In a rare show of industry unity, more than 100 companies have signed an open letter warning that AI-powered cyberattacks on critical infrastructure represent an imminent and escalating threat. The signatories — spanning tech giants, cybersecurity firms, and service providers — called on governments and business leaders to act decisively before the threat becomes unmanageable.
The letter, coordinated through the UK government's National Cyber Security Centre, was co-signed by OpenAI, Google DeepMind, Microsoft, Anthropic, CrowdStrike, Palo Alto Networks, and dozens of other firms. It marks one of the largest collective AI safety actions the industry has taken to date.
The letter frames the AI cyber threat as a paradigm shift. For years, the cyber threat has been primarily about theft and espionage. Now, the convergence of AI capabilities with offensive cyber techniques is creating a new class of threat — one that can operate at machine speed, scale autonomously, and adapt in real time.
The companies outlined several specific concerns: AI-generated phishing that is virtually indistinguishable from legitimate communications; automated vulnerability discovery where AI finds and exploits software flaws faster than humans can patch them; autonomous attack chains where AI agents independently plan and execute multi-step cyberattacks; and targeting of critical infrastructure including power grids, water systems, hospitals, and financial networks.
Previous industry letters on AI risk have focused on long-term existential concerns or voluntary safety commitments. This letter is notably different: it focuses on a concrete, present-day threat and calls for binding policy action. It specifically urges mandatory AI security standards for critical infrastructure, increased government investment in defensive cyber capabilities, international cooperation on attribution and response, and liability frameworks for AI developers.
Bill Gates added his voice to the alarm, calling the AI cyber threat one of the most serious challenges facing civilization in the coming decade. The letter arrives as multiple nations have recently reported AI-assisted cyber operations targeting energy grids, healthcare systems, and government networks.
The open letter represents a watershed moment: the very companies building the most powerful AI systems are now publicly warning that those same capabilities, in malicious hands, could destabilize the infrastructure modern society depends on.
