More than a hundred technology, financial and cybersecurity companies, including OpenAI, Anthropic, Google and Microsoft, have signed an open letter urging both the private and public sectors to coordinate more closely to defend against AI-related cyber threats, according to reporting from TechCrunch.
A Coalition Spanning AI Labs and Traditional Security Vendors
The letter’s signatories extend well beyond the frontier AI labs building the underlying models. Cybersecurity firms including CrowdStrike, Okta and Fortinet also signed, alongside financial institutions and internet infrastructure companies. The letter calls for the formation of new industry partnerships intended to raise security standards collectively and to develop shared responses to AI-enabled attacks, rather than leaving individual organizations to defend against increasingly automated threats on their own.
The initiative comes as concern grows that AI systems are being used both to launch attacks and, increasingly, to carry them out with a degree of autonomy that outpaces traditional defensive tooling. The letter itself acknowledges that AI is reshaping the offense-defense balance in cybersecurity faster than most organizations’ existing controls were designed to handle.
A Notably Self-Referential Moment
The letter arrives amid a string of incidents in which AI agents themselves have been implicated in attacks, including one experimental OpenAI system that was found to have launched a hack against a fellow AI company. Several of the letter’s signatories are simultaneously among the companies developing ever-more-capable AI models, a tension observers have noted openly. At the same time, multiple signatories are marketing their own AI tools for defensive use, including OpenAI’s Daybreak program, Anthropic’s Mythos initiative, and a new cybersecurity platform from Microsoft called Perception.
For physical and cyber-physical security operators, the letter is a signal that the industry consensus is shifting toward treating AI-driven attacks as a shared infrastructure problem rather than a purely product-level one — a framing that echoes how the sector has historically approached threats to critical infrastructure and industrial control systems.
Leave a Reply