OpenAI has called for a collective global response to combat the rising threat of AI-enabled cyber attacks. The company warned that attacks will become more widespread and sophisticated as AI models evolve, placing critical infrastructure such as hospitals and water treatment plants at significant risk.
The proposal outlines several core principles, starting with the acknowledgement that current security standards are insufficient. OpenAI argues that longstanding technical debt, unpatched software, and weak authentication have left systems exposed, necessitating a surge in resources for security teams. The company suggests empowering more defenders with AI-capable tools to make security tasks more efficient and sharing verified fixes across organizations.
The framework assigns specific roles to different sectors. General organizations are urged to make cyber defense a leadership priority and upgrade legacy systems. Cybersecurity firms and technology partners are encouraged to lead the response by testing defenses against frontier AI capabilities and making AI-powered tools accessible to critical infrastructure operators.
Governments are called upon to coordinate defense efforts internationally, fund essential services that lack budgets for security, and impose costs on attackers. Frontier AI companies are asked to provide responsible model access, funding, and training, particularly for under-resourced defenders.
The initiative aims to utilize the current window of AI advancement to strengthen digital infrastructure before more capable offensive tools become commonplace.
Company signatories include the following:
-
- 1Password
- Abnormal
- Accenture
- Adobe
- Advent
- Aikido
- Akamai
- AMD
- Anthropic
- Arena
- Arm
- AWS
- BBVA
- Block
- Calif
- Cantina
- Cape
- Capgemini
- Capital One
- Cato Networks
- CIS (Center for Internet Security)
- Cerebras
- Check Point
- Cisco
- Citadel
- Citi
- ClearlyAI
- Cloudflare
- Cogent
- Cognition
- Xbow
- Zscaler
- Zurich
- SAP
- Scale
- SentinelOne
- ServiceNow
- Shopify
- Snowflake
- Snyk
- Socket
- Sophos
- SpecterOps
- Tenable
- Tenzai
- The Clearing House
- Third Moment
- Trail of Bits
- TransUnion
- TrendAI
- Unisys
- US Bank
- Vercel
- Veria Labs
- Visa
- World Wide Technology
- HCLTech
- Hugging Face
- IBM
- Incident.io
- KPMG
- Lovable
- Lumen
- Marsh
- Mastercard
- Mercor
- Micron
- Microsoft
- NTT Data
- Obsidian
- Octane
- OAI
- Okta
- Oliver Wyman
- OpenAI
- Oracle
- Palo Alto Networks
- Perplexity
- Proofpoint
- Prophet AI
- PwC
- Red Hat
- ReliaQuest
- Remote Threat
- Replit
- Runsybil
- Cognizant
- Corelight
- Corridor
- Cotool
- CrowdStrike
- Cyera
- Darktrace
- Dell Technologies
- Depthfirst
- T-Mobile
- Elastic
- Enclave
- Epam
- Equinix
- Exa
- F5
- Factory
- Fifth Third
- Figma
- FIS
- Fiserv
- Fleet
- Flexport
- Fortinet
- Gen
- GM
- GoDaddy
- HackerOne
- Harvey
