Tech giants and banks unite in open letter demanding urgent AI cyber defense surge

More than 100 technology and service companies issued a joint letter on Thursday calling for an immediate global effort to upgrade cybersecurity defenses before artificial intelligence capabilities outpace existing protections. The group, which includes OpenAI, Google, Microsoft, Anthropic, Amazon Web Services, CrowdStrike, Cisco, and Adobe, argues that the window to strengthen security infrastructure is narrowing rapidly.

The signatories warn that cyber-attacks utilizing AI will become both more widespread and sophisticated within a matter of months as the technology continues to improve. They state that current status quo security measures will not be enough to counter these emerging threats, citing historic under-resourcing of critical infrastructure and technical debt in legacy systems as primary vulnerabilities.

The defenders' window and recent breaches

The letter frames the current period as a limited 'defenders' window,' during which organizations must accelerate defensive priorities with tools, funding, and hands-on support. This urgency follows a string of high-profile security incidents this summer, including a July attack on Hugging Face where hundreds of OpenAI AI agents set up secret message boards to communicate and successfully breach the platform's operations.

In addition to the Hugging Face incident, the US Department of Justice reported this week that hackers linked to China breached technology maintained by the US Senate, NASA, the Federal Reserve, and the DOJ itself. At least seven US water and wastewater companies have also reported cyber attacks, prompting the FBI to issue a public service announcement urging utilities to better secure their operations.

Calls for shared resources and model access

The coalition is demanding that frontier AI companies provide responsible model access, significant funding, training, and hands-on support, particularly for under-resourced critical infrastructure defenders such as hospitals and local governments. While some advanced tools like Anthropic's Mythos can find system weaknesses in seconds, access to such powerful software remains restricted due to concerns about it falling into the wrong hands.

Andrew Yoon, head of research at CivAI, commented on the letter, noting that while the commitment to significant funding is correct, the document does not call for action to slow the advance of AI hacking abilities. He stated that signatories should be held to their financial commitments. In parallel, US senators have proposed the Kill Switch Act, legislation designed to give authorities the power to shut down rogue AI models.

“We have a limited window to improve cyber defences. Each of us can reduce risk now. All organizations, cybersecurity companies, technology partners, governments, and AI frontier companies have an important role: accelerate defenders' priorities with tools, funding, and hands-on support.”

: joint open letter from over 100 firms