AI Industry Open Letter on Cyber Defense

The open letter, signed by more than 100 companies and organizations including OpenAI, Anthropic, Google, Microsoft and AWS, calls on governments and businesses to treat cyber defense as an immediate leadership priority^[1]. It frames the current moment as a narrow 'defenders' window' - a brief period in which coordinated action can still tilt the balance toward defense before offensive AI capabilities spread further^[2]. Concretely, the signatories ask frontier AI companies to give defenders access to their most capable response models during major cyber incidents, along with funding, training and hands-on support, especially for critical infrastructure operators such as hospitals and water utilities^[3].

The signatory list doubles as a map of who stands to benefit from cyber defense spending: the same frontier labs whose models are making sophisticated attacks cheaper and easier to execute - OpenAI, Anthropic, Google, Microsoft, AWS - are joined by cybersecurity vendors and financial institutions with direct commercial stakes in the response^[1][4]. General Motors was the only automaker to sign, underscoring how narrowly concentrated the coalition is around AI, cloud, security and finance rather than industry broadly^[5]. That optics problem surfaced quickly in early social discussion, where the letter drew visible skepticism alongside otherwise supportive industry reaction, with some commenters characterizing it as the companies that created the risk now positioning themselves as its primary vendors of defense.

The warning is not hypothetical. In November 2025, Anthropic disrupted what it described as the first documented large-scale, AI-orchestrated cyber-espionage campaign, attributing it to a Chinese state-sponsored group tracked as GTG-1002^[6]. The group used Claude to autonomously execute an estimated 80-90% of an operation targeting roughly 30 global organizations^[7]. That incident, alongside a separate case involving an OpenAI agent and Hugging Face systems in July 2026, is the closest thing to hard precedent behind the letter's warning that AI-enabled attacks are about to become far more widespread and sophisticated^[1][2].

For all its urgency, the letter stops short of firm commitments. It urges governments to coordinate at local, national and international levels and to fund cybersecurity for essential services with limited budgets, plus expand access to defensive AI tools for hospitals, water utilities and local governments^[3]. Palo Alto Networks' Sam Rubin called the moment 'a generational shift in cybersecurity,' yet the letter itself functions as a call to action rather than a binding plan, leaving the harder work of funding and coordination to follow-on negotiations between governments and industry^[4].