Pomegra
Cybersecurity Stocks Jump 7% After PHP2Shell Flaws
Why did cybersecurity stocks jump 7%?
Cybersecurity stocks rose 5–7% on Wednesday, with Cloudflare (NET) up about 7% to $312, after PHP released emergency patches for two critical PHP2Shell flaws that could let attackers take over servers.
Key numbers
| Cloudflare (NET) | ~$312+7% |
|---|---|
| CrowdStrike (CRWD) | ~$241+6% (per [1]; [5] shows +4.4%) |
| Zscaler (ZS) | ~$230+7% |
| Websites running PHP | 70–80%of sites with a known server language |
| Cloudflare valuation | ~200xforward earnings before the jump (per [4]) |
What happened
Cybersecurity stocks rose 5–7% on Wednesday, with Cloudflare (NET) up about 7% to $312, after PHP released emergency patches for two critical PHP2Shell flaws that could let attackers take over servers. PHP is the code behind roughly 70% of websites, so a flaw there puts a huge number of sites at risk. Cloudflare switched on protective rules for all customers, even free ones. CrowdStrike (CRWD) rose about 6% and Zscaler (ZS) about 7%, though one report had CrowdStrike up 4.4%. A separate Nvidia security announcement the same day also helped.
Why it matters
Cybersecurity stocks rose because the PHP flaw is serious enough to force website owners to act quickly. Companies that sell protection, such as Cloudflare, can see more demand when threats like this appear. One report said Cloudflare was priced at about 200 times its expected yearly profit before the jump, so investors already expected strong growth. Fixing complex systems takes time, which leaves many sites exposed.
Who this affects
- MarketbullishMedium impact
- Security and software investors gained; moves ran well above normal.
- CompanybullishMedium impact
- Cloudflare shareholders gained after it rolled out free protections.
- CompetitorsbullishMedium impact
- CrowdStrike, Zscaler and Okta rose alongside Cloudflare.
- IndustrymixedHigh impact
- Demand for security tools may rise; website owners face costly fixes.
Cloudflare vs CrowdStrike, Zscaler, Okta
How we got here
PHP team warns of two critical flaws; patches were planned for Thursday.
PHP ships emergency patches; Cloudflare deploys protective rules for all customers.
Cybersecurity stocks rise 5–7% as Nvidia also unveils an AI-agent security platform.
What to watch
- Reports of attacks on unpatched PHP servers, which could extend demand for security tools.Q4 2026
- Whether security stocks hold gains once the PHP and Nvidia headlines fade.2026-10-22
Educational content only. Not investment advice.
More briefsAll briefs →
Circle Stock Rises Over 4% After Stablecoin Rules Finalized
Circle (CRCL) and Coinbase gained as Strategy jumped about 8%, but the stablecoin yield question stays open.
AT&T Stock Falls 6% on Starlink Mobile Fears Despite Beat
AT&T (T) lifted its 2026 profit outlook to $2.40 a share, but slowing phone sign-ups worried investors.
DeepSeek Ban Draws China Protest as US Sanctions 5 Firms
China opposes a US order pulling DeepSeek from agency systems and sanctions tied to Google trade-secret case.