On August 27, 2026, OpenAI published an open letter titled “A call for collective action on cyber defense,” signed by more than 100 organizations including Anthropic, Microsoft, Google, Amazon, CrowdStrike, Palo Alto Networks, Mastercard, and Visa, with CNBC counting 116. The letter warns that in the coming months AI-enabled cyberattacks will become far more widespread and sophisticated, concedes current security practices are not sufficient, names hospitals, water treatment plants, and power systems, and admits technical debt is real and teams are under-resourced. Its four calls to action cover threat intelligence sharing, coordination across levels of government, funding for under-resourced essential services, patching high-risk vulnerabilities, and giving defenders access to capable models during an incident. The article argues these measures happen before an attack, on a timeline you control, or after an attack has started. On November 14, 2025, Anthropic disclosed what it called the first reported AI-orchestrated cyber espionage campaign; a Chinese state-linked group it tracks as GTG-1002 hit roughly 30 organizations and used Claude Code to execute 80% to 90% of the operation independently, with human operators contributing a maximum of about 20 minutes of work at key decision points.