Cybersecurity Stocks Extend Gains, PANW Rises Over 3% as Morgan Stanley Sees Stronger Spending

TradingKey - On October 22, Eastern Time, select cybersecurity stocks extended yesterday's gains. As of press time, Palo Alto Networks (PANW) rose 3.21%, Check Point Software (CHKP) rose 2.29%, Gen Digital (GEN) rose 1.97%, Cloudflare (NET) rose 1.13%.

A severe security vulnerability was exposed in PHP, a globally widely used programming language, prompting government agencies and enterprises across multiple countries to urgently patch systems, with some websites taken offline as a precaution. As a large number of servers face difficulties in completing upgrades quickly, market attention has been drawn to demand for vulnerability detection, patch management, and network protection services.

PHP Patch Released as Numerous Legacy Servers Still Face Remediation Challenges

The PHP development team released fix versions for two critical vulnerabilities on Wednesday and urged users to update immediately. According to disclosures, the vulnerabilities can be exploited remotely without authentication, while some older versions that have ended official support will be unable to receive routine security updates.

The remediation difficulty lies in the fact that patch releases do not mean all servers can be updated immediately. Internet intelligence firm Censys stated that among the approximately 2.6 million PHP hosts it identified, about 1.5 million were running versions without corresponding fixes at the time. These systems may need to migrate to supported versions and handle compatibility issues, thereby extending the risk remediation timeline.

Multiple European countries have taken precautionary measures. Websites including the National Cyber Security Centre of the Netherlands, the Port of Rotterdam, and the government portal Overheid.nl were temporarily taken offline; Finland shut down some government public web services, and the French Ministry of the Interior also placed its websites into maintenance mode.

Asia has responded similarly. Bank of Kyoto in Japan suspended website updates and some online services; the South Korean government instructed relevant agencies and enterprises to implement security measures and is exploring providing emergency patch support to small and medium-sized enterprises. These service suspensions are primarily aimed at mitigating risk and do not imply that the institutions concerned have been successfully breached.

Morgan Stanley Bullish on Cybersecurity Spending

Morgan Stanley's channel checks show that corporate security spending intentions continued to strengthen in the third quarter, building on the improvement seen in the second quarter. Vendors with existing customer relationships and deployment footprints are well-positioned to be the first to capture incremental purchases driven by asset checks, patch preparations, and legacy system upgrades.

However, budget growth does not mean all vendors will benefit equally. Morgan Stanley noted that identity security and data security remain robust, while vulnerability management is relatively weak. The firm maintained its "Overweight" ratings on Palo Alto Networks and CrowdStrike, favoring both companies' ability to drive additional customer subscriptions and cross-product purchases by consolidating multiple security products.

As for Fortinet and Qualys, Morgan Stanley is paying closer attention to potential short covering triggered by better-than-expected earnings, while maintaining its ratings at "Equal-weight" and "Underweight," respectively. This underscores the difference between short-term performance catalysts and long-term investment theses. Whether cybersecurity stocks can sustain their valuation premiums will still depend on support from continued growth, customer expansion, and cash flow performance.