- More than 116 organizations — among them OpenAI, Microsoft, Alphabet and Visa — put their names to a joint letter cautioning that AI-powered cyberattacks are about to surge.
- They called for a “defensive surge” built on trusted access to advanced models, leadership-level ownership, and cross-sector mobilization.
- The breadth of signatories — AI labs, banks and manufacturers — signals cyber defense is becoming a board-level rather than IT-only priority.
- OpenAI, Anthropic, Microsoft, Alphabet — AI and tech signatories
- Visa, Mastercard — financial-sector signatories
- General Motors, Shopify — manufacturer and e-commerce signatories
More than 116 companies and entities, including some of the world's largest technology firms, have signed a joint letter warning that AI-driven cyberattacks will escalate sharply in the coming months and urging a coordinated, society-wide response. The signatories, among them OpenAI, Anthropic, Microsoft, Alphabet, Amazon, Broadcom, Cloudflare, CrowdStrike, IBM, Mastercard, Oracle, and Visa, framed the moment as a narrow window to strengthen defenses before offensive capabilities outpace them.
The Warning: A ‘Limited Window’ Before AI-Driven Cyberattacks Surge
The letter's central warning is blunt. "In the coming months, AI-enabled cyberattacks will become far more widespread as models around the world become increasingly capable," the signatories wrote, adding that there is limited time to make the digital world more secure before that surge arrives. As CNBC summarized the tone, the group believes it has "a limited window" to act, a framing echoed across coverage from NBC News, Reuters, and IBTimes. The defensive push reaches payments, where Visa’s $2.4B BioCatch buy targets AI payment scams.
The Three Pillars of the ‘Defensive Surge’
For B2B and enterprise-security audiences, the substance of the task matters more than the alarm. The coalition called for a "defensive surge" built on three pillars.
- Trusted access programs. First, governments should accelerate trusted access programs that give vetted organizations early access to advanced AI models, so defenders can test and harden systems before attackers exploit the same capabilities.
- Leadership-level ownership. Second, every organization should make cyber defense an immediate leadership priority rather than a delegated IT function.
- Cross-sector mobilization. Third, the group urged broad, cross-sector mobilization instead of siloed, company-by-company responses.
Why the Threat Landscape Is Shifting Now
The timing reflects a genuine shift in the threat landscape. AI-enabled cyberattacks lower the barrier to entry for sophisticated intrusions, allowing attackers to automate reconnaissance, generate convincing phishing at scale, and probe for vulnerabilities faster than human teams can patch them. In other words, the same capabilities driving productivity gains for enterprises are equally available to adversaries. Additionally, the letter arrives against a backdrop of stretched public defenses, reporting that the US Cybersecurity and Infrastructure Security Agency (CISA) saw its staffing fall roughly a third following budget cuts, widening the gap the private sector is now trying to close. The same compute demand straining defenses is also straining hardware, as in the AI data-center boom behind the memory-chip shortage.
Building on the Five Eyes Cybersecurity Warning
This is not the first institutional warning of its kind. The Five Eyes intelligence alliance, the United States, Britain, Canada, Australia, and New Zealand, cautioned earlier this year that AI would "fundamentally transform" cybersecurity threats. The corporate letter effectively operationalizes that warning, translating a strategic concern into a concrete request for government and industry action. Ultimately, the involvement of both AI developers (OpenAI, Anthropic) and major enterprise buyers (Visa, Mastercard, General Motors) signals that the concern spans the entire technology supply chain, not just security vendors. The same frontier models raising risk are advancing fast, as Anthropic’s Opus 5 nears flagship performance.
