AI Cybersecurity: What 100+ Companies Want Now

More than 100 organizations, including OpenAI, Anthropic, Google, Microsoft, AWS, Cloudflare, CrowdStrike, and major financial institutions, are calling for a coordinated increase in cyber defense. Their August 2026 message: AI-enabled attacks are expected to become more widespread and sophisticated soon, so the useful response is to fix known weaknesses before attackers can automate their exploitation at larger scale.

The open letter is unusually practical for a technology-industry statement. It names weak authentication, excessive permissions, misconfiguration, unpatched software, legacy technical debt, and insecure code as problems that already exist. I read the original letter instead of stopping at the company names, because the operational recommendations are more useful than the headline.

What are more than 100 technology companies warning about?

The signatories are warning that increasing AI capability can make cyberattacks faster, cheaper, and more scalable. The letter says critical services such as hospitals, water treatment plants, and internet infrastructure are among the systems at risk if defenders do not improve their posture.

AI can create trouble without inventing a new category of vulnerability. An attacker that can search code, test configurations, generate exploit variants, and operate across many targets can extract more value from weaknesses that organisations already know how to fix.

That makes neglect more expensive. A forgotten service account or an old exposed application may have survived for years because finding and exploiting it took human attention, and automation can reduce that friction.

For infrastructure operators, this is the same reason we treat visibility and recovery as core concerns in the Data Center and AIOps section. A vulnerability is more dangerous when you cannot see the affected asset, isolate it, or recover the service cleanly.

Does the letter say AI is only helping attackers?

No. The letter argues that the same capability can give defenders an advantage if they deploy it quickly and responsibly. It calls this a window in which AI can help organisations find and fix accumulated weaknesses before offensive use becomes more widespread.

OpenAI's related August 17, 2026 essay, "The Defender's Window," makes the same argument in more detail. It describes AI as useful for vulnerability discovery, secure code review, patch validation, and formal verification, while warning that capable open models can spread offensive capability beyond a small number of labs.

That doesn't make "AI security tool" a synonym for safe. Defensive AI still needs scope, permissions, validation, logging, and human accountability. A model that can find vulnerabilities is useful, while a model that can change production systems without controlled approval can create another operational risk.

What does the letter want ordinary companies to do?

The letter asks every organisation to make cyber defense an immediate leadership priority and to fix the highest-risk weaknesses first. It specifically calls out least privilege, strong access controls, defense in depth, better standards for purchased and generated software, and compensating controls when essential systems cannot be patched safely.

That translates into familiar work: inventory your systems, remove accounts and permissions nobody can justify, patch internet-facing software, and require strong authentication. Separate administrative paths from normal user traffic, test restore procedures, and review what automation identities can reach. All of these controls still apply now that AI has arrived, and AI raises the cost of leaving them unfinished.

The backup part deserves more attention than it usually gets in security announcements. Prevention can fail, and ransomware, destructive access, bad automation, and compromised administrators all turn recovery into the final control. If you run Proxmox, our Proxmox Backup Server guide is a useful starting point for designing independent copies and recovery paths so backup is more than a checkbox.

What should cybersecurity vendors change?

The letter asks cybersecurity companies and technology partners to test defenses continuously against frontier cyber capabilities and to make AI-powered defense more accessible to critical-infrastructure operators. It also calls for more sharing of threat intelligence, tested playbooks, and verified fixes.

The phrase that matters there is continuous testing. A security control that passed an audit six months ago may fail against a changed application, a new identity path, or an updated attacker technique. AI can increase the rate at which both sides iterate, so periodic validation becomes less reassuring.

For a vendor, the product claim should move past "we detect AI threats" to evidence about what is tested, what is blocked, how quickly a new technique becomes a detection, and how an operator verifies the result.

If you're buying, ask for that evidence, because AI branding is cheap and repeatable test results are harder to come by.

What does the letter ask governments to do?

The letter asks governments to coordinate cyber defense across local, national, and international levels, fund under-resourced essential services, widen trusted access to capable defensive AI, and improve incident response and threat-intelligence sharing.

That focus on under-resourced organisations is sensible because capability is uneven. A large bank may have a security operations centre, dedicated application-security staff, and the budget to test frontier tools. A municipal utility or small hospital may depend on a few administrators who are already maintaining old systems around the clock.

If AI makes automated attacks easier to scale, the weakest connected organisations become more attractive targets. So the defensive response cannot depend only on what the best-funded technology companies can deploy internally.

What are frontier AI companies being asked to provide?

The letter says frontier AI companies should provide responsible model access, funding, training, observability, security tools, authorized testing support, and credible threat assessments to defenders. It also calls for agent identities to be traceable and accountable.

Agent identity will matter more as companies deploy agents that can use browsers, code repositories, ticketing systems, cloud consoles, and security tools. Human administrators have accounts that can be disabled, logged, reviewed, and tied to responsibility. Agentic systems need an equivalent identity model if they are going to act on infrastructure.

An agent should not inherit a broad human admin token just because that is the easiest integration. Give it a specific identity, narrow permissions, short-lived credentials where possible, and an audit trail that tells you what it changed.

Is this another reason to replace legacy infrastructure?

Sometimes. The letter explicitly identifies legacy technical debt, unpatched software, weak authentication, and excessive permissions as part of the exposure. If a system cannot be brought to a defensible baseline, replacement becomes a security decision instead of an aesthetic modernization project.

Old systems aren't automatically unsafe, though, and new platforms aren't automatically secure. A modern platform with careless identity design can be worse than an old system that is isolated and tightly controlled.

Ask whether you can patch it, monitor it, restrict it, back it up, and recover it. If the answer to several of those is no, the platform is accumulating risk that AI-enabled attackers may make easier to exploit.

Our infrastructure comparisons are built around the same approach. Feature count matters less than what a platform choice does to operations, failure handling, and exit options.

What would I change this quarter?

I would spend less time buying "AI security" labels and more time closing the boring gaps that the letter itself names. Start with privileged identity, internet-facing assets, unpatched critical software, unsupported systems, secrets, and restore capability. Then add AI-assisted review where it produces findings that your team can verify and fix.

I would also run at least one incident exercise where an attacker can move faster than the human team expects. The exercise should expose approval bottlenecks, missing logs, unclear ownership, and recovery steps that only exist in someone's memory.

A company with clean access control, current software, useful telemetry, and tested recovery can benefit from AI defense without betting its security program on a new product category. A company with unmanaged admin accounts and unknown assets has a more basic problem to fix first.