BB's decline sharply worsened despite last scan's "decelerating" read — its 30-day change collapsed from -0.93% to -35.18%, the steepest deterioration in the group, and it remains the sole oversold name here at RSI 34.2. ZS was the one clear reversal, RSI climbing from 49.8 to 58.1 as its 7-day change flipped positive (-5.08%→+1.96%) even though it's still the only death-crossed name in the watchlist. Most of the rest of the group — FTNT, PANW, CRWD, NET, S, OKTA, HACK, BUG, CIBR — kept cooling for a third straight scan, though at a slower pace than last week, and PANW, CRWD, and FTNT all saw their 30-day changes flip from positive to negative.

Data as-of 2026-07-28 close. All numbers from precomputed summaries/cybersec.json. Prior scan: 2026-07-25-cybersec (2026-07-25, data as-of 2026-07-24 close).

BB is the standout story, and not a positive one. Last scan flagged its decline as decelerating (7-day change improving from -18.05% to -5.01%); that did not hold. This scan its RSI fell further from 37.8 to 34.2, the 7-day change worsened again to -10.01%, and the 30-day change collapsed from -0.93% to -35.18% — the steepest deterioration anywhere in this watchlist. It remains the only oversold name in the group, and now more deeply so than last scan.

ZS is the clear counter-story. Its RSI climbed from 49.8 to 58.1, with the 7-day change flipping from -5.08% to +1.96% and price rising from $142.32 to $151.63. It's still the one name in the group carrying a death cross, so the reversal should be read against that structure, but it's the only name here showing a genuine trend change rather than a slowing cooldown.

The rest of the board — FTNT, PANW, CRWD, NET, S, OKTA, HACK, BUG, CIBR — continued the pullback flagged last scan, but the pace of decline eased for most. PANW's 7-day change improved from -9.73% to -6.77%, CRWD's from -9.75% to -4.89%, and OKTA's from -7.26% to -3.88%. The more notable shift is structural rather than in the pace of the move: PANW, CRWD, and FTNT all saw their 30-day changes flip from positive to negative (PANW +13.51%→-3.92%, CRWD +8.93%→-2.12%, FTNT +4.88%→-3.5%) even though price barely moved this window — the 30-day window rolled off a stronger earlier stretch. NET, S, HACK, BUG, and CIBR are still positive on 30-day but each cooled meaningfully from last scan's reads.

• BB's decline accelerated rather than continuing to decelerate: RSI 37.8→34.2, price $8.54→$8.09, 7D -5.01%→-10.01%, 30D -0.93%→-35.18%.
• ZS reversed higher: RSI 49.8→58.1, price $142.32→$151.63, 7D -5.08%→+1.96%, 30D +11.83%→+10.2% — still the group's one death-crossed name.
• PANW's 30D flipped negative: RSI 50.5→48.6, price $323.79→$319.00, 7D -9.73%→-6.77%, 30D +13.51%→-3.92%.
• CRWD's 30D flipped negative: RSI 47.3→46.7, price $183.28→$181.80, 7D -9.75%→-4.89%, 30D +8.93%→-2.12%.
• FTNT's 30D flipped negative: RSI 48.9→46.2, price $152.37→$149.98, 7D -5.72%→-5.14%, 30D +4.88%→-3.5%.
• NET, S, OKTA, HACK, BUG, CIBR all continued cooling but stayed positive on 30D, each easing from last scan's reads (e.g. OKTA 30D +16.80%→+3.73%, S 30D +19.97%→+9.62%).

"Golden cross" (FTNT, PANW, CRWD, NET, S, OKTA, BB, HACK, BUG, CIBR — every name here except ZS) confirms a longer-term uptrend, but it lags price — BB's continued deterioration despite an intact golden cross is exactly the case this label warns about. ZS is the one name still death-crossed, so its reversal this scan should be read as a bounce within a still-bearish structure until the cross itself flips. The 30-day flips to negative on PANW, CRWD, and FTNT are a window effect (a strong period rolling off), not necessarily a change in trend — watch whether price itself keeps sliding or just stalls.

Capitulation (RSI<25): None.

Oversold (25-40): BB (34.2) — the sole name in this bucket for a second straight scan, and it deteriorated further rather than showing basing evidence.

Neutral/Strong (40+): The other ten names, clustered between RSI 46.2 (FTNT) and 58.1 (ZS) — a similarly narrow range to last scan, though PANW, CRWD, and FTNT now sit with negative 30-day reads inside that band.

• Tape data (price/RSI/SMA/returns): full-scan pre-computed summaries as of the 2026-07-28 close — cybersec.