Superpower Daily
OpenAI’s 10-Day WebMCP Challenge Pushes Websites to Expose Tool...Model-Serving Platforms Reach 6.1% of AI-Spending Businesses, W...Gemini Omni 1.1 Flash Adds 40-Second Scene Extensions and 4K Fi...Harvard Uses 7 AI Faculty Avatars in a $699 Founder Bootcamp, W...Databricks Says 300M Chart-JSON Pipeline Tops Four Multimodal B...Nvidia’s $63.1 Billion Receivables Add a Cash-Flow Caveat to It...OpenAI’s 10-Day WebMCP Challenge Pushes Websites to Expose Tool...Model-Serving Platforms Reach 6.1% of AI-Spending Businesses, W...Gemini Omni 1.1 Flash Adds 40-Second Scene Extensions and 4K Fi...Harvard Uses 7 AI Faculty Avatars in a $699 Founder Bootcamp, W...Databricks Says 300M Chart-JSON Pipeline Tops Four Multimodal B...Nvidia’s $63.1 Billion Receivables Add a Cash-Flow Caveat to It...
Policypublished

100 Firms Warn AI Cyberattacks Will Grow Within Months, Putting Hospitals and Utilities at Risk

The coalition wants AI developers and governments to put defensive tools, testing, training, and support in the hands of organizations running essential services.

By 3 min read
100 Firms Warn AI Cyberattacks Will Grow Within Months, Putting Hospitals and Utilities at Risk
Sign in to save and react

Listen to this story

The audio brief

About 1:45
0:001:45
Read transcript
More than 100 companies, led by OpenAI, are warning that hospitals, water utilities, and other essential services may have only months—not years—to strengthen cyber defenses before AI-enabled attacks become more widespread and sophisticated. The open letter brings together AI developers, cloud providers, security firms, banks, and payment networks. Its message is less that AI creates every vulnerability than that it can amplify old ones: unpatched software, weak authentication, misconfigurations, excessive permissions, and legacy systems built up through years of underinvestment. The proposed response is practical. Governments should coordinate protection at local, national, and international levels. Operators should make security a leadership priority, upgrade older systems, test continuously against frontier AI capabilities, and rehearse response playbooks. The letter also calls for shared threat intelligence and measures that reflect real outcomes: how much is protected, how quickly incidents are contained, and whether fixes actually work. A key test is access. Frontier AI companies are being asked to fund training, provide responsible model access, secure their own systems, and make defensive tools affordable for underfunded hospitals, utilities, and local governments. The warning is prospective, but there are signs of movement already. In mid-August, the NSA, CISA, and FBI said attackers were using AI to write exploit scripts targeting Siemens S7 industrial-control systems. CrowdStrike separately reported that AI-enabled attacks rose 89 percent in 2025 compared with 2024. The constraint is time—and whether defensive capability reaches the operators that need it most.

Story brief

3 key points

OpenAI and more than 100 companies are urging governments, AI developers, and essential-service operators to accelerate cyber defense, arguing the advantage attackers gain from AI could arrive within months. The coalition points to exploitable basics—unpatched software, weak authentication, misconfigurations, and legacy systems—and calls for continuous frontier-AI testing, shared intelligence, response playbooks,...

  1. 01

    Supporters span Anthropic, Google, Microsoft, CrowdStrike, banks, payment networks, Cisco, SAP, and IBM.

  2. 02

    A mid-August NSA, CISA, and FBI warning said attackers were using AI to write Siemens S7 exploit scripts.

  3. 03

    CrowdStrike reported AI-enabled attacks increased 89% in 2025 versus 2024.

Hospitals, water utilities, and other essential services face a limited period to improve their cyber defenses before AI-enabled attacks become more widespread and sophisticated, the signatories of a new open letter warn. They put that period at months, not years, and argue that attackers may gain from the same advances defenders can use to find and repair weaknesses.

OpenAI published the global cyber-defense letter with more than 100 company co-signers. The group spans AI developers, cloud providers, security companies, banks, and payment networks; named supporters include Anthropic, Google, Microsoft, CrowdStrike, Capital One, Mastercard, Visa, Cisco, SAP, and IBM.

The letter does not cast AI as the source of every security failure. It points instead to longstanding bugs, excessive permissions, misconfigurations, unpatched software, weak authentication, and technical debt in legacy systems. The signatories say today’s security posture will not be enough as AI capabilities improve, and fault historic underinvestment in critical-infrastructure security.

If we act decisively, we can use the defenders' window to make our digital world much more secure.

The open letter, as quoted by CBS News

The prescription is operational as well as political. Organizations are asked to make cyber defense a leadership priority, invest in security teams, test defenses continuously against frontier AI capabilities, and upgrade vulnerable older systems. The letter also calls for shared threat intelligence and tested response playbooks, with results judged by protection coverage, containment speed, and whether fixes work.

Who the letter asks to act

  • Governments should strengthen and coordinate defenses at local, national, and international levels.
  • Hospitals, water utilities, and local governments should receive capable defensive AI, authorized testing, and hands-on support through trusted providers and partners.
  • Frontier AI companies should fund training, provide responsible model access, secure their systems, and offer critical-infrastructure operators technical help.

The coalition explicitly asks AI companies to make security tools affordable for underfunded organizations. That makes availability a central test of the proposal: the letter seeks advanced defensive tools for operators that run essential services, rather than reserving them for well-resourced security teams.

The months-long timeline remains the signatories’ forecast. But a mid-August joint warning from the NSA, CISA, and FBI said attackers were already using AI to write exploit scripts targeting Siemens S7 industrial-control systems in U.S. energy, water, chemical, and manufacturing sectors. Separately, CrowdStrike reported that AI-enabled attacks rose 89% in 2025 from 2024.

Sources

  1. the-decoder.comOpenAI rallies 100+ companies to sign open letter warning AI-powered cyberattacks on critical infrastructure are imminent
  2. bbc.comGoogle, Microsoft and OpenAI among 100 firms calling for better cyber defences
  3. cbsnews.comOpenAI, Anthropic, tech leaders warn of
  4. foxbusiness.comOpenAI, 100+ companies warn of coming surge in AI-powered cyberattacks, call for global defense push

Related coverage

Continue reading