More than 100 leading technology companies, including OpenAI, Anthropic, Amazon Web Services (AWS), and Microsoft, have issued an urgent warning: businesses and governments have only a few months left to fortify critical infrastructure against an impending wave of AI-enhanced cyberattacks.

According to an open letter published Thursday, AI is expected to make advanced hacking capabilities cheaper, faster, and more accessible. This development poses a direct threat to hospitals, water treatment plants, energy facilities, and telecommunications networks.

The Asymmetry of the Threat

The primary concern among experts is not just the empowerment of experienced hackers, but the democratization of complex attacks. AI tools can now assist in identifying vulnerabilities, analyzing unknown code, and rapidly adapting malware—tasks that previously required specialized expertise and significant time.

Incidents have already been recorded, such as an attack on U.S. water systems, which reportedly utilized exploit code generated by artificial intelligence.

Recommendations for Immediate Action

The letter outlines a framework for action across various sectors:

  • Businesses: Must immediately raise internal security standards and apply stricter requirements to all new products, including AI-generated code.
  • Cybersecurity Firms: Are called upon to accelerate the development of AI-driven defensive tools and improve the sharing of threat intelligence.
  • Governments: Increased public funding is required to protect organizations managing critical services that lack the resources of major tech firms.
  • AI Labs: Developers of the most powerful models should provide defenders with access to advanced response tools and technical support.

The Commitment Gap

Despite the urgent tone of the warning, the letter remains largely conceptual. The signatory companies did not announce specific financial commitments, clear timelines, or binding targets for implementing their proposals. Consequently, the initiative is viewed as a powerful call for coordination, but it does not yet constitute a binding implementation plan.