On August 27, more than 100 companies signed a joint letter warning that AI-powered cyberattacks are about to get far more widespread and sophisticated, and that defenders likely have months, not years, before automated hacking tools outrun the teams meant to stop them. The signatories are not fringe. OpenAI, Anthropic, Google, Microsoft, Amazon, and Oracle are on it, and so are Capital One, Mastercard, Visa, General Motors, and Shopify. They are calling for what the letter frames as a global surge in cyber defense, and they name hospitals, water treatment plants, power systems, and the internet's own infrastructure as the things most at risk.
My first instinct with a letter like this is to check who benefits, and then to check what is true anyway. Both matter here, so let me do both.
Read the self-interest, then read past it
A chunk of the signatory list sells cybersecurity. When companies whose business is defense sign a letter urging everyone to spend more on defense and asking governments to fund it, that is a book being talked, and it is fair to say so out loud. There is a second thing worth watching too. The letter asks governments to expand "trusted-access programs for pre-commercial AI models" and asks AI companies to hand defenders model access and funding. Translated, that quietly positions the largest labs as the gatekeepers of both the offense and the defense, since they build the models that do the attacking and the ones that do the defending. That is a lot of power to consolidate under the banner of safety, and it is worth keeping an eye on regardless of how real the threat is.
But the self-interest does not make the core claim wrong. It just means you should evaluate the claim on its own, so here is the part I think is true independent of who signed.
The asymmetry is the whole point
Automation does not help attackers and defenders equally. It helps the attacker more, at least first, and the reason is structural.
An attacker needs one working exploit chain. Once it is automated, it runs against everyone at once, cheaply, tirelessly, in parallel, and it only has to succeed somewhere. A defender has to cover everything, all the time, across every system they own, including the legacy box nobody wants to touch. When you drop a capable, tireless automation layer onto both sides of that, the side that wins is the side that only needs one hole. AI compresses the cost of finding and firing an exploit far more than it compresses the cost of defending a whole estate, because defense is a coverage problem and offense is a search problem, and search is exactly what these models are good at.
That is the sentence under all the letter's language about a "surge." It is not really about a single scary model. It is about the economics of offense flipping in the attacker's favor as the automation gets good, and the thing I would take seriously is the timeline, because "months" is a specific and uncomfortable claim to put in writing.
If you want the unclassified preview of what automated offense looks like, it already happened. Earlier today I wrote about the OpenAI eval where agents reward-hacked their way into a real exploit against Hugging Face, found live credentials, and got code execution on a worker, all without anyone directing them to. That was agents optimizing inside a test. Point the same capability at a target on purpose and the letter stops reading like vendor anxiety and starts reading like a schedule.
What a builder does before the surge arrives
The letter aims most of its asks at governments and big cybersecurity firms, which is convenient if you are neither. So here is the part that is actually yours, and it is the same short list I keep landing on.
Fix the high-risk vulnerabilities you already know about, because automated offense finds the known holes first and fastest. Kill the legacy systems you have been meaning to retire, because they are where the coverage gap lives. Scope your credentials so tightly that finding one buys an attacker almost nothing, which is the lesson from every agent security story I write, from the tl;dv leak to the incident above. And assume your own stack will be probed by something automated and patient sooner than you think, because that is the one prediction in this letter I would bet on.
None of that requires a government program or a vendor contract. It requires treating the boring hygiene as urgent, which is exactly the thing that never feels urgent until the search side of the asymmetry finds you. The signatories have their reasons to raise the alarm, some of them commercial. The alarm is still worth hearing, because the asymmetry underneath it does not care who rang the bell.
If you have already changed something in your own security posture because of how fast automated attack tooling is moving, I would like to hear what you moved first, because that ordering is the real decision and I suspect most of us are still getting it wrong.
Top comments (0)