Cybersecurity Scan — September 25, 2026 Close

Scan

Cybersecurity Scan — September 25, 2026 Close

Watchlists 1
raw scan snapshot — prices as of scan date, not live 39 rows · screens, not recommendations prior scanresearch/scans/2026-09-23-cybersec.md

The two-week, eleven-for-eleven green run broke hard: every name on this board fell, and Zscaler took the worst of it — RSI dropped from 70.5 to 53.6, the steepest decline on the board, on a price move from $214.45 to $193.05. Okta and CrowdStrike both fell out of near-overbought territory as well. The move coincides with a market-wide bond-yield shock reported September 23–24 — Treasury yields hit their highest levels in decades and Wall Street began pricing renewed Fed rate-hike risk, a combination that hits high-multiple growth names like this board hardest. BlackBerry is the one name with a confirmed, dated, company-specific catalyst this window: it beat second-quarter fiscal 2027 earnings estimates, reported September 24.

Data as-of the 2026-09-25 close. Prior scan: the September 23 cybersecurity scan (data as-of the 2026-09-23 close). This edition covers a short, two-trading-day window — Wednesday's close to Friday's — rather than a full week.

Quick Snapshot

Signal Reading
Overall 🟡 All eleven names pulled back together, ending the two-week all-green run; none is oversold, and none remains near-overbought — the whole board fell out of that zone at once.
Leaders BB (+2.75% weekly), NET (-0.27%... best relative hold), CIBR (+1.08%).
Laggards ZS (-2.16%), S (-0.58%), HACK (-0.27%).
Caveat The macro driver cited here (the Treasury yield surge) is sourced from market-wide capture, not a receipt naming any single ticker on this board; only BlackBerry has a confirmed company-specific catalyst this window.

What's Going On

Zscaler had the board's steepest reversal. RSI fell from 70.5 to 53.6 — a 16.9-point drop, the largest single move on this board this window — as the price gave back a large share of its prior two-week gain, from $214.45 to $193.05 (7-day change flipping from +11.94% to -2.16%). It remains the board's only negative trailing-year print at -32.66%, so the two prior strong weeks were a repair in progress rather than a repaired trend, and this window's reversal sets that repair back further. Okta and CrowdStrike, this board's other two extended names, both fell out of their respective zones: Okta's RSI dropped from 71.3 (near-overbought) to 62.1, and CrowdStrike's from 68.9 to 62.1, on price declines from $205.36 to $195.19 and $262.49 to $252.13 respectively.

No company-specific news explains most of this board's reversal. The likely driver is macro: MarketWatch reported on September 23 that "bond yields surge above 5% as Wall Street fears more Fed rate hikes," with the Nasdaq and S&P 500 retreating from record territory the same day, and Bloomberg followed on September 24 with "Bond Yields Soar, Spiking Fed Rate Hike Bets" as the 30-year Treasury yield hit its highest level since 2004. Rising discount rates compress high-multiple growth valuations first, and this board — where every single name carries a triple-digit or high double-digit trailing-year return — fits that pattern. No receipt confirms this mechanism for any individual ticker, but the synchronized, board-wide nature of the decline (all eleven names down together, with the highest-multiple names like Zscaler and CrowdStrike hit hardest) is consistent with it.

BlackBerry is the exception with a real, dated, company-specific catalyst. It reported second-quarter fiscal 2027 results on September 24, beating consensus EPS estimates ($0.07 actual versus $0.04 expected, a 75% surprise) according to the market-engine's earnings calendar record. The stock still eased slightly on the week (price $8.38 to $8.21, RSI 54.3 to 50.2), but that decline is milder than the rest of the board's, consistent with a genuine earnings beat partially offsetting the same macro headwind hitting everyone else. Fortinet, Palo Alto Networks and Cloudflare (NET) all decelerated from their prior double-digit weeks without a fresh company-specific receipt: Fortinet's RSI eased from 64.6 to 57.6, Palo Alto's from 62.7 to 54.4, and Cloudflare's from 65.4 to 62.2 — the mildest pullback of the three majors.

The basket funds (HACK, BUG, CIBR) and SentinelOne (S) all pulled back in line with the group, none breaking from the pattern. Despite this window's reversal, every name on this board remains well above its 200-day average — the tightest cushion is Zscaler's at 15.3%, and the widest is Okta's at 78.8% — so the long trend is intact everywhere on this board even as the near-term extension has been worked off.

