Cybersecurity Stocks Are the Market's Bright Spot: Palo Alto Jumps 7% as a PHP Flaw Takes Government Sites Offline

Cybersecurity stocks surged on Friday, October 23, 2026 — Palo Alto Networks climbed about 7%, CrowdStrike and Okta rose roughly 5% to 7%, and Cloudflare, Datadog and Zscaler all gained around 5% to 6% — as a severe vulnerability in PHP, the code behind a huge share of the world's websites, forced government sites offline in Europe and put a spotlight on how fast artificial intelligence is now finding software flaws.

What happened

The rally was broad and it stood out on a difficult day for the wider market. At midday, the Dow Jones Industrial Average was down about 1% and the S&P 500 was slightly lower as surging oil prices dominated headlines, yet security stocks moved firmly the other way. Palo Alto Networks traded near $380, up about 7.1% from its previous close of $354.92. CrowdStrike rose about 6.8% to around $254, and Okta gained about 5.5% to around $212. Trading updates through the session also put Cloudflare up about 6%, Datadog up about 5% and Zscaler up about 5%.

Two forces collided to produce the move. The first was a real-world security scare: a severe PHP vulnerability caused service disruptions across multiple government websites in Europe and other regions, according to Reuters reporting cited by TradingKey, and some website operators were forced to take their sites offline after failing to patch the flaw before hackers could exploit it. The Motley Fool's midday market coverage noted that the vulnerability, which emerged on Wednesday, could impact 70% of websites worldwide. U.S. agencies including the NSA and FBI have warned organizations to fix affected PHP code promptly, with the NSA recommending that a system be taken offline until it is fully mitigated if an immediate update is not feasible.

Why it's blowing up

AI is finding flaws faster than anyone can patch them. Upcoming research from threat intelligence firm VulnCheck shows that AI has driven a year-over-year doubling in the number of digital vulnerability discoveries this year. Seven cybersecurity professionals cited in Reuters reporting believe the wave of AI-driven vulnerability discoveries will almost certainly trigger more large-scale outages. Cloudflare chief executive Matthew Prince has said a significant number of critical flaws in other essential software are still being patched, which could lead to a period of turbulence lasting several years.

Every new flaw is a sales argument for the defenders. Concentrated exposure of vulnerabilities makes patching, monitoring and incident response far more urgent, which is expected to prompt enterprises to increase security spending — and the listed security vendors are where that spending would land.

Wall Street was already warming to the sector. Deutsche Bank noted that as AI token usage climbs, infrastructure and cybersecurity companies are positioned to be among the first to benefit, naming Snowflake, CrowdStrike and Palo Alto Networks as potential beneficiaries worth watching, while cautioning that some of the upside is already priced into valuations. A separate Evercore survey flagging strengthening security demand added to the momentum behind Okta, CrowdStrike and Palo Alto earlier in the session.

Key facts

Palo Alto Networks (PANW): up about 7.1% intraday on October 23, trading near $380 versus a $354.92 previous close.
CrowdStrike (CRWD): up about 6.8% intraday to around $254; Okta (OKTA): up about 5.5% to around $212.
Also rising: Cloudflare up about 6%, Datadog up about 5% and Zscaler up about 5% in Friday trading, extending the sector's recent gains.
The catalyst: a severe PHP vulnerability disrupted government websites in Europe and elsewhere; some operators took sites offline after failing to patch in time, and the flaw has been reported as potentially affecting 70% of websites worldwide.
The AI angle: VulnCheck research shows AI drove a year-over-year doubling in vulnerability discoveries this year.
The backdrop: the Dow fell about 1% by midday and the S&P 500 dipped about 0.15%, making cybersecurity one of the session's clear outperformers.

What's next

The next test is whether the scare converts into budgets. Security stocks have rallied before on breach headlines and given the gains back when spending did not follow; Deutsche Bank's caution that some upside is already priced in is the counterweight. What is different this time, bulls would argue, is the mechanism: if AI keeps doubling the rate at which serious flaws are discovered, monitoring, patching and response become permanent operating costs rather than one-off panic projects — and the vendors who sell them collect on a recurring problem. Upcoming sector earnings, and any further outages or patch advisories in the coming days, will show whether Friday's move was a headline spike or the start of a repricing. This article reports what happened and why markets reacted; it is not financial advice, and nothing here is a recommendation to buy, sell or hold any security.

FAQ

Why did cybersecurity stocks rise on October 23, 2026?

A severe PHP vulnerability disrupted government websites in Europe and raised fears about AI-accelerated flaw discovery, which investors read as a driver of higher enterprise security spending — lifting Palo Alto Networks about 7% and CrowdStrike, Okta, Cloudflare, Datadog and Zscaler roughly 5% to 7%.

What is the PHP vulnerability behind the rally?

It is a severe flaw in PHP, the language behind a large share of the world's websites, reported as potentially affecting 70% of websites worldwide. Some European government site operators took their sites offline after failing to patch before exploitation, and U.S. agencies have urged organizations to fix affected code promptly.

How is AI changing vulnerability discovery?

Threat intelligence firm VulnCheck found AI has driven a year-over-year doubling in the number of digital vulnerability discoveries this year, and security professionals expect that wave to trigger more large-scale outages as unpatched flaws surface faster.

Which stocks moved the most?

Palo Alto Networks led the large caps with a gain of about 7.1%, followed by CrowdStrike at about 6.8%, Cloudflare at about 6%, Okta at about 5.5%, and Datadog and Zscaler at about 5% each in Friday trading.