Top developers behind some of the most advanced artificial intelligence tools are raising alarms about the potential for their innovations to facilitate complex cyberattacks targeting various sectors, including hospitals and tech companies.
In a public letter released on Thursday, key figures from OpenAI, Anthropic, Google, Microsoft, along with numerous other stakeholders, emphasized the urgency of enhancing cybersecurity measures to guard against potentially catastrophic AI-driven cyber threats. They indicated that the opportunity to bolster defenses may only extend for a few months.
Notable signatories also include cybersecurity firms like CrowdStrike and major financial institutions such as Citi and Capital One.
The same advancements in AI that pose risks to essential services and technical infrastructures also hold promise for organizations seeking to identify and rectify vulnerabilities, according to the letter.
"If we respond swiftly, we can utilize this brief window for defenders to substantially improve our digital security landscape," the signatories stated.
A recent report from CrowdStrike highlighted a staggering 89% increase in AI-facilitated cyberattacks in 2025 compared to the previous year.
Strategies for Defense
The companies pointed out that the current approaches to cybersecurity are inadequate.
"Enduring software bugs, excessive access permissions, misconfigurations, obsolete and unpatched software, weak authentication practices, and technical liabilities in older systems have left organizations vulnerable," they noted.
To counter these threats, it is essential to enhance and invest in security teams, arming them with advanced AI-driven technologies tailored for defending against cyberattacks.
The letter urged organizations and professionals to collaborate and share their knowledge.
"Disseminate threat intelligence and proven strategies, and track success by how many entities are safeguarded, the speed at which incidents are managed, and the effectiveness of repairs," it stated.
A Call to Action
The letter underscored the need for every organization to prioritize cybersecurity measures, which might involve upgrading or replacing outdated technologies that could be exploited.
Specialized cybersecurity firms must continuously evaluate defenses against evolving cyber threats. Meanwhile, governments play a crucial role in mitigating these risks through organized initiatives and by investing in cybersecurity strategies at various levels—local, national, and international.
Finally, the signatories stressed the responsibility of leading AI companies—including those who have endorsed the letter—to fund training, offer responsible access to their technologies, and ensure robust security for their systems.