What Changed Since Prior Scan (2026-09-23 close → 2026-09-25 close)

  • ZS had the board's steepest reversal: RSI 70.5→53.6, price $214.45→$193.05, 7D +11.94%→-2.16%.
  • OKTA fell out of near-overbought: RSI 71.3→62.1, price $205.36→$195.19, 7D +9.16%→+7.03%.
  • CRWD fell out of near-overbought: RSI 68.9→62.1, price $262.49→$252.13, 7D +8.75%→+6.09%.
  • BB reported a fiscal Q2 2027 earnings beat (EPS $0.07 vs. $0.04 estimate, September 24), the board's one confirmed company-specific catalyst this window: RSI 54.3→50.2, price $8.38→$8.21, 7D +9.69%→+2.75%.
  • FTNT, PANW, NET, S, HACK, BUG, CIBR all pulled back with the group, none breaking from the pattern: FTNT RSI 64.6→57.6; PANW RSI 62.7→54.4; NET RSI 65.4→62.2 (the mildest of the majors); S RSI 64.6→52.7; HACK RSI 64.2→53.2; BUG RSI 66.2→55.1; CIBR RSI 63.6→55.4.
  • Regime change: no name on this board remains near-overbought (70+) this scan, versus two (OKTA, ZS) last scan — the whole board fell out of that zone together.
  • All eleven names remain above their 200-day averages; no name reached oversold.
  • No entrants, no dropouts.

How To Read The Board

The rows are screen evidence. What makes this window unusual is the uniformity of the reversal: all eleven names fell, with the steepest declines concentrated in the names that had run the furthest (Zscaler, Okta, CrowdStrike) — the shape of a valuation-driven, macro pullback rather than eleven separate stories.

Zscaler remains the one name to hold to a different standard regardless of this window's move. Its trailing year is still -32.66% and its excess return over the market is the board's only negative print at -49.87, even after the two prior double-digit weeks. This window's reversal is a setback to a repair that was still in progress, not evidence the repair has failed — the stock is still 36.4% below its 52-week high and 15.3% above its 200-day.

At the other end, BlackBerry is now the name with a genuinely differentiated story this window: a real earnings beat, reported and dated, cushioning what would otherwise likely have been a similar-sized macro-driven pullback. Its RSI (50.2) is now the lowest on the board, and it remains the furthest name from its 52-week high at -39.59%, but the catalyst behind its milder decline is on file in a way nothing else on this board has.

Price Table

Stock Price RSI SMA20 vs SMA 7D% 30D% Signal
CRWD $252.13 62.1 $230.28 +9.5% +6.09% +33.28% 🟡 Neutral
OKTA $195.19 62.1 $181.02 +7.8% +7.03% +45.21% 🟡 Neutral
NET $349.02 62.2 $317.37 +10.0% +7.86% +22.51% 🟡 Neutral
BUG $44.71 55.1 $43.46 +2.9% +0.83% +11.83% 🟡 Neutral
CIBR $100.95 55.4 $98.61 +2.4% +1.08% +7.78% 🟡 Neutral
FTNT $173.46 57.6 $166.63 +4.1% +2.13% +10.11% 🟡 Neutral
PANW $374.74 54.4 $360.92 +3.8% +3.07% +10.44% 🟡 Neutral
HACK $118.35 53.2 $116.24 +1.8% -0.27% +7.97% 🟡 Neutral
ZS $193.05 53.6 $186.94 +3.3% -2.16% +13.35% 🟡 Neutral
S $22.38 52.7 $21.76 +2.9% -0.58% +9.12% 🟡 Neutral
BB $8.21 50.2 $7.98 +2.9% +2.75% +5.39% 🟡 Neutral

Tier Analysis

Capitulation (RSI below 25): None.

Oversold (RSI 25-40): None.

Neutral/Strong (RSI 40 and up): All eleven, now spanning BB (50.2) to CRWD/OKTA/NET (62.1–62.2). No name is near-overbought (70+) this scan, versus two last scan.

Entry Zones

Conditions, not advice.

Stock Entry zone Thesis / condition
NET $317.37 (20-day) as support Mildest pullback of the three majors; 50.7% over its 200-day, +59.95% trailing year.
FTNT, PANW $166.63 / $360.92 (20-day) as support Decelerated from double-digit prior weeks without a fresh company-specific hit; both deep over their 200-days.
CIBR, HACK, BUG 2% to 3% pullbacks Basket exposure to the same macro-driven reversal; all still well above their 200-days with strongly positive years.
BB $7.98 (20-day), watch the next print's follow-through The one name with a confirmed earnings beat this window; the mildest relative decline on the board.
OKTA, CRWD No zone yet Just fell out of near-overbought after the sharpest run on the board; still deeply extended (78.8% and 68.0% over their 200-days).
ZS No zone Steepest reversal on the board; trailing year still -32.66% — a repair in progress just took a step back.
S No zone Pulled back in line with the group; no fresh company-specific news.

