modernization, protecting an estimated 2,300 jobs while reinforcing domestic high-purity steel capacity.
|
|
Ivanhoe Electric — Potential $1.1B EXIM Financing Preliminary
Santa Cruz Copper Project, Arizona · Up from a prior $825M indication
EXIM issued a preliminary project letter indicating potential debt financing of up to $1.1 billion. It is not yet a financing commitment, but the direction of federal support is unmistakable.
|
|
New Found Gold — TSX Graduation Uplisting
Trading begins today under NFGC · From the TSX Venture Exchange
New Found Gold graduates to the Toronto Stock Exchange as the company moves toward a more institutional capital-markets profile.
|
| Sturnella lens: Mine finance, processing finance, steel modernization and government offtake are beginning to look less like separate policy programs and more like a coordinated industrial-capacity strategy. |
|
|
Cyber & OT Signal
AI Wrote the Script. Exposure Still Opened the Door.
CISA, the FBI, NSA, DOE and EPA warned on August 19 of an active threat targeting Siemens S7 Programable Logic Controllers (PLCs), with actors using AI-generated exploit code and internet-search platforms to identify vulnerable industrial systems across water, energy, manufacturing, chemicals and food and agriculture. The AI matters, but exposed PLCs, poor segmentation and weak remote-access controls are still what make exploitation possible.
|
The Advisory Set
• Siemens SIMATIC IoT2050 Advanced. CISA's newest ICS batch includes a missing-authentication vulnerability capable of unauthenticated code execution on the industrial edge device. Siemens has released a fix.
• Bendix EC80. Exploitation can affect operational vehicle functions including ABS, steering assistance, shifting and traction control. An unusually physical consequence for a cyber advisory.
• Ebyte NE2-D11 / FURUNO FA-50 / ZoneMinder. The August 25 advisory set spans industrial wireless communications, maritime tracking and surveillance infrastructure, with impacts ranging from unauthorized configuration changes to remote code execution.
• Gitea CVE-2026-60004, now KEV. CISA added the CVSS 9.8 Gitea remote code execution flaw to the Known Exploited Vulnerabilities catalog. Ordinary repository write access can be converted into command execution as the Gitea service account. Self-hosted industrial and defense environments should treat this as a patch-now issue.
|
CISA exercise: "A Tale of Two SOCs"
Two organizations faced similar red-team tradecraft and both were compromisable. One detected and contained the intrusion substantially better. The differentiator was tuned detection, communication, identity and cloud visibility, and empowered defenders.
| Sturnella lens: Effective governance requires visibility, as unseen dependencies are ungoverned dependencies. That applies equally to the PLC at the plant, the gateway attached to it, the code repository supporting it and the vendor sitting three tiers below the prime. |
|
|
Hire & Fire
Quiet in the Core; Watch One Layer Out.
No major new layoff wave surfaced this week directly across critical minerals, defense primes or U.S. energy-infrastructure operators. The weaker signal remains adjacent manufacturing and logistics, the industries that manufacture, transport and consume industrial materials, and therefore a useful early indicator for metals and equipment demand.
The counter-signal this week is Cleveland-Cliffs: DOE says the Middletown Works investment will protect approximately 2,300 industrial jobs.
|
|
What we are watching next
• Treasury: Whether expanded buybacks actually hold down long-end yields, or merely produce another temporary rally.
• Gold: Whether fiscal concerns continue overpowering the effect of sticky inflation and a potentially more restrictive Fed.
• Hormuz: Whether Iran-Oman negotiations translate into materially improved shipping conditions through the Strait.
• Serra Verde: Closing mechanics following the August 28 shareholder vote.
• OT: Whether the Siemens S7 activity progresses from opportunistic exposure and exploitation into documented disruptive operations.
• UK minerals: Whether Hemerdon becomes a template for government-backed rare-earth, magnet or additional processing projects.
|
|
|
Where We'll Be
Events & Speaking Engagements
Sep 18 | BSidesCache Logan, Utah From SaaS to SCADA: Understanding OT Threats in the Wasatch Front's Next Cybersecurity Cycle. |
Sep 22 | Defense TechConnect — Poster Presentation Sep 22-24 · National Harbor, Maryland From Compliance Gap to Contract Risk: CMMC Readiness for Defense Tech and Dual-Use Companies. |
Sep 24 | 2026 Phoenix Security and Audit Conference Phoenix, Arizona · 3:15 PM · Speaking |
Oct 16 | Cyber Cheyenne Cheyenne, Wyoming SEC Means Business: A GRC Guide to Cybersecurity and Disclosure Rules. |
Oct 28 | Women in Mining Nevada Nevada · Lunch & Learn From Mine Site to Board Packet. |
Nov 5 | University of Utah Salt Lake City, Utah Mining Meets Risk: Cybersecurity and Operational Resilience on the Modern Mine Site. |
|
|
Field Note
The Nuclear Buildout Has a Hidden Requirement: Risk Infrastructure
Why the value of the next generation of nuclear companies will depend on more than technology, backlog and capital. Read the full article →
It belongs next to this week's capital section. When governments move from regulating a sector to financing it, buying from it and underwriting its cost of capital, the diligence question shifts too. Technology and order book stop being the whole story, and the ability to govern operational, safety and supply-chain risk becomes part of what the company is actually worth.
|
|
The Second Line
Governments are no longer simply regulating strategic supply chains. They are financing them, buying from them and, in some cases, trying to influence the cost of the capital underneath them.
That makes this week's stories about Treasury bonds, tungsten, rare earths, steel and industrial cybersecurity less disconnected than they first appear. They are all questions about who controls the infrastructure underneath economic and national security.
|
|
Sturnella
At the intersection of cyber, capital, and national security.
For informational purposes only. This newsletter does not constitute investment, legal, accounting, or cybersecurity advice. Market information is time-sensitive and may change after publication. Verify transaction, financing, event, and regulatory details before acting.
|
