CIBR, the First Trust Nasdaq Cybersecurity ETF, enters the final days of May with a striking divergence: options traders are the most bullish they've been in nearly a year, even as short sellers quietly rebuild positions on the back of a historic sector recovery.
The clearest signal this week is in options. Demand for calls has overwhelmed puts by the widest margin in recent memory — the put/call ratio has collapsed to 0.31, nearly three standard deviations below its 20-day average of 0.44. That makes this the most bullishly skewed options reading CIBR has seen in at least a year, with the 52-week low PCR sitting at 0.10 as the only period that was more extreme. The move is sharp and recent: the ratio was sitting close to its average as recently as mid-May, meaning the swing toward calls happened fast, in lockstep with a 7.4% price gain on the week and a 21% surge over the past month to $80.40.
The borrow picture tells a more cautious sub-story. Short interest has nearly doubled week-on-week — up 84% in five sessions to roughly 945,000 shares, or 0.6% of the float. That remains a low absolute level, but the speed of the rebuild is notable: shares short had fallen from above 2.1 million at the end of April to just 512,000 on May 11, and are now climbing again. Availability has tightened meaningfully in step with that move, dropping to 65.7% from above 149% a week ago — approaching the range where the borrow market transitions from comfortable to snug. Cost to borrow, at 1.66%, is modest and has actually eased slightly over the week, suggesting there's no acute squeeze pressure yet. The short score of 46, roughly mid-range, is consistent with a market that is hedging rather than pressing an aggressive short thesis.
The macro backdrop is doing most of the heavy lifting. SentinelOne's integration into AWS Security Hub, confirmed this week, and a White House framework for AI model review involving cybersecurity players like CRWD and PANW — both major CIBR holdings — add policy and contract tailwinds to what was already a sector buoyed by enterprise threat prevention spending. Those two names, alongside FTNT, have driven the ETF's recovery from its April lows, when the broader market sell-off pushed short positions above 2.3 million shares. The rapid unwind of those positions through early May explains the bulk of CIBR's outsized monthly gain.
The week ahead turns on whether the call-heavy options positioning reflects genuine conviction or simply a momentum chase into an overbought level. CIBR has no upcoming earnings event of its own, so the next catalyst is squarely at the individual-holding level — any print or guidance revision from the cybersecurity majors will move the needle more than any ETF-specific flow.
See the live data behind this article on ORTEX.
Open CIBR on ORTEX →ORTEX Market Intelligence content is generated by AI from a snapshot of ORTEX's proprietary data. Content is informational only and does not constitute investment advice.
