More than 100 technology and security firms, led by OpenAI, have signed an open letter warning that AI-enabled attacks will arrive faster and at larger scale, leaving a narrow window to fix weaknesses that have accumulated for years.
Signatories include Microsoft, Google, Amazon Web Services, Anthropic, CrowdStrike, Palo Alto Networks, and financial institutions such as Capital One, Mastercard, and Visa. The letter says “status quo security won’t be enough” and calls for a global surge in AI-powered defense, asking every organization to make cyber defense an immediate leadership priority, fix the highest-risk weaknesses, and raise standards for technology they buy and build, including AI-generated code.
The argument is not about new vulnerabilities but about scale: AI systems can accelerate the discovery and exploitation of longstanding bugs, excessive permissions, misconfigurations, weak authentication, and technical debt. OpenAI’s chief executive framed the moment as critical for defenders, saying there is little time to act.
Industry voices echoed the urgency. Palo Alto Networks’ threat intelligence chief called the shift a generational change in cybersecurity, while ArmorCode’s technical lead framed it as a capacity problem, noting organizations can remediate roughly one in ten vulnerabilities in a given month. LogicMonitor’s CISO warned that bad actors will move at machine speed while legacy systems rely on human reaction times.
The letter urges governments to coordinate defense across borders, fund protection for under-resourced critical infrastructure, and impose costs on attackers. Frontier AI companies are asked to provide responsible model access and ensure autonomous systems remain traceable and accountable. Organizers describe the effort as ongoing, with more organizations expected to join.
