CIBR

CrowdStrike Just Hacked The AI Boom: The Cybersecurity ETF Trade Taking Shape
Investors are betting the AI boom won’t replace cybersecurity software—it will fuel its next growth cycle. Following a record quarterly report from CrowdStrike Holdings Inc. (NASDAQ:CRWD), a sector-wide rally in cybersecurity ETFs signals that Wall Street is pricing in a massive wave of AI-driven security spending.

CrowdStrike’s shares surged more than 19% Thursday, lifting the broader cybersecurity complex. The First Trust Nasdaq Cybersecurity ETF (NASDAQ:CIBR) gained about 7.6% at one point, and the Amplify Cybersecurity ETF ARCA:HACK) gained more than 8%.

The ETF rally is important because it shows investors are not simply rewarding one company’s earnings beat. They are increasingly pricing in a broader AI-driven cybersecurity spending cycle.

CIBR, HACK Become Key AI-Security Plays

Both funds offer investors diversified exposure to the companies positioned to benefit from that trend.

The CIBR ETF holds 42 securities, with Palo Alto Networks, Inc. (NASDAQ:PANW) accounting for 9.17% of the portfolio. CrowdStrike and Fortinet, Inc. (NASDAQ:FTNT) are also among its largest positions, while other major cybersecurity names include Zscaler, Inc. (NASDAQ:ZS) and Okta, Inc. (NASDAQ:OKTA). These names are all surging on Thursday, with PANW up 14%, FTNT and ZS up more than 9% each, and OKTA up 29%.

Meanwhile, HACK offers another diversified route. HACK tracks an index of 23 companies involved in cybersecurity hardware, software and services and was the first dedicated cybersecurity ETF when it launched in 2014. All the big names in this space are a part of the holdings in this fund as well.

The fund was up more than 8% on Thursday.

That makes the funds particularly relevant following Thursday’s earnings-driven rally.

CrowdStrike reported $1.47 billion in quarterly revenue, up 25.8% year over year, while annual recurring revenue reached $5.84 billion. Net new ARR hit a record $333 million.

But the more important development for the cybersecurity ETF trade is what is happening underneath those numbers.

AI agents are creating new digital identities, permissions, endpoints and connections to corporate systems. Those systems must be authenticated, monitored and protected, potentially expanding cybersecurity demand rather than replacing it.

CrowdStrike has already moved into this market. In June, the company unveiled Continuous Identity for AI Agents, designed to continuously assess and authorize AI-agent activity based on ownership, calling identity and real-time risk.

The Rally Is Bigger Than CrowdStrike

The read-through is already spreading across the sector.

Okta shares jumped sharply after its earnings report, while Zscaler and SentinelOne, Inc. (NYSE:S) also rallied on Thursday. Palo Alto Networks and other cybersecurity stocks joined the broader move.

That breadth matters for ETFs.

Rather than trying to determine which individual cybersecurity company will capture the largest share of AI-security spending, funds such as CIBR give investors exposure across endpoint security, cloud security, identity protection, network security and other parts of the cybersecurity stack.

AI Could Expand the Cybersecurity Addressable Market

The more autonomous AI becomes, the more access enterprises are likely to give software agents. Those agents can interact with applications, databases, cloud environments and other agents at machine speed, creating a new layer of security risks.

CrowdStrike’s results provide an early indication that companies are willing to pay for protection against those risks.

very AI Agent Needs a Gatekeeper: 3 Cybersecurity Stocks to Watch
Artificial intelligence was supposed to make security software easier to replace. Instead, it is giving cybersecurity companies more work.

Cybersecurity stocks have quietly outrun the rest of software over the past month.

The Amplify Cybersecurity ETF (NYSE:HACK) gained 7.3% and the First Trust Nasdaq Cybersecurity ETF (NASDAQ:CIBR) 6.4%, against 2.8% for the iShares Expanded Tech-Software Sector ETF (BATS:IGV) and a 0.9% decline for the S&P 500.

The reason is a reversal in the AI narrative.

The rise of autonomous agents creates new attack surfaces, new identities to manage and new governance requirements. Each one adds to the security budget instead of shrinking it.

Bank of America acted on that view Friday, raising price targets on CrowdStrike Holdings Inc. (NASDAQ:CRWD), Okta Inc. (NASDAQ:OKTA) and SailPoint Inc. (NASDAQ:SAIL).

