We use cookies to understand how you use our site and to improve your experience.
This includes personalizing content and advertising.
By pressing "Accept All" or closing out of this banner, you consent to the use of all cookies and similar technologies and the sharing of information they collect with third parties.
You can reject marketing cookies by pressing "Deny Optional," but we still use essential, performance, and functional cookies.
In addition, whether you "Accept All," Deny Optional," click the X or otherwise continue to use the site, you accept our Privacy Policy and Terms of Service, revised from time to time.
You are being directed to ZacksTrade, a division of LBMZ Securities and licensed broker-dealer. ZacksTrade and Zacks.com are separate companies. The web link between the two companies is not a solicitation or offer to invest in a particular security or type of security. ZacksTrade does not endorse or adopt any particular investment strategy, any analyst opinion/rating/report or any approach to evaluating individual securities.
If you wish to go to ZacksTrade, click OK. If you do not, click Cancel.
ETFs including IHAK offer exposure to cybersecurity firms, with annual gains ranging from 48.5% to 63.9%.
A wave of artificial intelligence (AI)-discovered vulnerabilities emerged last week in PHP, the programming language powering nearly 70% of the web, prompting industry experts to label the development as “Black October.” Cybersecurity teams worldwide are scrambling to patch critical flaws found using advanced AI models, with some executives noting that attacks observed over just two days could rank among the most severe security breaches of an entire year.
As one can expect, the disclosure rattled governments, banks, and tech giants alike, and Wall Street responded swiftly. Shares of major security providers, including Okta (OKTA - Free Report) , Palo Alto (PANW - Free Report) and CrowdStrike (CRWD - Free Report) , rallied sharply last week as investors bet that the chaos would accelerate corporate spending on defensive infrastructure.
This heightened investor attention has brought cybersecurity exchange-traded funds (ETFs) into a bright spotlight, as these funds provide diversified exposure to companies positioned to address the growing cybersecurity threats.
For investors, this episode underscores how the rapid expansion of AI is not only benefiting core AI accelerators like NVIDIA (NVDA - Free Report) but also creating long-term growth opportunities for the cybersecurity industry, thereby bringing cybersecurity-focused exchange-traded funds (ETFs) into focus.
Before diving deep into the specifics of these ETFs, we must dig deeper into how AI’s explosive growth is influencing the cybersecurity industry, what role these firms play in connection to AI’s vulnerabilities, and how investors should reassess their portfolio positions around these security-focused funds.
How Is AI Reshaping the Cyber Threat Landscape?
The PHP episode illustrates a fundamental shift: AI is compressing the attack lifecycle. According to the European Union Agency for Cybersecurity, the gap between vulnerability discovery and exploitation has shrunk from years to months, and in some cases to minutes.
To this end, it is imperative to mention that, as per a report from the World Economic Forum (“WEF”), published in May 2026, 94% of cyber leaders now identify AI as the defining force in cybersecurity, with 77% of organizations already using it in cyber operations.
The firms within cybersecurity ETFs are precisely the vendors building the automated defenses that enterprises are deploying to prevent cyberattacks.
For instance, Palo Alto Networks offers Unit 42 Continuous Frontier AI Defense, an always-on agentic service that uses frontier models to discover and validate exploitable vulnerabilities before attackers can exploit them. The company also offers Prisma AIRS to secure enterprise AI applications and agents.
CrowdStrike’s Falcon platform unifies endpoint, identity, cloud, and AI protection in one AI-native system, with Charlotte AI agents that triage detections and accelerate response at machine speed. Cloudflare leverages its global network — processing trillions of requests daily — to correlate live traffic with code vulnerabilities and deploy edge protections before patches are written.
The payoff from these tools is measurable, not theoretical: organizations that extensively leverage AI in security reduce average breach costs by up to $1.9 million and shorten breach lifecycles by roughly 80 days, according to the WEF report.
In short, the same technology that creates the vulnerability is also used as the most potent remedy, and the companies selling that remedy are among the top holdings of prominent cybersecurity ETFs.
