OpenAI and more than 100 technology, cybersecurity and financial companies have issued a joint warning that AI-enabled cyberattacks could become significantly more widespread and sophisticated in the coming months. Major signatories include Anthropic, Microsoft, Google, AWS, CrowdStrike, Cloudflare, Mastercard and Visa. The coalition argues that current cybersecurity defenses may not be sufficient as AI gives attackers the ability to automate and scale sophisticated operations.
The concern is that AI changes the economics of hacking. Attackers can increasingly use AI to automate reconnaissance, discover vulnerabilities, generate malicious code and adapt attacks, potentially allowing relatively small groups to conduct operations that previously required much larger teams. Recent incidents involving AI systems being used in cyberattacks have made the warning more immediate, particularly for critical infrastructure such as hospitals, water systems, energy networks and internet services.
The companies are calling for a collective defensive response, including greater government investment in cybersecurity, stronger information sharing between companies, and closer cooperation between AI developers and security organizations. They also want trusted cybersecurity organizations to receive access to advanced AI capabilities so defenders can use the same technology to identify vulnerabilities and respond to attacks faster.
The broader takeaway is that AI is turning cybersecurity into an arms race between attackers and defenders. The same technology that can automate a cyberattack can also analyze threats, detect vulnerabilities and strengthen defenses—but defenders need to move quickly. The most important shift is therefore from reacting to individual breaches toward building AI-powered, continuously adapting security systems before attackers gain the advantage.