Why AI Agents Could Expand Cybersecurity Spending

"Every AI agent ultimately requires authentication, authorization, monitoring, and heightened governance," Bank of America analyst Tal Liani said in a Friday note.

That mechanism favors identity-security providers Okta and SailPoint.

Their software decides which users and machines can access corporate systems and what they can do inside them.

The bank raised its price target on Okta to $200, based on 11 times estimated calendar 2027 enterprise value to sales, up from nine times.

SailPoint went to $22, on eight times the same measure, up from seven times.

The opportunity extends beyond identity.

Companies also need tools spanning endpoints, networks and cloud workloads to detect agents behaving outside their instructions.

That supports platform vendors such as CrowdStrike, which saw its target lifted to $260, on 36 times estimated calendar 2027 sales, up from 32 times.

Liani tied the premium to product announcements at the company’s Fal.Con conference in early September, including Guardian, a tool for detecting and responding to AI activity, and SafeMind, a system meant to let security teams run frontier AI models safely.

"We believe the market is increasingly pricing in a step-function increase in cyber risk," Liani said.

The analyst also highlighted two recent signals.

Anthropic’s chief executive Dario Amodei warned that within six to 12 months a swarm of agents could do billions of dollars of damage online.

OpenAI disclosed cases of agents inserting instructions, hiding mistakes and trying to work around restrictions.