Cybersecurity ETFs in Spotlight
For investors, the “Black October” moment once again challenges the assumption that cybersecurity is merely a defensive, slow-growth allocation. The sector has already delivered strong returns this year, with major sector indices like the Nasdaq CTA Cybersecurity Index surging a solid 50.5% year to date.
Considering the aforementioned discussion, the recent developments in AI vulnerabilities put the spotlight on the following cybersecurity ETFs:
This fund, with net assets worth $18.36 billion, offers exposure to 45 companies primarily involved in the building, implementation, and management of security protocols applied to private and public networks, computers, and mobile devices to provide protection of the integrity of data and network operations. CRWD, Fortinet (FTNT - Free Report) and PANW hold the first three spots in the fund, carrying 8.40%, 7.93% and 7.50% weight, respectively.
CIBR has surged 48.5% year to date and charges 58 basis points (bps) in fees. It traded at a good volume of 3.18 million shares in the last trading session.
This fund, with net assets worth $3.63 billion, tracks 23 companies actively involved in providing cybersecurity solutions that include hardware, software, and services. CRWD, Broadcom and Cisco Systems hold the first three spots in the fund, carrying 5.77%, 5.76% and 5.38% weight, respectively.
HACK has gained 59.1% year to date and charges 60 bps in fees. It traded at a volume of 0.53 million shares in the last trading session.
This fund, with net assets worth $2.23 billion, includes 30 companies that stand to potentially benefit from the increased adoption of cybersecurity technology, such as those whose principal business lies in the development and management of security protocols preventing intrusion and attacks to systems, networks, applications, computers and mobile devices. OKTA, CRWD and FTNT hold the first three spots in the fund, carrying 9.37%, 7.48% and 6.91% weight, respectively.
BUG has surged 63.9% year to date and charges 50 bps in fees. It traded at a good volume of 2.46 million shares in the last trading session.
This fund, with net assets worth $1.27 billion, offers exposure to 34 firms involved in cybersecurity hardware, software & services. Netspoke, Qualys and Zscaler hold the first three spots in the fund, carrying 6.84%, 6.15% and 6.09% weight, respectively.
IHAK has surged 53.7% year to date and charges 47 bps in fees. It traded at a volume of 0.36 million shares in the last trading session.
View the Zacks #1 Rank List
Image: Bigstock
Cybersecurity ETFs in Spotlight as AI's Black October Unfolds
Key Takeaways
A wave of artificial intelligence (AI)-discovered vulnerabilities emerged last week in PHP, the programming language powering nearly 70% of the web, prompting industry experts to label the development as “Black October.” Cybersecurity teams worldwide are scrambling to patch critical flaws found using advanced AI models, with some executives noting that attacks observed over just two days could rank among the most severe security breaches of an entire year.
As one can expect, the disclosure rattled governments, banks, and tech giants alike, and Wall Street responded swiftly. Shares of major security providers, including Okta (OKTA - Free Report) , Palo Alto (PANW - Free Report) and CrowdStrike (CRWD - Free Report) , rallied sharply last week as investors bet that the chaos would accelerate corporate spending on defensive infrastructure.
This heightened investor attention has brought cybersecurity exchange-traded funds (ETFs) into a bright spotlight, as these funds provide diversified exposure to companies positioned to address the growing cybersecurity threats.
For investors, this episode underscores how the rapid expansion of AI is not only benefiting core AI accelerators like NVIDIA (NVDA - Free Report) but also creating long-term growth opportunities for the cybersecurity industry, thereby bringing cybersecurity-focused exchange-traded funds (ETFs) into focus.
Before diving deep into the specifics of these ETFs, we must dig deeper into how AI’s explosive growth is influencing the cybersecurity industry, what role these firms play in connection to AI’s vulnerabilities, and how investors should reassess their portfolio positions around these security-focused funds.
How Is AI Reshaping the Cyber Threat Landscape?
