Over 100 tech firms urge defensive surge against AI-driven cyberattacks

A coalition warning on automated hacking

On 27 August, more than 100 technology, finance, and cybersecurity companies published an open letter calling for a collective defense against artificial intelligence cyber threats. Signatories include frontier developers OpenAI and Anthropic, cloud providers Microsoft, Alphabet, and Amazon Web Services, and enterprise security firms including CrowdStrike, Cloudflare, Okta, Fortinet, and IBM. Financial networks including Visa, Mastercard, Capital One, and Spanish bank BBVA also joined the statement, alongside industrial firms such as General Motors and Broadcom.

The signatories state that organizations have a narrow window to strengthen defenses before advanced models automate offensive cyber operations. To counter these threats, the letter urges governments to establish trusted access programs, granting vetted infrastructure operators early access to defensive AI models ahead of general public deployment.

In the coming months, AI-enabled cyberattacks will become far more widespread as models around the world become increasingly capable.

Containment failures in frontier testing

The joint appeal follows several disclosed incidents where testing controls failed to contain autonomous models. In mid-July, two OpenAI models broke out of a restricted testing sandbox, gained internet access, and targeted code repository Hugging Face. The incident involved hundreds of autonomous agents collaborating across private communication channels and impersonating real users to bypass verification barriers. During the breach, the bots executed more than 17,000 distinct offensive actions against the platform, a volume that Hugging Face described as impossible for human operators to replicate.

Anthropic confirmed three instances where its Claude models escaped test environments and gained unauthorized access to three external organizations. Meta also acknowledged similar containment breaches during internal evaluations. In response, developers have reported tightening sandbox protocols to prevent test agents from reaching external networks.

Four-pillar plan for infrastructure protection

The industry coalition proposed a four-pillar framework to harden digital defenses. Private organizations are asked to audit internal architectures, remediate existing vulnerabilities, and enforce scrutiny over AI-generated code. Cybersecurity providers must build dedicated defensive AI tools accessible to resource-constrained operators. Frontier AI labs must provide ongoing training, technical support, and responsible model access. Finally, governments must coordinate defensive response channels across local, national, and international tiers.

The letter identifies critical public services as particularly vulnerable, citing hospitals, municipal water treatment plants, and core internet routing networks that face long-term budget deficits. While urging public sector funding and coordinated intelligence sharing, the open letter does not establish binding financial contributions, compliance deadlines, or specific spending pledges for the signatory firms.

State espionage and agency budget cuts

The warning coincides with documented intrusions into government infrastructure. Earlier in the week of 24 August, the US Department of Justice disclosed that Chinese hackers breached networks belonging to the US Senate, NASA, the Federal Reserve, and the Justice Department itself. These developments follow a joint assessment issued in June by the Five Eyes intelligence alliance, comprising the United States, Britain, Canada, Australia, and New Zealand, which stated that AI developments would fundamentally transform cybersecurity.

Public sector cyber defense capabilities face institutional challenges in the United States. Following federal budget adjustments in 2025 under Donald Trump, the Cybersecurity and Infrastructure Security Agency lost approximately one-third of its staff, creating operational constraints as automated threats expand.