industry.
Flag CanadaAugust 16, 2025
Cyber attack on an online-gaming technology provider from Canada
Bragg Gaming Group - Toronto, Ontario, Canada
Bragg Gaming Group Announces Cyber Security Incident
https://investors.bragg.group/pr/news-de...
Flag FranceAugust 15, 2025
Cyber attack on an association of mountain guides in France
Compagnie des Guides de Chamonix - Chamonix-Mont-Blanc, Auvergne-Rhône-Alpes, France
Une cyberattaque cible la compagnie des guides de Chamonix le jour de sa fête
https://www.ledauphine.com/faits-divers-...
Flag GermanyAugust 2025
Cyber attack on a municipality in Germany?
Hoppegarten, Brandenburg, Germany (Landkreis Märkisch-Oderland)
Die Gemeindeverwaltung Hoppegarten wurde vom Landeskriminalamt über einen voraussichtlich bevorstehenden Angriff auf die IT-Infrastruktur unserer Verwaltung in Kenntnis gesetzt.
https://www.gemeinde-hoppegarten.de/
Flag GermanyAugust 2025
Cyberattack on websites of a political parties in Germany
Magdeburg, Sachsen-Anhalt, Germany
DDoS: CDU, AfD und SPD-Websites zeitweise offline
https://www.it-daily.net/shortnews/ddos-...
Flag PolandAugust 13, 2025
Cyber attack on the water supply of a city in Poland
Poland
Wicepremier ujawnia: Atak na infrastrukturę wodną w Polsce. Służby zapobiegły katastrofie
https://www.onet.pl/informacje/onetwiado...
Flag UKAugust 12, 2025
Cyber attack on a telecommunications provider
Colt Technology Services - London, United Kingdom
Network Status
https://www.colt.net/status/
Colt Telecom attack claimed by WarLock ransomware, data up for sale
https://www.bleepingcomputer.com/news/se...
Flag FranceAugust 11, 2025
Cyber attack on a fintech company in France
Linedata Services - Neuilly-sur-Seine, Île-de-France, France
Linedata Victim of a Cybersecurity Incident on One of Its Businesses
https://www.linedata.com/linedata-victim...
Flag South KoreaAugust 11, 2025
Ransomware at an online bookstore and ticketing platform in South Korea
Yes24 / 예스24 - Seoul, South Korea
Yes24 down again after cyberattack, restored by afternoon
https://www.koreaherald.com/article/1055...
Cyber incidents at the same organization:
June 9, 2025 - Seoul, : Ransomware at an online bookstore and ticketing platform in South Korea
Flag USAAugust 11, 2025
Cyber incident at the attorney general of Pennsylvania, USA
Harrisburg, Pennsylvania, USA (Dauphin County)
Pennsylvania AG’s systems down after ‘cyber incident’
https://statescoop.com/pennsylvania-ag-d...
Flag ArgentinaAugust 9, 2025
Socia media accounts of an energy supply company in Argentina hacked
Empresa Provincial de Energía de Córdoba (EPEC) - Córdoba, Argentina
Hackearon las redes de EPEC: el comunicado de la empresa y recomendaciones para usuarios
https://www.cba24n.com.ar/cordoba/hackea...
Flag AustraliaAugust 9, 2025
Cyber attack on a university in Australia
University of Western Australia - Perth, Western Australia, Australia
University of Western Australia suffers major data breach, staff and students locked out
https://www.abc.net.au/news/2025-08-11/u...
Cyber incidents in the same industry:
January 28, 2025 - Fremantle, Western Australia: Cyber attack on a university in Australia
Cyber incidents at the same organization:
July 2022 - Perth, Western Australia: Unauthorized access at a university in Australia
Flag CanadaAugust 8, 2025
Cyber attack on the Canadian parliament
House of Commons - Ottawa, Ontario, Canada
House of Commons hit by cyberattack from 'threat actor': internal email
https://www.cbc.ca/news/politics/house-o...
Flag GermanyAugust 7, 2025
Cyber attack on an IT service provider in Germany
Morgenstern AG - Reutlingen, Baden-Württemberg, Germany (Landkreis Reutlingen)
Am Donnerstag, den 7. August, konnte die MORGENSTERN-Gruppe einen versuchten Cyberangriff erfolgreich stoppen.
https://www.morgenstern.de/
Morgenstern AG Opfer eines Cyberangriffs (7. August 2025)
https://www.borncity.com/blog/2025/08/12...
Flag USA2025
Unauthorized access at the U.S. judicial administration
Administrative Office of the U.S. Courts - CM/ECF, PACER - Washington, D.C., USA
Federal court filing system hit in sweeping hack
https://www.politico.com/news/2025/08/06...
Flag France2025
Airline from France affected by cyber attack on a service provider
Air France - Roissy-en-France, Île-de-France, France
Air France and KLM disclose data breaches impacting customers
https://www.bleepingcomputer.com/news/se...
Flag FranceAugust 6, 2025
Cyber attack on a hospital in France
Centre Hospitalier du Gers - Auch, Occitanie, France
Le Centre hospitalier du Gers ciblé par une cyberattaque, une enquête est en cours
https://www.ladepeche.fr/2025/08/07/le-c...
Flag France2025
Cyber attack on a telecommunications provider in France
Bouygues Telecom - Paris, Île-de-France, France
Bouygues Telecom annonce avoir été victime d’une cyberattaque
https://www.corporate.bouyguestelecom.fr...
Cyber incidents at the same organization:
March 18, 2023 - Paris, : Cyber attack on a telecommunications provider in France
Flag Netherlands2025
Airline from the Netherlands affected by cyber attack on a service provider
KLM - Amstelveen, Noord-Holland, Netherlands
KLM informeert klanten over incident met persoonsgegevens
https://nieuws.klm.com/klm-informeert-kl...
Flag PakistanAugust 6, 2025
Cyber attack on an oil and gas company in Pakistan
Pakistan Petroleum Limited (PPL) - Karachi / كراچى, Pakistan
Hackers paralyze PPL IT systems, demand ransom; financial operations suspended for two days
https://profit.pakistantoday.com.pk/2025...
Flag GermanyAugust 5, 2025
DDoS attack on the website of a city government in Germany
Stadt Trier - Trier, Rhineland-Palatinate, Germany
Webseite von Trier wegen Cyberattacke teils nicht erreichbar
https://www.rhein-zeitung.de/rheinland-p...
Flag Denmark2025
Cyber attack on a jewelry manufacturer from Denmark
Pandora - Copenhagen, Denmark
Pandora Confirms Cyberattack — What You Need To Know
https://www.forbes.com/sites/daveywinder...
Flag USAAugust 2025
Email account of a police in Minnesota, USA hacked
North St. Paul, Minnesota, USA (Ramsey County)
Cyber Incident Update 8/5/25
https://www.northstpaul.org/CivicAlerts....
North St. Paul Police Department targeted in cyberattack
https://www.fox9.com/news/north-st-paul-...
Flag SwitzerlandAugust 4, 2025
Cyber attack on an HR platform in Switzerland
Infoniqa - Root, Canton of Lucerne, Switzerland
HR-Plattform Infoniqa erleidet einen Cyberangriff
https://www.netzwoche.ch/news/2025-08-08...
Flag USAAugust 2, 2025
Cyber attack on an emergency center in Massachusetts, USA
South Shore Regional Emergency Communications Center (SSRECC) - Hingham, Massachusetts, USA (Plymouth County)

