OpenAI, Anthropic, Google, Microsoft, and more than 100 other companies and organizations are warning that AI-powered cyberattacks could become more common and more sophisticated within months.
The group says increasingly capable AI models can make attacks easier to automate and more difficult to contain. It is calling for a global effort to improve cyber defenses before offensive uses of AI put additional pressure on already strained security teams.
Hospitals, water treatment plants, and internet infrastructure are among the systems the coalition says may face greater risk if security measures do not improve quickly enough.
A Broad AI and Cybersecurity Coalition
This warning comes from organizations that approach the problem from very different positions. The coalition includes AI developers, cybersecurity firms, and infrastructure companies.
Some members build increasingly capable AI systems. Others focus on defending networks against cyberattacks. Despite their different commercial interests, they share the view that current defenses need to improve before AI gives attackers another advantage.
The coalition’s message is straightforward: security teams and organizations should act before AI-powered attacks become widespread.
Why AI-Powered Cyberattacks Could Increase
AI does not need to create completely new forms of cyberattack to make cybersecurity problems worse. It can help attackers identify existing vulnerabilities faster, automate parts of an attack, and repeat exploitation efforts more easily.
That could make familiar weaknesses more costly. Unpatched software and understaffed security teams remain ordinary security problems, but automation can make them faster to exploit and harder to manage at scale.
The coalition warns that attackers may gain an advantage as AI tools become more capable. Its concern is not that every attack will become an AI superweapon. Rather, even existing security failures can become more serious when attackers can move faster and automate more of their work.
Critical Infrastructure Faces Particular Concern
The coalition gives special attention to critical infrastructure. Failures involving hospitals, water treatment plants, or internet infrastructure can affect more than one organization.
That is why the group is calling for stronger cyber defenses before AI-powered attacks become commonplace. If organizations responsible for essential systems cannot keep up with faster and more automated attacks, the effects could extend beyond their own networks.
The coalition argues that security improvements should not wait until offensive AI tools are already widely used.
Recommendations for Stronger Cyber Defense
The group recommends stronger baseline security standards and wider access to defensive AI tools. These tools can help organizations find vulnerabilities and speed up patching.
Smaller institutions are a particular concern because they may not have the staffing or financial resources needed to respond quickly as attacks become more automated. Expanding access to defensive AI could give those organizations stronger tools to identify weaknesses and address them sooner.
The coalition’s approach centers on improving defensive capacity before attackers gain broader access to more effective automation.
Improve Vulnerability Detection and Patching
The coalition wants governments and organizations to increase access to AI tools that can locate vulnerabilities and accelerate patching work.
Keeping systems patched is already difficult for organizations with limited cybersecurity resources. If attackers can use AI to find weaknesses faster, delays in patching may create even more exposure.
The goal is to help defenders identify and address vulnerabilities before they are exploited.
Raise Security Standards for AI-Generated Code
Software development is another area the coalition identifies as a weak point. It is calling for stronger security standards around AI-generated code.
As AI makes it easier to probe systems for weaknesses, the coalition argues that organizations need more rigorous security practices around code produced with AI assistance.
This focus reflects a broader concern: attackers may use AI to search for weaknesses in systems, while defenders must work to keep those systems secure.
Why Organizations Are Being Urged to Act Now
The coalition believes the available window may be short. Organizations that are already struggling to patch software and maintain secure systems may have even less room to catch up once attackers have better automation.
Waiting does not make those existing problems disappear. It can leave security teams facing faster attacks, more repeated exploitation attempts, and growing pressure on limited resources.
The coalition’s core position is that defenders need stronger tools and better baseline security measures before AI-powered cyberattacks become routine.