OpenAI and other tech firms urge “collective action” to counter AI-enabled hacking

Tech companies including OpenAI have called for “collective action” to counter what they described as AI-enabled cyber attacks, urging coordinated steps by the public and private sectors to strengthen defenses against increasingly automated threats. The call, described in a new statement reported by The Hill, frames the current moment as a chance to reduce risk by addressing weaknesses that the companies said have accumulated over time.

According to the report, OpenAI led the effort, with the company and other technology firms arguing that advances in artificial intelligence have also created new capabilities for defenders, not just attackers. The companies said the defenders’ ability to respond effectively is expanding, and they urged stakeholders to act decisively to use that window.

The statement described the underlying problem as a buildup of vulnerabilities across digital systems. The companies argued that AI-powered techniques are making it easier for malicious actors to probe targets and attempt exploitation at scale, while simultaneously improving the tools available to defenders to identify and remediate weaknesses.

The Hill reported that the companies’ language linked cybersecurity urgency to the pace of AI development, suggesting that delays in coordinated defensive action will leave the digital environment exposed. The report characterized the request as less about one-off fixes and more about a broader, coordinated approach to improving security outcomes across industries.

While the report focused on the concept of collective action, it did not outline a specific federal legislative proposal or a single mandatory mechanism. Instead, it presented the companies’ request as a push for alignment among technology firms, defenders, and other stakeholders to reduce the risk of AI-enabled attacks and strengthen resilience as AI deployment continues to accelerate.

The practical effect of the companies’ request, as described, would be to encourage security teams and organizations to move faster on vulnerability remediation and defensive planning. It also indicates an effort by major technology providers to influence how cybersecurity planning evolves alongside AI capabilities.

The coming steps would depend on whether policymakers or regulators adopt the companies’ recommendations into guidance or requirements, and whether industry groups operationalize the call through shared best practices, improved threat intelligence coordination, or faster vulnerability response workflows. For now, the immediate record is the public call itself, reported by The Hill, rather than a specific government action or rulemaking schedule.