Cybersecurity Spending Just Crossed $300 Billion and These 3 ETFs Are the Cleanest Plays on the AI Era Attack Surface

Global cybersecurity spending is forecast to exceed $300 billion in 2026, and the catalyst is no longer abstract. AI agents now outnumber human identities within enterprises by roughly 109 to 1; Fortinet’s threat report logged a 389% year-over-year jump in…

By David Beren
Published July 3, 2026, 11:53am ET · 5 min read
𝕏
f
⧉
QUICK READ
CIBR anchors $13B across 46 holdings including Cisco and networking giants; BUG's strict 50% revenue filter cuts those names for a pure-play focus.
AI agents outnumber human enterprise identities 109 to 1 and ransomware victims jumped 389%, expanding the attack surface all three funds target.
Read More: Learn 7 secret wealth tips high net worth investors use that most investors miss (sponsor)
This post may contain links from our sponsors and affiliates, and Flywheel Publishing may receive compensation for actions taken through them.

A glowing blue digital shield made of binary code surrounds a key inserted into a keyhole, set against a dark blue background with an overlaid network of interconnected dots and lines.
With global cybersecurity spending crossing $300 billion in 2026, securing digital assets from evolving AI-driven threats is more critical than ever.
© HAKINMHAN / Shutterstock.com
Global cybersecurity spending is forecast to exceed $300 billion in 2026, and the catalyst is no longer abstract. AI agents now outnumber human identities within enterprises by roughly 109 to 1; Fortinet’s threat report logged a 389% year-over-year jump in ransomware victims; and Check Point measured a 51-point gap between corporate AI adoption and security readiness. Every prompt-injection vector, deepfake voice clone, and automated phishing campaign expands the attack surface defenders must cover.

x

Video Unpaused
Three ETFs offer different angles on the same trend: First Trust NASDAQ Cybersecurity ETF (NASDAQ:CIBR), Amplify Cybersecurity ETF (NYSEARCA:HACK), and Global X Cybersecurity ETF (NASDAQ:BUG). Each one screens the universe differently, and the differences matter more than the overlapping top holdings suggest.

CIBR: The Default Allocation

CIBR logo
CIBR
$99.22
▲ $29.59
(29.82%)
1Y

1D
5D
1M
3M
6M
1Y
5Y
MAX
View the full CIBR chart and data →
Holding $13.01 billion in assets as of late June, CIBR stands as the category leader while maintaining an expense ratio of 0.58% across 46 distinct holdings. Its strategy mirrors the NASDAQ CTA Cybersecurity Index by blending specialized vendors with established networking giants and IT service firms. This approach delivers a smart investment logic, as it lets you ride the broader wave of industry spending rather than gambling on a single platform to dominate the market.

Cybersecurity is the top play in AI because AI can not exist without it. Labs need the highest-quality protection to ensure their models are well-trained and reliable; enterprises need protection from the proliferation of agents and lightning-fast attacks; and everyone needs to ensure data is safe and reliable so models work. Without cybersecurity, it's all a dream.

Cybersecurity Grows Quickly: Estimates Fail to Account for AI's Impact

Estimates vary but generally agree that cybersecurity is worth $250 to $300 billion as of late 2026 and growing at a double-digit compound annual growth rate. The industry is forecast to grow about 14% annually over the next decade and is likely underestimating demand. Today’s driver is agentic AI, which is causing an exponential rise in query traffic, application accesses, and data retrievals, opening the door to numerous vulnerabilities.

And the vulnerabilities exist. Anthropic’s Mythos opened the market’s eyes to the threat, exposing numerous unknown zero-day threats within weeks of its launch. CrowdStrike’s NASDAQ: CRWD Hugging Face incident only heightened the tension, with models breaking out of control zones, working collectively to make unprovoked attacks across the Internet, eventually turning inward to attack the very system that spawned them.

Within that, cybersecurity is a highly fractured market, with no single vendor providing complete security. They're not only dealing with issues aligning legacy systems with new AI capabilities, but the landscape shifts so quickly that start-ups and disruption are frequent. In this environment, enterprise security relies on overlapping layers that protect network access, clouds, identities, applications, endpoints, and the agents themselves.

Why Cybersecurity ETFs May Make More Sense Than One Stock

Palo Alto Networks NASDAQ: PANW is the largest pure-play cybersecurity company, but it still has no more than 6% of the market, based on the best available estimates. Its growth is underpinned by next-gen security, the shift to AI capability (both for enterprises and internally), and a platformization strategy. Platformization enables numerous cybersecurity layers to deploy seamlessly from a single access panel, lower costs, reduce vendor sprawl, and improve client outcomes.