Action Matrix

Stock Signal Action Notes
BB 🟡 Neutral 🔍 Watch Confirmed earnings beat (September 24) cushioned what would likely have been a larger macro-driven decline.
NET 🟡 Neutral 🔒 Hold Mildest pullback of the majors; intact long trend.
FTNT, PANW 🟡 Neutral 🔒 Hold Decelerated from strong prior weeks; still deep over their 200-days.
HACK, BUG, CIBR 🟡 Neutral 🔒 Hold Basket exposure to the same reversal; least single-name risk.
OKTA, CRWD 🟡 Neutral 🔍 Watch Fell out of near-overbought after the board's biggest prior runs; watch whether the pullback extends.
ZS 🟡 Neutral ⚠️ Avoid Steepest reversal on the board; trailing year still -32.66% — the repair took a real step back this window.
S 🟡 Neutral 🔍 Watch Pulled back with the group; no fresh company-specific news.

What To Watch Next

Watch Why it matters
Whether the bond-yield shock keeps pressuring this board Every name here carries a high trailing-year return; this is the kind of complex that reprices first when discount rates rise.
Whether Zscaler's reversal is a pause in its repair or a sign the two prior strong weeks were overextended Its trailing year is still -32.66% even before this window's pullback.
Whether BlackBerry's earnings beat keeps it relatively resilient if the macro pressure continues The one name on this board with a real, dated, company-specific catalyst this window.
Whether Okta's and CrowdStrike's pullback out of near-overbought stabilizes or deepens Both had the board's biggest recent runs and both just gave back a real share of it.
Whether the cloud ETF cross-read continues to move with this board Both complexes ran green together for two weeks and pulled back together this window.

The Gold

Key Discoveries

Discovery Implication
The two-week, eleven-for-eleven green run ended with all eleven names falling together, in a pattern consistent with a broad Treasury-yield surge reported September 23–24 This board's high-multiple names appear to be repricing on rates, not on anything company-specific — worth confirming whether the pullback tracks yields going forward.
BlackBerry is the one name with a confirmed, dated earnings beat this window, and its decline was milder than the board's A real catalyst partially offsetting a macro headwind is a cleaner read than the rest of the board's unexplained-but-plausible-macro moves.
Zscaler's reversal (-16.9 RSI points) was the steepest on the board, on top of the one negative trailing-year print here The name furthest from full repair also fell the hardest this window.

Mistakes (Don't Repeat)

Mistake Lesson
Treating two strong weeks as evidence a name has finished repairing Zscaler's two double-digit weeks did not survive a single macro shock; a trailing year still at -32.66% was the tell that the repair wasn't finished.
Citing a market-wide macro story as if it were a company-specific cause The bond-yield surge is real and dated, but no receipt names any single ticker here — it explains the shape of the move, not the mechanism for any one stock.

Open Questions

  • Does this board's pullback track the path of Treasury yields, confirming the macro read, or does it diverge?
  • Does Zscaler's repair resume next scan, or does this window mark a real stall?
  • Does BlackBerry's earnings-driven resilience persist if the macro pressure continues?

Sources

  • Tape data (price, RSI, moving averages, returns, long-horizon): pre-computed summaries as of the 2026-09-25 close — cybersec.
  • Prior-scan comparison values: 2026-09-23-cybersec.
  • BlackBerry fiscal Q2 2027 earnings beat, reported September 24 (EPS $0.07 actual vs. $0.04 estimate) — 2026-09-24-bb-earnings.
  • Market-wide bond-yield surge and Fed rate-hike repricing, September 23–24 — 2026-09-23-marketwatch-bond-yields-surge-above-5-as-wall-street-fears-more-fed-rate--mktw-0005249446, 2026-09-24-bloomberg-bond-yields-soar-spiking-fed-rate-hike-bets-tlvzzbkip3k900. No fund- or ticker-specific receipt confirms this as the mechanism for any single name besides BB, which has its own confirmed catalyst.
  • Cross-read to the cloud software complex: cloud-etfs as of the 2026-09-25 close.
  • News pulls checked for the remaining names and found to carry no dated content inside this window: FTNT (latest, fetched 2026-09-23), PANW (fetched 2026-09-25), CRWD (fetched 2026-09-25), NET (fetched 2026-09-25), S (fetched 2026-09-15), OKTA (fetched 2026-09-22), ZS (fetched 2026-09-22), HACK (fetched 2026-06-21, no ok/stale flag on file), BUG (fetched 2026-09-15), CIBR (fetched 2026-06-21, no ok/stale flag on file). No cause is claimed for any of their moves beyond the macro context cited above.
10 events

No direct external sources are attached to this read.