Cybersecurity Stocks Are Getting Clobbered: Hot Inflation, an OpenAI Deal Report and a Valuation Reset Send CIBR Down 5.9% This Week

For most of 2026, cybersecurity looked like the safe corner of tech: AI was widening the attack surface, security budgets were supposedly ironclad, and CrowdStrike, Palo Alto Networks and Fortinet more than doubled. This week the group got hit from several directions at once. The First Trust NASDAQ Cybersecurity ETF (CIBR) lost 5.9% over the four sessions through Thursday, closing at $103.53, and by Wednesday’s close both CrowdStrike (CRWD) and Palo Alto (PANW) were more than 13% below their October 6 record closes.

How the week unfolded

The damage by stock

The reference points differ because we are measuring from the last clean prints we could verify, so treat the moves as approximate. Even after the pullback, Okta is up about 145% this year, Fortinet 132%, CrowdStrike 113% and Palo Alto 104%, which is the root of the profit-taking. Zscaler is the exception, down about 2% for the year.

1. Hot inflation and rate-hike fears

Cybersecurity trades with high-multiple software, and this week the macro backdrop turned against it. September CPI rose 3.7% from a year earlier and core hit 2.6%, both above forecasts, and traders added bets on further Fed hikes. A day later, producer prices jumped 1.3% on the month. Higher rates cut the present value of long-duration growth earnings, so the stocks with the richest multiples took the biggest hit.

2. Worries about AI financing

The same week, the AI trade came under scrutiny. Gartner warned that more than $3.5 trillion of AI infrastructure spending could face write-down risk by 2030, and major bank executives cautioned that heavy borrowing for data centers resembles earlier infrastructure booms. When chip and AI-infrastructure names fell, investors de-risked across high-valuation tech, and cybersecurity sold off with it. CIBR’s top three holdings alone, Palo Alto (9.5%), CrowdStrike (8.7%) and Fortinet (8.7%), make up roughly 27% of the fund as of August 31, so a few big drops move the whole ETF.

3. Profit-taking after a huge run

Valuations were the quiet accelerant. Phillip Securities’ Monday downgrade of Palo Alto put numbers on it: 97 times earnings against a five-year average of 54. With the group up triple digits for the year and several names at records as recently as October 6 and 13, the market needed little excuse to take gains. A sharp rally followed by a macro shock is the classic recipe for a fast reset.

4. The OpenAI factor

The sector-specific scare came from a report that OpenAI is in early talks to acquire Trail of Bits, a New York security firm of about 40 people that has worked with OpenAI since June on a project using its Codex and cyber-focused models to find bugs in open-source code. Terms were not disclosed and nothing has been announced. The worry for investors is the direction, not the size: if a frontier AI lab builds security expertise in-house, it could one day offer AI-native defense that competes with paid platforms. Palo Alto CEO Nikesh Arora has argued the opposite on an earnings call, saying OpenAI, Anthropic and Google have come to the table for partnerships and that customers standardizing on fewer vendors is “a big tailwind for the larger players.”

The counterweight: analysts lean in

Citi analyst Fatima Boolani raised targets on Thursday: CrowdStrike to $295 from $260, Palo Alto to $440 from $410 and Zscaler to $260 from $245, all Buy, plus Okta to $215 from $205 with a Neutral rating. Those targets imply roughly 17% to 18% upside from Wednesday’s closes for the first three. Citi’s CIO survey points to improving demand: security budgets are expected to grow about 7% over the next twelve months, up about a point from last quarter, and 82% of CIOs say enterprise AI investment is increasing security spending, up from 71%. Security holds at about 9% of total IT budgets, and 37% name it the top destination for tool consolidation.

Wells Fargo was more guarded. Analyst Richard Poland lifted his Fortinet target to $160 from $135 after channel checks and a reseller survey showed spending gaining momentum into 2027, but he kept an Underweight rating, and the new target sits about 13% below Fortinet’s Wednesday close of $184.05. These were target increases, not rating upgrades.