The takeaway, however, is that this market offers numerous avenues for growth and room for multiple winners. No cybersecurity investment is enough on its own; investors need a basket of names for full coverage. In this scenario, investors can focus on market leaders such as Palo Alto, CrowdStrike, Cloudflare NASDAQ: NET, Okta NASDAQ: OKTA, and Zscaler NASDAQ: ZS or take the simpler route and invest in an ETF. Several cybersecurity ETFs are available; the question is which one provides the best exposure and risk-to-reward for investors.

Cybersecurity ETF BUG chart shows a sharp rally with strong volume and bullish MACD, while pullbacks may offer entry points.

The leading cybersecurity ETFs are the Amplify Cybersecurity ETF NYSEARCA: HACK, the First Trust NASDAQ Cybersecurity ETF (CIBR), and the Global X Cybersecurity ETF NASDAQ: BUG. The first two provide ample exposure but are less pure-play. Both have sizeable exposure to bond markets alongside blue-chip techs such as Cisco NASDAQ: CSCO and Broadcom NASDAQ: AVGO. Cisco is a cybersecurity stock but not a pure-play, as its primary business is networking; it is a full-stack AI and AI infrastructure play and a blue-chip dividend-growth stock. Broadcom also offers some cybersecurity services but is a semiconductor stock, focused on telecom and custom application-specific integrated circuits (ASICs).

The crazy uncle speaks!

Cibr/ heavy buying before close!

AI Is Making Cybersecurity Harder to Ignore—These 3 ETFs Offer a Broad Bet
Thomas Hughes
Digital illustration of a glowing shield amid server racks and data icons, symbolizing cybersecurity, with stock charts in the background.
Cybersecurity is the top play in AI because AI can not exist without it. Labs need the highest-quality protection to ensure their models are well-trained and reliable; enterprises need protection from the proliferation of agents and lightning-fast attacks; and everyone needs to ensure data is safe and reliable so models work. Without cybersecurity, it's all a dream.

Cybersecurity Grows Quickly: Estimates Fail to Account for AI's Impact

Estimates vary but generally agree that cybersecurity is worth $250 to $300 billion as of late 2026 and growing at a double-digit compound annual growth rate. The industry is forecast to grow about 14% annually over the next decade and is likely underestimating demand. Today’s driver is agentic AI, which is causing an exponential rise in query traffic, application accesses, and data retrievals, opening the door to numerous vulnerabilities.

And the vulnerabilities exist. Anthropic’s Mythos opened the market’s eyes to the threat, exposing numerous unknown zero-day threats within weeks of its launch. CrowdStrike’s NASDAQ: CRWD Hugging Face incident only heightened the tension, with models breaking out of control zones, working collectively to make unprovoked attacks across the Internet, eventually turning inward to attack the very system that spawned them.

Within that, cybersecurity is a highly fractured market, with no single vendor providing complete security. They're not only dealing with issues aligning legacy systems with new AI capabilities, but the landscape shifts so quickly that start-ups and disruption are frequent. In this environment, enterprise security relies on overlapping layers that protect network access, clouds, identities, applications, endpoints, and the agents themselves.

Why Cybersecurity ETFs May Make More Sense Than One Stock

Palo Alto Networks NASDAQ: PANW is the largest pure-play cybersecurity company, but it still has no more than 6% of the market, based on the best available estimates. Its growth is underpinned by next-gen security, the shift to AI capability (both for enterprises and internally), and a platformization strategy. Platformization enables numerous cybersecurity layers to deploy seamlessly from a single access panel, lower costs, reduce vendor sprawl, and improve client outcomes.

The takeaway, however, is that this market offers numerous avenues for growth and room for multiple winners. No cybersecurity investment is enough on its own; investors need a basket of names for full coverage. In this scenario, investors can focus on market leaders such as Palo Alto, CrowdStrike, Cloudflare NASDAQ: NET, Okta NASDAQ: OKTA, and Zscaler NASDAQ: ZS or take the simpler route and invest in an ETF. Several cybersecurity ETFs are available; the question is which one provides the best exposure and risk-to-reward for investors.

$PDPR is about to crush in the next few months....time to load up ?!!! Just popped $175K shares today.