Wall Street’s Cybersecurity Bet Crumbles as Anthropic’s Claude Uncovers Critical Bugs Top Experts Missed

Wall Street's latest darling just got a rude awakening. The high-flying cybersecurity sector—a favorite parking spot for institutional cash chasing 'essential' tech—is facing an existential gut-check. The culprit? Not a shadowy hacker collective, but Anthropic's Claude AI, which has been systematically exposing critical vulnerabilities that human experts, and their expensive tools, completely overlooked.

The AI Audit: Claude vs. The Experts

Forget penetration tests and red teams. Claude's methodical, tireless analysis is bypassing traditional security protocols, finding backdoors and logic flaws that were hiding in plain sight. It's not just finding bugs—it's revealing fundamental gaps in how security is conceptualized and implemented. The AI doesn't get tired, doesn't overlook mundane code, and operates at a scale and speed that makes even the best human teams look like they're moving in slow motion.

Portfolio Panic on the Trading Floor

The immediate reaction was a classic Wall Street overcorrection. Analysts who were touting 'cyber' as a perpetual growth engine are now scrambling to revise models. It turns out that when an AI can do a core part of your service better, faster, and cheaper, those sky-high valuations start to look a bit… inflated. Nothing shakes confidence like realizing your million-dollar security suite was effectively running on outdated assumptions—a lesson the finance sector is painfully familiar with, yet somehow never seems to learn.

The New Paradigm: AI as the Ultimate Stress Test

This isn't just a story about failed tools; it's about a failed mindset. The industry built walls where it should have been stress-testing foundations. Claude's success proves that true security requires an adversary that can think differently, probe endlessly, and challenge every assumption. The future belongs to those who integrate this relentless AI audit capability, not those who try to defend against it.

The market correction is brutal, but necessary. It separates the companies with real, adaptive technology from those just selling digital snake oil to boardrooms terrified of headlines. In the end, the most secure systems will be those built alongside the AIs designed to break them—a costly lesson funded by yesterday's bullish bets.

Analysts push back, but markets aren’t convinced

The news shook cybersecurity investors. CrowdStrike shares dropped 6.8% on Friday and Okta fell 9.2%, as markets began questioning whether AI tools could eat into the business of established security companies.

Cloudflare lost 6.7%, SailPoint shed 9.1%, and Palo Alto Networks slid 1.5%. Zscaler was down 5.47%. The Global X Cybersecurity ETF, which follows security firms around the world, closed the day nearly 5% in the red.

Not everybody saw the reaction as warranted. Barclays analysts called it “incongruent,” saying a tool built for code security does not really go up against what companies like CrowdStrike or Palo Alto Networks actually do.

But the gap between what spooked markets and what analysts are brushing off sits uneasily alongside one hard fact: Anthropic’s AI turned up more than 500 vulnerabilities in live codebases that had been sitting there for years, in some cases decades, without any human expert catching them.

Whatever the competitive boundaries analysts draw, the tool did something the security industry had not managed to do on its own.

AI cyberattack warning adds to the pressure

The timing of the launch carries its own uncomfortable irony. Claude Opus 4.6, the exact model now being positioned as a security defender, was blamed just days earlier for a $1.78 million loss at DeFi lending protocol Moonwell.

The bar for causing serious damage with AI-written code has dropped so low that it no longer requires an attacker at all. Security experts have been warning about this shift for months.

Anthropic acknowledged the same trend in its own release, warning that “less experienced and resourced groups can now potentially perform large-scale attacks of this nature.”

“Attackers will use AI to find exploitable weaknesses faster than ever,” the company said. “But defenders who MOVE quickly can find those same weaknesses, patch them, and reduce the risk of an attack.”

Its internal research, published in December 2025, went further, showing that an earlier version of the model, Claude Opus 4.5, could independently identify and exploit smart contract vulnerabilities worth up to $4.6 million in a controlled setting, with minimal human involvement.

The company was aware its models could cut both ways. Claude Code Security is its answer to that problem. Take the same capability and put it in the hands of defenders before attackers get there first.

Anthropic’s rival OpenAI debuted its own automated security tool, called Aardvark, in October of last year, signaling that AI-driven security is becoming a competitive battleground.

Get seen where it counts. Advertise in Cryptopolitan Research and reach crypto’s sharpest investors and builders.