When war breaks out, the market usually runs to the usual suspects first.
Missile makers. Drone companies. Radar systems. Ammunition manufacturers. The old-line defense contractors that everybody can recognize without even opening a 10-K.
And to be fair, that trade makes sense…
As the conflict with Iran escalated this month, investors quickly recognized that military spending, replenishment orders, and national-security urgency would be a gift to the traditional defense complex.
And at the same time, broader markets wobbled under the pressure of oil shocks, inflation fears, and geopolitical uncertainty.
But while the market was staring at tanks, drones, and interceptors, another battlefield was expanding right under its nose.
The Obvious Winners Aren’t the Only Winners
That battlefield was digital.
Reuters reported in early March that U.S. banks had already gone on heightened alert for potential Iran-linked cyberattacks as the war escalated, with industry groups and executives emphasizing operational resilience across critical financial infrastructure.
Intelligence assessments cited by Reuters said Iran-aligned hacktivists could launch low-level cyberattacks against U.S. networks, and advisers flagged Iran’s willingness to target commercial systems, including financial ones.
That tells us this is not a niche side story. It’s not just a Pentagon issue. It’s not just a “government IT” issue. To be fair, it’s not even just a banking issue.
It’s an everything issue…
War No Longer Stays on the Battlefield
One of the great mistakes investors keep making is imagining war in twentieth-century terms while living in a twenty-first-century world.
They still think war is mostly about ships, planes, bombs, and boots. And those things still matter, of course.
But modern conflict spills into payment systems, hospital networks, supply chains, cloud architecture, executive communications, industrial controls, and surveillance networks.
In other words, it spills into the plumbing of modern life.
The Justice Department announced on March 19 that it had seized four domains tied to Iran’s Ministry of Intelligence and Security..
Those sites were used to support hacking efforts, psychological operations, stolen-data publication, and even calls for the killing of journalists and dissidents.
That’s not just cybercrime. That is cyberwar blended with intimidation, propaganda, and transnational pressure.
And the public-sector warnings have been piling up, too…
CISA’s Iran threat advisory says U.S. critical infrastructure and other U.S. entities should remain vigilant for targeted cyber activity by Iranian-affiliated actors.
And FINRA has warned firms about heightened threats from Iranian cyber actors amid the current Middle East tensions.
This is what markets periodically forget: when the geopolitical temperature rises, hackers don’t need aircraft carriers to make themselves felt.
They need access, automation, patience, and a vulnerable target. And that target can be a federal agency or military base.
But it can also be a hospital, a manufacturer, a bank, a logistics company, an energy operator, or a wealthy executive with information that looks interesting to the wrong people.
AI Didn’t Eliminate Cyber Risk. It Supercharged It
Now let’s talk about the part that makes last month’s cybersecurity selloff look so silly.
In late February, shares of cybersecurity companies including CrowdStrike, Datadog, and Zscaler fell around 11% in a single session after Anthropic launched a coding-security tool.
Fortinet, Okta, Palo Alto Networks, and SentinelOne also all plunged as investors worried AI tools would pressure the industry.
The market was acting as though AI might flatten the moat around cybersecurity vendors and somehow automate away the need for them.
That was always a shallow read.
AI doesn’t magically make vulnerabilities disappear. It accelerates both sides of the contest.
Yes, it helps defenders move faster, but it also helps attackers scan, probe, craft lures, exploit weaknesses, and sift through stolen data at machine speed.
Zscaler’s 2026 AI Threat Report says enterprise AI systems could often be compromised in as little as 16 minutes, found critical flaws in 100% of systems analyzed, and reported that data transfers to AI and machine-learning applications surged 93% to more than 18,000 terabytes.
In plain English, AI is expanding the attack surface even as it becomes part of the defense stack.
Palo Alto Networks put it even more bluntly in its 2026 outlook, arguing that 2026 would be the “Year of the Defender,” with AI-driven defenses needed to counter attackers who are using AI to scale and accelerate threats.
That’s the real story. AI is not replacing cybersecurity.
AI is making cybersecurity more necessary, more complex, and more central to national and corporate survival.
The Camera Is Now a Weapon
If investors needed a more vivid example, they got one…
Associated Press reported this week that hacked surveillance systems played a role in Israel’s targeting of Iran’s leadership, with advances in AI allowing intelligence services to sift through huge amounts of camera footage and identify targets far faster than human teams could.
