More than 116 companies and entities, including some of the world's largest technology firms, have signed a joint letter warning that AI-driven cyberattacks will escalate sharply in the coming months and urging a coordinated, society-wide response. The signatories, among them OpenAI, Anthropic, Microsoft, Alphabet, Amazon, Broadcom, Cloudflare, CrowdStrike, IBM, Mastercard, Oracle, and Visa, framed the moment as a narrow window to strengthen defenses before offensive capabilities outpace them.
The letter's central warning is blunt. "In the coming months, AI-enabled cyberattacks will become far more widespread as models around the world become increasingly capable," the signatories wrote, adding that there is limited time to make the digital world more secure before that surge arrives. As CNBC summarized the tone, the group believes it has "a limited window" to act, a framing echoed across coverage from NBC News, Reuters, and IBTimes.
For B2B and enterprise-security audiences, the substance of the task matters more than the alarm. The coalition called for a "defensive surge" built on three pillars. First, governments should accelerate trusted access programs that give vetted organizations early access to advanced AI models, so defenders can test and harden systems before attackers exploit the same capabilities. Second, every organization should make cyber defense an immediate leadership priority rather than a delegated IT function. Third, the group urged broad, cross-sector mobilization instead of siloed, company-by-company responses.
The timing reflects a genuine shift in the threat landscape. AI-enabled cyberattacks lower the barrier to entry for sophisticated intrusions, allowing attackers to automate reconnaissance, generate convincing phishing at scale, and probe for vulnerabilities faster than human teams can patch them. In other words, the same capabilities driving productivity gains for enterprises are equally available to adversaries. Additionally, the letter arrives against a backdrop of stretched public defenses, reporting that the US Cybersecurity and Infrastructure Security Agency (CISA) saw its staffing fall roughly a third following budget cuts, widening the gap the private sector is now trying to close.
This is not the first institutional warning of its kind. The Five Eyes intelligence alliance, the United States, Britain, Canada, Australia, and New Zealand, cautioned earlier this year that AI would "fundamentally transform" cybersecurity threats. The corporate letter effectively operationalizes that warning, translating a strategic concern into a concrete request for government and industry action. Ultimately, the involvement of both AI developers (OpenAI, Anthropic) and major enterprise buyers (Visa, Mastercard, General Motors) signals that the concern spans the entire technology supply chain, not just security vendors.
For enterprise decision-makers, the practical takeaway is that AI cyber defense is shifting from a specialist concern to a board-level priority. The coalition's message is that waiting for regulation or for attacks to materialize is itself a risk. B2BInside recently covered Anthropic's launch of its Opus 5 model, which pushes frontier AI capability to a wider market at lower cost, a development that illustrates exactly why the defensive urgency is rising, as more capable models become cheaper and more widely available to defenders and attackers alike. In addition, the letter's emphasis on leadership accountability suggests the next phase of enterprise cybersecurity will be measured less by tools purchased and more by how quickly organizations adapt their governance to an AI-accelerated threat environment.
The inclusion of financial institutions is particularly telling. Visa, Mastercard, Capital One, and Robinhood all signed, reflecting how acutely the financial sector feels its exposure to AI-enabled fraud and intrusion. For these firms, automated attacks are not a future hypothetical but a present operational cost, and their participation lends the coalition credibility beyond the technology industry itself. In addition, the presence of General Motors and Shopify signals that manufacturers and e-commerce platforms, organizations with sprawling digital supply chains, see AI-driven cyberattacks as a threat to core operations rather than a narrow IT issue.
There is also a competitive subtext worth noting. Several signatories, including OpenAI, Anthropic, Microsoft, and Alphabet, are the very companies building the advanced models that could, in the wrong hands, power the attacks they are warning about. Their call for trusted access programs can therefore be read two ways: as a genuine defensive measure, and as a way to shape how governments regulate frontier AI access. Either way, the fact that direct competitors aligned on a shared position underscores how seriously the industry takes the coming threat.
Whether governments act on the trusted-access request remains uncertain, but the breadth of the coalition gives the appeal unusual weight. With 116 signatories spanning AI labs, cloud providers, financial institutions, and manufacturers, the letter represents one of the most unified industry positions on cybersecurity to date, and a clear signal that the defensive surge against AI-driven cyberattacks has moved to the top of the corporate agenda.
