"AI May Kill Us All"

A.I. Fears = Cybersecurity ETF Opportunities

The May 4, 2026 ChartWizards Market Brief covered opportunities in Cybersecurity stocks and ETFs as fears began mounting around A.I.'s and software’s vulnerabilities. In the months since sharing that report, names like FTNT, BUG, and CIBR have roughly doubled. 

Then vs. Now 

The same tickers, specifically BUG and CIBR, may be presenting new trade opportunities again in September 2026. 

BUG - Global X Cybersecurity ETF is breaking out above $44.00 with a target ~10% higher. Unlike CIBR, this ETF filters out industrial defense and mega-cap semiconductor conglomerates, its performance directly reflects cybersecurity software enterprise spending and valuation multiples. When it comes specifically to endpoint protection, zero-trust architecture, and identity management growth, BUG is the pure-play. 

BUG is heavily concentrated in cloud and identity security and firewall vendors: CrowdStrike ($CRWD), Palo Alto Networks ($PANW), Zscaler ($ZS), Fortinet ($FTNT), and CyberArk ($CYBR).

CIBR - First Trust NASDAQ Cybersecurity ETF tracks the Nasdaq CTA Cybersecurity Index - companies that design, develop, or integrate security protocols, even as a minor segment. CIBR is the "standard" vehicle due to higher AUM/liquidity, but holders take on more diversified exposure to broader networking equipment ($CSCO) and semiconductor solutions ($AVGO) alongside core security software. 

Between March and July 2026, disclosed vulnerabilities across 21 enterprise software anchors including Microsoft, Apple, AWS, Google, and Cisco experienced a structural supply shock, surging 565%, from 445 to 2,514 monthly Common Vulnerabilities and Exposures (CVEs). This parabolic rise directly followed the April 7, 2026 debut of Anthropic’s Claude Mythos model, demonstrating how autonomous AI models have collapsed the friction of discovering exploitable software flaws. 

I imagine Nassim Taleb reminding us that the real focus here should be in the tail risk: while high-severity disclosures expanded roughly than 6x, critical-severity bugs exploded by roughly 11x (from 57 to 610). 

A Google Deepmind staffer just wrote in his exit post that "AI May Kill Us All" (Bloomberg). 

Adjacent ETFs Worth Putting on the Watchlist

  • $HACK (Amplify Cybersecurity ETF): The original cybersecurity ETF. Sits between BUG and CIBR on pure-play purity; heavily weighted toward mid-caps with a 0.60% expense ratio.

  • $WCBR (WisdomTree Cybersecurity Fund): Equal-weight/rules-based tilt focusing primarily on cloud-native security growth models with low legacy overhead (0.45% expense ratio).

  • $IGV (iShares Expanded Tech-Software Sector ETF): Broad software benchmark. Essential to chart $BUG/$IGV to track whether security software is generating structural relative strength against enterprise software as a whole.

  • $SMH / $SOXX: Essential intermarket cross-reference. Hardware/datacenter infrastructure runs front-of-cycle CapEx; security software typically catches the structural catch-up trade in enterprise deployments. 

Word of Caution:

As you can see, the charts mostly look the same. They may all rise together again, but they could also fail and fall together, too. Trade identification is the least important part of trading. Capital preservation is everything. This is not an invitation to buy all of these names at once; it's dangerous trap of correlation risk. Only the paranoid survive the sport of trading, and thats why I take a risk-first approach with all of my trades: sizing, stop-levels, and correlation are key areas of focus before entering any new position. 

Thanks for reading, and safe trading. 

#JK 

Keywords and phrases: Cybersecurity pure play vs broad tech ETF, AI vulnerability discovery surge, Zero-day automated remediation software, CIBR expense ratio liquidity comparison, Critical CVE growth rate 2026, Crowdstrike, Fortinet, SecOps, BUG vs. CIBR, Palo Alto Networks, ChartWizards Reports, 

Back to blog