A call for collective action on cyber defense

Sophos joins organizations worldwide in supporting a coordinated and responsible approach to cyber defense.

Sophos has long believed that openness and transparency make the cybersecurity community stronger. That is why we have signed OpenAI’s A call for collective action on cyber defense, an open letter urging organizations around the world to help strengthen cyber defenses as AI changes the threat landscape. 

As AI-enabled attacks become more widespread and sophisticated, increasing the risk to businesses and the public services that communities depend on, it’s clear that cyber defense is a shared responsibility. The letter rightfully calls for coordinated action across the private and public sectors, with frontier AI labs playing an important role. 

Sophos shares that sense of urgency. Signing the letter is an outward expression of the work we have pursued for years: 

These principles have shaped Sophos for years, and they also define the work ahead.  

The letter begins with what we already know: “We have a limited window to strengthen cyber defenses.”  

Longstanding vulnerabilities and legacy systems continue to leave organizations exposed, and misconfigurations and excessive permissions only add to that exposure. While AI can help attackers identify and exploit these weaknesses more quickly, it can also give defenders new ways to find exposures, connect weak signals, and respond to threats before they cause material harm. 

Of course, defenders in turn must be able to turn AI capability into action across real environments, not just demonstrate what a model can discover.  

The letter also makes two more calls to action: Expertise needs to reach more defenders, and the response must be collective. We agree. One organization’s work can help protect many others when defensive knowledge is shared responsibly.