The PHP episode illustrates a fundamental shift: AI is compressing the attack lifecycle. According to the European Union Agency for Cybersecurity, the gap between vulnerability discovery and exploitation has shrunk from years to months, and in some cases to minutes.
To this end, it is imperative to mention that, as per a report from the World Economic Forum (“WEF”), published in May 2026, 94% of cyber leaders now identify AI as the defining force in cybersecurity, with 77% of organizations already using it in cyber operations.
The firms within cybersecurity ETFs are precisely the vendors building the automated defenses that enterprises are deploying to prevent cyberattacks.
For instance, Palo Alto Networks offers Unit 42 Continuous Frontier AI Defense, an always-on agentic service that uses frontier models to discover and validate exploitable vulnerabilities before attackers can exploit them. The company also offers Prisma AIRS to secure enterprise AI applications and agents.
CrowdStrike’s Falcon platform unifies endpoint, identity, cloud, and AI protection in one AI-native system, with Charlotte AI agents that triage detections and accelerate response at machine speed. Cloudflare leverages its global network — processing trillions of requests daily — to correlate live traffic with code vulnerabilities and deploy edge protections before patches are written.
The payoff from these tools is measurable, not theoretical: organizations that extensively leverage AI in security reduce average breach costs by up to $1.9 million and shorten breach lifecycles by roughly 80 days, according to the WEF report.
In short, the same technology that creates the vulnerability is also used as the most potent remedy, and the companies selling that remedy are among the top holdings of prominent cybersecurity ETFs.
Cybersecurity ETFs in Spotlight
For investors, the “Black October” moment once again challenges the assumption that cybersecurity is merely a defensive, slow-growth allocation. The sector has already delivered strong returns this year, with major sector indices like the Nasdaq CTA Cybersecurity Index surging a solid 50.5% year to date.
Considering the aforementioned discussion, the recent developments in AI vulnerabilities put the spotlight on the following cybersecurity ETFs:
First Trust NASDAQ Cybersecurity ETF (CIBR - Free Report)
This fund, with net assets worth $18.36 billion, offers exposure to 45 companies primarily involved in the building, implementation, and management of security protocols applied to private and public networks, computers, and mobile devices to provide protection of the integrity of data and network operations. CRWD, Fortinet (FTNT - Free Report) and PANW hold the first three spots in the fund, carrying 8.40%, 7.93% and 7.50% weight, respectively.
CIBR has surged 48.5% year to date and charges 58 basis points (bps) in fees. It traded at a good volume of 3.18 million shares in the last trading session.
Amplify Cybersecurity ETF (HACK - Free Report)
This fund, with net assets worth $3.63 billion, tracks 23 companies actively involved in providing cybersecurity solutions that include hardware, software, and services. CRWD, Broadcom and Cisco Systems hold the first three spots in the fund, carrying 5.77%, 5.76% and 5.38% weight, respectively.
HACK has gained 59.1% year to date and charges 60 bps in fees. It traded at a volume of 0.53 million shares in the last trading session.
Global X Cybersecurity ETF (BUG - Free Report)
This fund, with net assets worth $2.23 billion, includes 30 companies that stand to potentially benefit from the increased adoption of cybersecurity technology, such as those whose principal business lies in the development and management of security protocols preventing intrusion and attacks to systems, networks, applications, computers and mobile devices. OKTA, CRWD and FTNT hold the first three spots in the fund, carrying 9.37%, 7.48% and 6.91% weight, respectively.
BUG has surged 63.9% year to date and charges 50 bps in fees. It traded at a good volume of 2.46 million shares in the last trading session.
iShares Cybersecurity and Tech ETF (IHAK - Free Report)
This fund, with net assets worth $1.27 billion, offers exposure to 34 firms involved in cybersecurity hardware, software & services. Netspoke, Qualys and Zscaler hold the first three spots in the fund, carrying 6.84%, 6.15% and 6.09% weight, respectively.
IHAK has surged 53.7% year to date and charges 47 bps in fees. It traded at a volume of 0.36 million shares in the last trading session.