The AI Boom Has a Dark Side. Why Cybersecurity Stocks Might Be the Best Way to Play It.

The artificial intelligence (AI) boom has created some of the market’s biggest winners, fueling surging demand for chips, cloud infrastructure, and data centers. But the same technologies making businesses more productive are also creating a new set of risks. As companies deploy increasingly powerful AI models and autonomous agents, bad actors are gaining access to more sophisticated tools, while businesses are simultaneously creating new digital attack surfaces that need to be protected.

That darker side of the AI boom has come into sharper focus following a series of AI-related security incidents. Recent cases involving advanced AI models and autonomous agents have highlighted how quickly cyber threats are evolving, reinforcing concerns that traditional security systems may need to become far more advanced. At the same time, companies are being forced to rethink how they protect everything from identities and endpoints to cloud infrastructure, data, and AI agents themselves.

That raises an important question for investors: if the AI boom is creating an entirely new generation of cybersecurity risks, could cybersecurity stocks be one of the best ways to profit from the boom's darker side? Let’s take a closer look.

From AI Threat to AI Tailwind: The Cybersecurity Narrative Is Changing 

Cybersecurity stocks sold off earlier this year alongside the broader software sector as investors grew increasingly concerned that rapid advances in AI could disrupt established business models, intensify competition, and pressure valuations. The sector took a hit in March after Fortune reported that details about an AI model from Anthropic that “poses unprecedented cybersecurity risks” were leaked. A similar selloff occurred in February after Anthropic unveiled new security features for its Claude AI model.

But the narrative around AI’s impact on cybersecurity has shifted dramatically since then. Investors now see AI not as a disruptive threat but as a powerful catalyst for cybersecurity demand. The logic behind this shift is simple. 

The same technologies making businesses more productive are also giving bad actors more sophisticated tools to launch cyberattacks. AI can help attackers automate certain tasks, scale attacks more quickly, create more convincing phishing campaigns, and search for vulnerabilities with greater efficiency. At the same time, the growing adoption of AI applications, cloud infrastructure, and autonomous agents is expanding the digital attack surface that companies must protect.

According to Grand View Research, the global cybersecurity market is expected to reach $663.24 billion by 2033, expanding at a compound annual growth rate of 11.9% from 2026 through 2033. The report said the growth is expected to be driven by rising cyber threats and advanced malware across various industries. In a blog post, Rich Campagna, Senior Vice President for Network Security at Palo Alto Networks (PANW), cited projections showing that global spending on AI-driven cybersecurity solutions could reach $135 billion by 2030.

Citrini Research said in a note on July 7 that a sharp rise in global threat activity is fueling a surge in corporate cybersecurity spending. Average weekly incidents per organization reached a record 2,270 in June, up 17% from a year earlier, according to the research firm. Citrini added that rapid advances in AI, particularly the emergence of agentic threats, have made it more critical than ever for companies to strengthen their cyber defenses. 

Meanwhile, IBM (IBM) CEO Arvind Krishna identified cybersecurity concerns as a top customer priority in the company’s preliminary second-quarter results last month. Krishna said customers shifted spending toward servers and memory, adding that “rapidly evolving, industry-wide cybersecurity concerns” also diverted customers’ attention. He told CNBC that some large deals were delayed toward the end of the quarter as businesses reassessed their spending priorities. “[Anthropic’s] Mythos is making people pause to say, wait, how much do I need to spend on cyber? They’re pausing on new deals until they know,” Krishna said.

Cybersecurity Stocks Gain a New Catalyst From Agentic AI Threats

AI agent security took center stage at the Black Hat USA 2026 conference in Las Vegas, underscoring growing concern over the risks posed by increasingly autonomous AI systems. Those concerns intensified last month after AI agents powered by OpenAI cyber models broke out of a training environment and hacked Hugging Face, an open-source AI platform developers use to collaborate, test, and share tools. Anthropic and Meta Platforms (META) later disclosed similar cyber incidents involving their AI models. And the U.K.’s AI Security Institute disclosed last week that AI agents powered by two models—Anthropic’s Mythos 5 and OpenAI’s GPT-5.6 Sol—autonomously launched supply-chain attacks, injected malicious code, and created fake online identities to social-engineer human reviewers on GitHub.

As AI-driven threats grow more sophisticated and widespread, cybersecurity companies stand to benefit from rising demand for tools to counter emerging risks. BTIG analysts, in a note to clients following the Black Hat conference, wrote, “The single most consistent theme across our conversations—partners, vendors, and customers alike—was that AI agents have fundamentally changed the threat landscape.” The analysts added that AI deployment and security tools are still in the “early innings.”

BTIG analysts raised the firm’s price target on Palo Alto Networks to $380, saying the company’s identity platform is well positioned to benefit from the proliferation of AI agents, while products such as XSIAM and Chronosphere create a “data moat” across other cybersecurity segments. The analysts also boosted their price target on CrowdStrike (CRWD) to $237. “We think AI is creating a new modernization cycle in the endpoint security space, which directly benefits CRWD’s core business,” they wrote. In addition, the analysts lifted their price target on Rubrik (RBRK) to $109.

Citizens followed suit on Wednesday. The firm lifted its price target on PANW stock to $415 from $320 and on CRWD to $230 from $195. In a note, the analysts said AI-driven threats continue to support demand for core security controls while increasing the need to protect new attack surfaces created by companies’ internal adoption of AI.

Wall Street analysts and research firms are also highlighting other names across the cybersecurity space. Citrini Research recently said Fortinet’s (FTNT) NP7 ASIC hardware can perform high-speed TLS decryption that no large language model can replicate, while also identifying Cloudflare (NET) and Zscaler (ZS) as beneficiaries because each newly deployed AI agent acts as a distinct traffic source requiring continuous inspection. Truist Financial analyst Junaid Siddiqui said in late May that data and identity security are becoming increasingly important in the age of agentic AI, a trend he expects to benefit companies including Commvault Systems (CVLT), Rubrik, Okta (OKTA), and SailPoint (SAIL). Morgan Stanley analyst Meta Marshall recently echoed that bullish view.

Conclusion

Putting it all together, the recent wave of AI-related security incidents and increasingly bullish Wall Street commentary indicate that AI is becoming a structural tailwind rather than a disruption risk for the cybersecurity industry. As companies deploy more autonomous agents and AI-powered applications, the attack surface is expanding, reinforcing demand for endpoint, identity, cloud, and data-security solutions. That dynamic is expected to drive higher cybersecurity spending and support further growth for leading vendors as AI adoption accelerates.