The AP report also noted that experts have long warned that internet-connected cameras could be hacked and weaponized, and that AI now makes automated target identification vastly more feasible in real time.
Pause there for a second.
A camera used to be a passive device. Now it can become an intelligence node. A security feed can become a targeting tool. A convenience product can become a wartime liability.
That is a massive theme, and it stretches far beyond Tehran.
Corporate campuses have cameras. Warehouses have cameras. Energy facilities have cameras. Private homes have cameras. Gated neighborhoods have cameras.
Transportation hubs have cameras. Governments have cameras everywhere.
The more connected the world becomes, the more surfaces there are to attack, hijack, spoof, or exploit.
And when AI can process those feeds at scale, the stakes get even higher.
That doesn’t shrink the cybersecurity market. It expands it.
Uncle Sam and Corporate America Need the Same Shield
Another reason the recent selloff looked unreasonable is that the demand base for cybersecurity isn’t narrow. It is broadening.
The federal government is leaning harder into AI-enabled cyber defense.
Agencies and industry are exploring AI to strengthen cybersecurity as the administration’s cyber strategy places a premium on using AI to better secure federal networks.
At the same time, government procurement is not theoretical.
GSA announced a OneGov agreement with Palo Alto Networks covering AI security, cloud security, next-generation firewalls, and zero-trust access for federal infrastructure through January 2028.
CrowdStrike said in March that it expanded GovCloud capabilities for public-sector agencies inside a FedRAMP High-authorized environment, explicitly positioning those tools to stop AI-accelerated threats.
Zscaler continues to market zero-trust tools for the Department of Defense, while SentinelOne highlights a FedRAMP-High platform for federal civilian agencies.
That’s just the public side.
On the private side, reporting on the banking sector shows the same pattern: commercial firms don’t get to opt out of cyber conflict just because they don’t wear uniforms.
Financial institutions, medical-device companies, and other enterprises are all in the blast radius when geopolitical actors start using digital channels to spread disruption.
So, when investors think about cybersecurity now, they shouldn’t think of it as just another software bucket competing for budget with marketing tools and workflow apps.
They should think of it as strategic infrastructure.
That’s an entirely different category. And categories like that tend to command better multiples over time than the market gives them during panic selloffs.
The Selloff Was a Story Problem, Not a Business Problem
Markets love neat stories…
Last month’s story was that AI would commoditize huge chunks of software, compress margins, and expose parts of cybersecurity as less special than investors thought.
Cute story. Bad conclusion.
Because the actual business backdrop moved in the opposite direction.
The Iran conflict increased the urgency around cyber readiness…
Official warnings intensified. Law-enforcement actions accelerated. Private-sector vigilance rose. AI-related attack surfaces kept growing.
And the examples coming out of the region showed that digital tools are now deeply embedded in modern conflict, intelligence, and retaliation.
That doesn’t sound like an industry heading for irrelevance.
It sounds like an industry getting repriced by reality.
And that’s usually where opportunity lives.
Where Investors Should Start Looking
This is not a call to blindly buy every stock with the word “cyber” in its investor presentation.
Plenty of companies will overpromise. Some will get out-innovated. Some will spend years proving they can turn technological relevance into durable profits.
But the broad theme is getting harder to ignore…
Investors who want to understand this space better should be studying the companies building AI-enabled defense, zero-trust architecture, endpoint security, identity protection, cloud workload defense, and public-sector compliant platforms.
Names like Palo Alto Networks, CrowdStrike, Zscaler, SentinelOne, Fortinet, Okta, and Check Point all touch pieces of that evolving battlefield, though each does so differently and with different risk-reward profiles.
February’s selloff shows how sharply sentiment can swing in these names, which is exactly why serious investors should do the work before the crowd rediscovers the thesis.
The bigger point is simpler than any one ticker.
AI is not a magic wand that fixes cyber risk. It’s gasoline on the fire, but it’s also a better hose for the firefighters at the same time.
And in a world where states, proxies, criminals, and ideological actors can all use digital tools to reach across borders, cybersecurity is no longer an optional growth category.
It’s a critical part of the defense stack itself.
That means last month’s selloff may start looking less like insight and more like a gift, even sooner than expected.
Investors who understand that early won’t just be buying software.
They’ll be buying exposure to the companies turning AI into a shield against the people trying to use it as a sword.
