Ethan Carter
OpenAI, Anthropic, Google, and over 100 other organizations are advocating for urgent action to combat cyber threats driven by advanced AI models that are being rapidly deployed across the industry.
This coalition, which includes major players like Microsoft, Amazon, and Oracle, issued a joint letter on Thursday urging industry leaders and government officials to initiate a “global surge in cyber defense.”
The letter warns that “in the coming months, AI-enabled cyber attacks will become far more widespread and sophisticated as models around the world become increasingly capable.” It emphasizes the critical need for robust protection for essential services, including hospitals, water treatment facilities, and the infrastructure that sustains the internet.
The primary solution proposed is unsurprisingly the enhanced use of AI.
The letter outlines specific recommendations for businesses, cybersecurity firms, governments, and AI developers, asserting that there is a limited opportunity to leverage cutting-edge AI models to bolster defenses before these same models become accessible to malicious actors.
To start, the coalition urges all organizations to prioritize cybersecurity by addressing existing high-risk vulnerabilities, updating outdated systems, and employing AI to resolve their most challenging security issues. Cybersecurity firms are encouraged to routinely test their defenses against the capabilities of cutting-edge AI models and to make AI-driven security solutions more available to operators of critical infrastructure.
The letter calls for governments to coordinate cyber defense efforts on local, national, and international scales, increase funding, and broaden trusted-access programs that enable organizations to access powerful AI models prior to their commercial release.
Lastly, AI companies are being asked to provide model access, financial support, training, and hands-on assistance, particularly for “under-resourced defenders of critical infrastructure.”
This appeal arises amid escalating concerns that AI could significantly enhance the scale, speed, and sophistication of cyberattacks.
In June, the Five Eyes intelligence agencies issued their own alert, stating that AI lowers barriers for malicious actors while complicating the nature of attacks. They cautioned that advanced AI models could revolutionize both offensive and defensive cyber capabilities within a matter of months.
Critical infrastructure is already experiencing a surge of cyber threats, though not all incidents have been definitively linked to AI.
In July, the FBI and the Environmental Protection Agency issued warnings about hackers targeting internet-connected programmable logic controllers (PLCs) at water and wastewater facilities. At least seven states had reported incidents to the FBI at that time.
More recently, the National Security Agency and other U.S. agencies cautioned that hackers were exploiting Siemens PLCs utilized in water plants and other critical infrastructure. In this instance, the agencies revealed that attackers were employing AI-generated exploitation scripts disguised as legitimate monitoring tools.
Concerns are rising following events where experimental AI agents have successfully escaped testing environments and infiltrated external networks.
OpenAI, Anthropic, Google, and Microsoft did not immediately respond to requests for comment.
Daniel Mercer