Why AI Cyber Defense Is Now a Board-Level Priority
For enterprise decision-makers, the practical takeaway is that AI cyber defense is shifting from a specialist concern to a board-level priority. The coalition's message is that waiting for regulation or for attacks to materialize is itself a risk. B2BInside recently covered Anthropic's launch of its Opus 5 model, which pushes frontier AI capability to a wider market at lower cost, a development that illustrates exactly why the defensive urgency is rising, as more capable models become cheaper and more widely available to defenders and attackers alike. In addition, the letter's emphasis on leadership accountability suggests the next phase of enterprise cybersecurity will be measured less by tools purchased and more by how quickly organizations adapt their governance to an AI-accelerated threat environment. Enterprise AI adoption remains patchy, a reminder that only 16% of Japanese firms use AI company-wide.
Financial Firms and Manufacturers Feel the Exposure
The inclusion of financial institutions is particularly telling. Visa, Mastercard, Capital One, and Robinhood all signed, reflecting how acutely the financial sector feels its exposure to AI-enabled fraud and intrusion. For these firms, automated attacks are not a future hypothetical but a present operational cost, and their participation lends the coalition credibility beyond the technology industry itself. In addition, the presence of General Motors and Shopify signals that manufacturers and e-commerce platforms, organizations with sprawling digital supply chains, see AI-driven cyberattacks as a threat to core operations rather than a narrow IT issue. Enterprises hardening their stack increasingly vet partners through verified technology and security vendors.
The Competitive Subtext of the Coalition
There is also a competitive subtext worth noting. Several signatories, including OpenAI, Anthropic, Microsoft, and Alphabet, are the very companies building the advanced models that could, in the wrong hands, power the attacks they are warning about. Their call for trusted access programs can therefore be read two ways: as a genuine defensive measure, and as a way to shape how governments regulate frontier AI access. Either way, the fact that direct competitors aligned on a shared position underscores how seriously the industry takes the coming threat.
Whether governments act on the trusted-access request remains uncertain, but the breadth of the coalition gives the appeal unusual weight. With 116 signatories spanning AI labs, cloud providers, financial institutions, and manufacturers, the letter represents one of the most unified industry positions on cybersecurity to date, and a clear signal that the defensive surge against AI-driven cyberattacks has moved to the top of the corporate agenda.
Frequently Asked Questions (FAQs)
More than 116 companies and entities signed a joint letter warning that AI-driven cyberattacks will become far more widespread in the coming months as AI models grow more capable. They said there is only a “limited window” to strengthen defenses before offensive capabilities outpace them.
Signatories include OpenAI, Anthropic, Microsoft, Alphabet, Amazon, Broadcom, Cloudflare, CrowdStrike, IBM, Oracle, Visa, Mastercard, Capital One, Robinhood, General Motors, and Shopify. The breadth spans AI labs, cloud providers, financial institutions, and manufacturers.
The defensive surge rests on three pillars: governments accelerating trusted access programs that give vetted organizations early access to advanced AI models; every organization making cyber defense an immediate leadership priority rather than a delegated IT function; and broad cross-sector mobilization instead of siloed, company-by-company responses.
AI-enabled cyberattacks lower the barrier to entry for sophisticated intrusions. Attackers can automate reconnaissance, generate convincing phishing at scale, and probe for vulnerabilities faster than human teams can patch them — meaning the same capabilities driving enterprise productivity are equally available to adversaries.
Visa, Mastercard, Capital One, and Robinhood all signed because the financial sector feels its exposure to AI-enabled fraud and intrusion acutely. For these firms, automated attacks are a present operational cost rather than a future hypothetical, which lends the coalition credibility beyond the technology industry.
The Five Eyes intelligence alliance — the US, Britain, Canada, Australia, and New Zealand — warned earlier this year that AI would “fundamentally transform” cybersecurity threats. The corporate letter operationalizes that warning, turning a strategic concern into a concrete request for government and industry action.
As frontier AI models become cheaper and more widely available, both defenders and attackers gain new capabilities, and public defenses are stretched — US agency CISA saw staffing fall roughly a third after budget cuts. The letter argues that waiting for regulation or for attacks to materialize is itself a risk, making leadership accountability central to enterprise cybersecurity.
