OpenAI, Anthropic warn AI cyberattacks could surge in coming months

Leading AI developers, including OpenAI, Anthropic, Google, Microsoft, and numerous other signatories, have issued a warning that their advanced technologies may soon be exploited for sophisticated cyberattacks targeting various entities, from hospitals to technology firms. In an open letter published on Thursday, the group highlighted a limited window of opportunity to enhance cyber defenses and safeguard against potentially devastating AI-powered attacks, which may only last for a few months.

The signatories also comprise security firms like CrowdStrike and financial institutions such as Citi and Capital One. The letter acknowledges that the same AI advancements that increase risks to public services and technology infrastructure can also assist organizations in identifying and addressing vulnerabilities that leave them exposed. If decisive action is taken, the digital world could be made significantly more secure.

Recent data from CrowdStrike indicates a 89% increase in AI-enabled attacks from 2024 to 2025. The companies assert that existing cybersecurity measures will not suffice. Outdated bugs, excessive permissions, misconfigurations, insecure and unpatched software, weak authentication, and technical debt in legacy systems have left systems vulnerable. To address this, security teams must be strengthened and adequately resourced, while defenders against AI cyberattacks require access to the most advanced AI-enabled technologies.

The letter emphasizes the need for companies and experts to share expertise, including threat intelligence and tested playbooks. Progress should be measured by the number of organizations protected, the speed of attack containment, and the effectiveness of fixes. Every organization should prioritize cybersecurity, which may involve replacing or upgrading vulnerable technology systems.

Specialized cybersecurity firms have a responsibility to continually test defenses against evolving cyber capabilities. Governments also play a crucial role in containing cyber threats through coordinated actions and funding cyber defense strategies at various levels. Lastly, the letter urges leading AI companies to fund training, provide responsible access to their models, and ensure adequate security.