Palo Alto, CrowdStrike Report Record Quarter on AI-driven Cyber Demand

CNBC reports CrowdStrike and Palo Alto Networks posted their best quarter ever, with shares rallying 95% and 113% respectively between April and June 2026. Cybersecurity Dive reports the underlying results: CrowdStrike's fiscal first-quarter revenue rose 26% year over year to $1.39 billion, with annual recurring revenue up 24% to $5.5 billion, while Palo Alto Networks' fiscal third-quarter revenue rose 31% to $3 billion. CrowdStrike CEO George Kurtz told analysts on the earnings call that "AI has now directly entered the world of cybersecurity across two dimensions": securing AI deployments themselves, and defending the "greenfield attack surfaces" created by neoclouds, data centers, hyperscalers, and GPUs. Kurtz separately said the Mythos moment "proved that the world, starting from the frontier AI labs themselves, realized that AI needs a cybersecurity ecosystem" (CNBC). Both firms were early partners in model testing with Anthropic and OpenAI, participated in OpenAI's Daybreak cyber initiative alongside Cisco, Cloudflare, Fortinet, Oracle, and Zscaler, and joined White House meetings focused on AI security (CNBC; Cybersecurity Dive).

Agentic models and accessible exploit-generation tooling expand the types of signals security teams must collect and correlate. Organizations confronting automated adversaries typically extend logging to cover agent orchestration channels, increase identity and access management (IAM) telemetry, and prioritize behavioral detection over static allowlists. For practitioners, this raises implementation work around longer retention of fine-grained identity events, more selective credential use, and integration of model-behavior signals into SIEM/XDR pipelines.

CNBC frames the earnings and stock rallies as evidence that cybersecurity is a direct beneficiary of AI-driven risk, not merely product marketing, because threat capabilities demonstrably shifted after Anthropic's Mythos model disclosure in April 2026. Both stocks fell after the earnings reports despite beating estimates, which 24/7 Wall St and other market coverage attribute to investors questioning whether current valuations already price in the AI-security narrative.

How vendors operationalize identity-first features in product releases, whether customers demand agent-aware detection primitives, and the emergence of telemetry standards for model-originated attacks. Public filings or changelogs documenting expanded IAM telemetry, new agent containment controls, or model-testing partnerships are the clearest signals of concrete product shifts.