A coalition of leading technology companies, banks, insurers, and cybersecurity vendors, including OpenAI and Anthropic, has issued a joint open letter warning that artificial intelligence-powered cyberattacks are poised to multiply dramatically in the coming months. The group stresses that defenders face a narrow window of opportunity to strengthen protections before AI tools significantly enhance attacker capabilities.
- AI will amplify cyberattack capabilities within months.
- Critical infrastructures like healthcare and utilities face heightened risks.
- Collective action urged from organizations, vendors, governments, and AI developers.
What happened
OpenAI Group PBC led a broad coalition releasing an open letter signed by more than 100 organizations spanning the technology, financial, insurance, and security sectors. The letter warns that AI-enabled cyberattacks are expected to increase sharply in frequency and sophistication in the near term. It stresses that existing security vulnerabilities — including bugs, misconfigurations, and excessive permissions — provide fertile ground for attackers now empowered by AI tools.
Key signatories include major industry players such as Anthropic, Google, Microsoft, Amazon Web Services, Oracle, Cisco, IBM, CrowdStrike, Palo Alto Networks, Capital One, Mastercard, and Citi among others. The letter identifies critical infrastructure assets, including hospitals, water treatment systems, and internet traffic networks, as particularly exposed to emerging AI-driven threats.
Why it matters
This concerted warning underscores how AI is rapidly changing cyberattack economics by automating reconnaissance, vulnerability exploitation, and attack chaining at machine speed. AI models can equip less skilled threat actors with advanced capabilities previously requiring specialist expertise. As a result, longstanding security weaknesses become vastly more dangerous, increasing the urgency for organizations to prioritize cyber defenses and address their security debt.
Federal agencies including the NSA, CISA, and FBI have already highlighted practical examples of AI-enhanced attacks, such as AI-generated exploitation scripts targeting industrial control systems used in water utilities and manufacturing. Researchers have observed that attackers rapidly adopt publicly disclosed exploits, further elevating risks to critical infrastructure and essential services. The open letter serves as a call to action for a broad, coordinated defensive response across sectors and governments.
What to watch next
The letter outlines responsibilities for four groups: organizations must elevate cybersecurity as a leadership priority and remediate weaknesses; technology vendors should validate their products against AI threat capabilities and empower critical infrastructure operators with defensive tools; governments are urged to coordinate protective efforts and fund essential services; and frontier AI developers should increase accountability for model access, support defenders, and manage operational risks.
Despite the strong warnings, the letter does not include specific commitments, deadlines, or funding pledges, reflecting challenges in translating awareness into effective action. Industry experts note that remediation in critical infrastructure often proceeds slowly due to operational constraints. Moving forward, signals to watch include increased collaboration between public and private sectors, new government investments in AI-aware cybersecurity programs, and how AI developers balance innovation with responsibility to mitigate emerging threat vectors.