AI Defense Pledge Draws 130 Signatories

An open letter signed by nearly 130 organizations across cybersecurity, cloud computing, finance, and other sectors calls for a coordinated global surge in cyber defense, according to SecurityWeek. The letter, led by OpenAI, warns that AI-enabled attacks will become significantly more capable in the coming months, putting critical infrastructure at increasing risk.

Who's Behind the Letter

The initiative counts Anthropic, Microsoft, Google, Cisco, Check Point, Cloudflare, CrowdStrike, IBM, Oracle, and OpenAI itself among its signatories. SecurityWeek reports that the signatories span multiple industries, reflecting a broad consensus on the urgency of the threat.

The Warning: AI-Enabled Attacks

The letter cautions that AI will make attacks more widespread and sophisticated, specifically targeting hospitals, water treatment plants, and internet infrastructure. At the same time, it argues that AI advances give defenders new tools to fix security weaknesses, and acting quickly could make a lasting difference.

Three Principles for Collective Response

The proposed response rests on three principles. First, longstanding bugs, misconfigurations, weak authentication, and other technical debt mean status quo security will no longer be enough. Second, AI can extend specialist security skills to more defenders, making shared knowledge and verified fixes more broadly useful. Third, a global, coordinated response is essential as cyber capabilities advance across many organizations.

What Each Group Is Asked to Do

Organizations are urged to treat cyber defense as an immediate leadership priority, fix the highest-risk weaknesses first, raise the security bar for what they build and buy, and apply compensating controls where systems can't be patched without disrupting essential services. Cybersecurity companies and technology partners are called on to test defenses continuously against frontier-level AI capabilities, make AI-powered protection accessible to critical infrastructure operators with limited budgets, and share threat intelligence and playbooks that have been verified to work.

Governments and Frontier AI Companies

Governments are asked to coordinate cyber defense across local, national, and international levels, fund essential services that lack staff or budget, and give critical infrastructure access to defensive AI tools and authorized testing support. The letter also calls for imposing costs on attackers. Frontier AI companies are urged to provide responsible model access, funding, and hands-on support to under-resourced defenders, build tools for monitoring AI systems, and share threat assessments with governments and open source maintainers.

OpenAI's Specific Commitments

OpenAI, as the initiative's lead, outlined three commitments. It will offer subsidized access to its Daybreak Cyber models for public-sector organizations, nonprofits, open source maintainers, and critical infrastructure operators. It is also offering a program that lets companies work with authorized partners to test their defenses using its models and privately report weaknesses. Additionally, it will continue to publish security tools and findings to help organizations find, prioritize, and verify fixes for vulnerabilities.

Why It Matters for Security Teams

The letter's emphasis on fixing highest-risk weaknesses first and applying compensating controls could serve as a practical roadmap for security teams, especially those in critical infrastructure. The involvement of major vendors and governments might lead to new programs and tools, but whether these pledges translate into concrete action remains to be seen. For defenders, the key question is whether the collective response can keep pace with AI-enabled threats.