AI is reshaping cybersecurity at extraordinary speed. Check Point Research is already uncovering AI-powered attacks in the wild, revealing how threat actors are operating at greater scale and with growing sophistication. As these capabilities advance, cyber defense must advance just as quickly.
That is why Check Point is proud to support OpenAI’s call for collective action on cyber defense, alongside organizations across the technology and cybersecurity ecosystem. We share the belief that meeting this challenge requires the industry to come together, expanding access to effective security tools, sharing intelligence and expertise, and helping organizations strengthen their defenses and resilience.
For more than 30 years, Check Point has focused on preventing cyberattacks and protecting organizations as technology evolves. As our customers embrace AI and transform their businesses around it, we are committed to helping them do so securely.
Below is the open letter and the collective call to action we are proud to support.
A call for collective action on cyber defense
An open letter from organizations around the world for a surge in cyber defense.
We have a short window to strengthen cyber defenses. In the coming months, AI-enabled attacks will become far more widespread and sophisticated, powered by models developed by many companies around the world. The companies and public services — from hospitals to water treatment plants — our communities depend on will soon be at risk.
Three principles need to shape our response:
1. The weaknesses already exist. Longstanding bugs, excessive permissions, misconfigurations, and legacy systems have left systems exposed. Security teams have been historically under-resourced and need a surge in tools and resources.
2. Expertise needs to reach more defenders. AI brings specialist skills to more defenders. Sharing tools, practical knowledge, and verified fixes lets one organization’s work help protect many others.
3. The response must be collective. Cyber capabilities are advancing worldwide, and that’s on net a good thing because no single lab should control the future. Every developer must build and test safely, and defenders everywhere need access to effective tools and support.
Every organization must act now. Governments, cybersecurity companies, technology partners, and AI labs must help turn that urgency into progress — with tools, funding, and hands-on support, especially for organizations with limited budgets.
We call for immediate action:
01 Every organization
Make cyber defense a leadership priority. Identify the systems and services you depend on, assign accountable owners, and give them the resources to act. Put capable AI into approved security workflows to find and prioritize weaknesses and turn findings into deployed, verified fixes or containment measures. Strengthen access controls and test recovery from protected backups. Expand automation carefully, keeping people responsible for consequential decisions.
02 Cybersecurity companies and technology partners
Make solutions such as vulnerability finding, code-scanning, monitoring, expedited remediation, red teaming and incident-response tools widely accessible to defenders, including those with limited budgets. Share threat information, practical playbooks, and expertise. Pair tools and findings with hands-on help to deploy and verify fixes.
03 Governments
Lead and fund coordinated cyber defense efforts at local, national and international scale. Find and fix the most dangerous weaknesses in systems society depends on. Enable responsible testing and direct help to critical infrastructure such as water, utilities and hospitals. Measure progress by dangerous attack paths closed, fixes verified, and recovery plans tested.
04 Frontier labs
Expand access to cyber models; contribute funding and deployment capacity; share credible threat assessments; and work with governments and security partners on a coordinated response. OpenAI is starting with these actions:
1. Expanded access to cyber models. We will provide subsidized access to our latest Daybreak Cyber models to eligible public-sector organizations, nonprofits, open-source maintainers, critical infrastructure and essential-service operators.
2. Help testing your defense: We recommend companies to work with authorized Daybreak Partners to make controlled attempts to access agreed systems using Daybreak models and privately share any weaknesses with their security teams to remediate.
3. Share tools and learnings: We will continue to publish security tools and learnings to help organizations continuously find and prioritize vulnerabilities, fix them, and verify that the fixes work.
—-
The long-term response will evolve, but the immediate work cannot wait. Each identified weakness fixed, repair verified, and critical system better protected is progress we can make together.
We commit to strengthening our own defenses, helping others address serious weaknesses, and sharing practical tools and lessons. We have the tools to begin, and we need to put them to work now.