Cybersecurity Is Becoming the Next Leg of the AI Trade. CIBR Is How the Market Is Expressing It.

The AI buildout has not been one trade. It has been a sequence of trades, each one an industry.

Capital concentrated first in the compute layer: GPUs, data center hardware, and the semiconductor supply chain. Hyperscaler capital expenditure roughly doubled into 2026, with the largest cloud providers guiding to a combined range in the hundreds of billions of dollars for the year. As that layer matured, the constraint shifted to electricity, and the power and energy industries that data centers depend on took leadership. Memory followed, as AI systems drove shortages that repriced an entire industry.

Each stage followed the same pattern. A theme creates a bottleneck, capital flows to the industry that resolves it, leadership passes down the chain.

The Unintended Consequence

Every wave of infrastructure creates a downstream liability. The systems built during the AI buildout create new attack surface, and AI itself is lowering the cost of finding and exploiting software vulnerabilities at scale.

This is no longer a theoretical risk. The World Economic Forum's Global Cybersecurity Outlook 2026 describes a threat environment where the speed and scale of AI-driven attacks are testing the limits of traditional defenses. Advanced AI models have already demonstrated the ability to surface vulnerabilities across existing software and IT infrastructure faster than human teams can patch them, and the capability gap between leading labs and state-level adversaries is measured in months, not years.

Spending is following the risk. Gartner projects global information security spending of roughly $240 billion in 2026, growing at a double-digit rate, and IDC puts the broader security market above $300 billion. Security is one of the few line items a company cannot cut, because without it there is no business.

How the Market Is Expressing the Theme: CIBR

The cleanest vehicle the market is using to express this rotation is the First Trust Nasdaq Cybersecurity ETF (ticker: CIBR).

CIBR holds 46 companies and manages roughly $14 billion in assets. Its top holdings read like a map of the industry: Palo Alto Networks, Fortinet, CrowdStrike, Cisco Systems, and Broadcom, followed by Cloudflare, Okta, Zscaler, and other pure-play security names. The top ten holdings account for a large share of the fund, which means the ETF moves when the industry leaders move, while broader infrastructure names like Cisco and Broadcom provide a stable base underneath.

There is a structural reason a thematic ETF is the natural expression here. Rotation happens at the industry level, not the stock level. A trader does not need to know which security vendor wins the next enterprise cycle to observe that capital is rotating toward the industry as a whole. The ETF captures the aggregate, which is exactly what a theme is.

There is recent precedent for how far this can go. Earlier in the AI cycle, single-country and single-theme ETFs holding the memory leaders repriced dramatically as that leg of the theme played out, a reminder that during a structural buildout, concentrated thematic vehicles can move more than most participants expect.

What This Is and What It Is Not

CIBR is a case study in how a theme hands leadership to a new industry, not a recommendation. Whether cybersecurity holds leadership from here is not something anyone can forecast reliably, and forecasting it is unnecessary.

The disciplined approach is the same one that would have caught every previous leg of this theme: track relative strength across industries and let the ranking, not a narrative, direct attention. When an industry begins gaining strength against the market, the rotation registers in the data before the story becomes consensus. Cybersecurity is currently registering. Whether it continues to is what the data will show, week by week.

That is the sequence: market sets the regime, industry sets the odds, the instrument expresses the view. The free All US Industries Momentum Heat Map (https://imgeld.com/heat-map) ranks 40 US industries by momentum daily, so this kind of rotation is visible while it is happening rather than after it has been named.

This article is for educational purposes only. It is not investment advice and does not constitute a recommendation to buy or sell any security, including CIBR. Holdings data as of July 2026 and subject to change.