Industry that built the problem offers to sell you the solution
More than 100 technology, AI and cybersecurity companies, led by OpenAI, have signed an open letter warning that AI-enabled cyber attacks could soon become more widespread and sophisticated. The signatories say current security practices are inadequate, particularly for critical infrastructure such as hospitals, water treatment plants and internet services, but the article notes the irony that many of these firms helped create or have long profited from the systems now seen as vulnerable.
The letter calls for wider access to AI-powered defensive tools, continuous testing against frontier AI capabilities, improved threat-intelligence sharing and government funding for essential services. It identifies longstanding weaknesses including unpatched software, poor configuration and weak authentication, while urging AI developers to provide funding, training and responsible access to defensive models. However, it sets no funding amount, deadlines or binding commitments, despite concerns that autonomous AI agents and AI-generated exploit code are already being used to find and exploit vulnerabilities.
- Tech giants warn AI could rapidly strengthen cyber attackers.
- They propose AI-based defences for critical infrastructure.
- The letter gives no firm funding commitments or deadlines.
New here? Start with this
Hospitals, water treatment plants and internet services rely on computer systems to keep essential operations running. Those systems can be exposed to attacks when software is not updated, settings are insecure or account protections are weak.
Companies that develop AI and cybersecurity tools say artificial intelligence could make cyber attacks more frequent or more sophisticated, while also helping defenders find and fix weaknesses. OpenAI is among the firms involved, alongside technology and security companies.
The debate matters because attacks on essential services can disrupt people’s access to healthcare, water and communications. Governments and service providers have a role in protecting those systems, while technology firms are discussing how their tools and expertise might support that work.
Both sides, in good faith
The strongest fair case each way — we don't pick a winner.
The case for
AI developers and security firms argue that rapidly improving AI can help defenders find vulnerabilities, monitor systems and respond to attacks at a scale that overstretched essential services cannot manage alone. They say wider access to defensive tools, better information-sharing and public funding could reduce risks, while continued testing against advanced models would help organisations prepare for threats that are becoming harder to detect.
The case against
Critics argue that companies whose products and business models helped create or profit from today’s vulnerable digital infrastructure should not be treated as neutral rescuers, particularly when their letter promises no specific funding, deadlines or binding action. They contend that AI-enabled attacks are already emerging and that vague calls for access and collaboration may shift responsibility to governments and essential services while leaving the firms’ own security practices and accountability unresolved.