Jim Cramer Identifies Two Cybersecurity Stocks Poised for Growth Amid AI Security Risks

The pitch lands inside a market that has spent the last two years pricing in machine-speed attacks, ransom payments, and a federal government that talks a lot and funds less.

The market and the threat

The recommendation is thin on specifics in the public reporting — no tickers, no price targets, no thesis beyond the AI threat multiplier. That's par for the course. Investor commentary on cybersecurity has been running on a single loop for years: threats are getting worse, AI is accelerating the curve, so buy the picks and shovels. Hard to argue with the direction. Easy to argue with the assumption that the picks are the right ones.

The underlying premise is not wrong. Threat actors are already using generative models to speed phishing, refine social engineering, and stitch together attack chains faster than human defenders can react. The era of artisanal intrusion is closing. What replaces it is automated scanning, automated pretexting, and automated lateral movement — the kind that turns a single credential leak into a full environment compromise before the SOC finishes its coffee.

California puts a bureaucrat on it

One place the AI security thesis is moving from slide deck to implementation is California. Governor Gavin Newsom announced an initiative that mandates every state agency appoint an AI cybersecurity officer and establish a defense program under the state's Cybersecurity Integration Center. The stated goal: vulnerability detection, network hardening, and incident response, with AI as the engine. Newsom also called for expanded access to advanced cybersecurity capabilities for local governments and critical infrastructure operators.

The move follows a coordinated cyberattack that disrupted water utilities across multiple states — a quiet reminder that small municipal networks remain low-hanging fruit. Creating an AI officer role is the kind of bureaucratic answer that photographs well. Whether it reduces dwell time on a county water system's billing server is a different question. Adding a title rarely rewrites an attack chain.

What to watch

For organizations actually defending systems, the Cramer call and the California mandate converge on the same operational pressure: the adversary's tooling is getting faster, and the response stack has to keep pace without outsourcing the entire decision loop to a model. A few things worth tracking:

• Which two names CNBC highlighted. The sector spreads thin across pure-play detection, identity, cloud, and services — exposure is not uniform.
• Whether California-funded AI tooling bleeds into the broader local-government market or stays locked inside state agencies.
• The PBS reporting trajectory on midterm election infrastructure, which is the other live test of whether AI-assisted defense actually shrinks the attack surface or just adds another dashboard.

The cynical read: stock pitches ride on fear, and AI fear is a renewable resource. The defenders' job is to ignore the ticker and treat the attack surface like it is — a moving target being moved faster by software that doesn't need a lunch break.