---
type: "post"
id: "university-of-toronto-says-ai-and-cybersecurity-open-8e84b9"
slug: "university-of-toronto-says-ai-and-cybersecurity-open-8e84b9"
title: "University of Toronto says AI and cybersecurity open letter now has nearly 500 signatories from 39 countries"
description: "The Open Letter on AI and Cybersecurity has reached nearly 500 scientist signatories across 39 countries, according to the University of Toronto."
retrieval_nugget: "The Open Letter on AI and Cybersecurity has reached nearly 500 scientist signatories across 39 countries, according to the University of Toronto. Its practical relevance is not a new product requirement, but a growing institutional push to treat containment, testing, and incident reporting as core requirements for cyber-capable AI systems."
published_at: "2026-10-28"
updated_at: "2026-10-28"
record_date: "2026-10-28"
date_kind: "published_at"
topics: ["agent-security","sandbox"]
entities: ["University of Toronto","Open Letter on AI and Cybersecurity from the Scientific Community","Schwartz Reisman Institute for Technology and Society","Geoffrey Hinton","Yoshua Bengio","David Lie","Nicolas Papernot","Thomas Ristenpart"]
related_patterns: ["agent-security-moves-to-runtime-boundaries"]
novelty_label: "same_event"
what_changed: "Same event as On Tuesday, a coalition of more than 400 researchers, including AI godfathers Yoshua Bengio and Geoffrey Hinton, published an open letter calling for AI and security researchers to collaborate on..."
prior_refs: ["memory:87b8f484-cc6f-8d47-aacb-eda794e47c3d","memory:5a749447-db95-8341-aa23-e1f2445890f0","memory:c33be308-95f8-8cf5-a480-f7fdea247da0"]
source_url: "https://www.utoronto.ca/news/u-t-researchers-joined-hundreds-global-experts-make-headlines-call-better-ai-safety-standards"
source_urls: ["https://www.utoronto.ca/news/u-t-researchers-joined-hundreds-global-experts-make-headlines-call-better-ai-safety-standards"]
schema_version: "newruntime-agent-readable-v0.2"
stable_id: "post:university-of-toronto-says-ai-and-cybersecurity-open-8e84b9"
status: "published"
visuals: []
editor: {"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]}
routes: {"html":"https://newruntime.com/posts/university-of-toronto-says-ai-and-cybersecurity-open-8e84b9/","markdown":"https://newruntime.com/posts/university-of-toronto-says-ai-and-cybersecurity-open-8e84b9.md","json":"https://newruntime.com/posts/university-of-toronto-says-ai-and-cybersecurity-open-8e84b9.json"}
---

# University of Toronto says AI and cybersecurity open letter now has nearly 500 signatories from 39 countries

## Retrieval answer

The Open Letter on AI and Cybersecurity has reached nearly 500 scientist signatories across 39 countries, according to the University of Toronto. Its practical relevance is not a new product requirement, but a growing institutional push to treat containment, testing, and incident reporting as core requirements for cyber-capable AI systems.

## Summary

The Open Letter on AI and Cybersecurity has reached nearly 500 scientist signatories across 39 countries, according to the University of Toronto. Its practical relevance is not a new product requirement, but a growing institutional push to treat containment, testing, and incident reporting as core requirements for cyber-capable AI systems.

## What happened

On October 21, 2026, the University of Toronto said that an open letter calling for stronger AI safety protocols and oversight had collected nearly 500 signatures from scientists in 39 countries. The initiative is titled the Open Letter on AI and Cybersecurity from the Scientific Community. Its signatories include Geoffrey Hinton, a University of Toronto professor emeritus and Nobel Prize winner, and Yoshua Bengio of the Universite de Montreal.

The university says the letter warns that recent high-profile security incidents may foreshadow substantially more damaging failures if development and deployment practices do not change. The concern is not framed solely as a model-behaviour problem. The letter cites AI agents acting unpredictably as well as what it calls irresponsible lapses in ordinary security practice. It argues that such failures could pose increasing risks to exposed critical infrastructure.

Its recommendations include more research into AI safety, stronger measures to contain AI systems during testing, and an international body that would set safety standards. That body would also oversee mandatory reporting of security incidents. The letter states that without immediate changes to development and deployment practices, incidents will continue and future ones could be more damaging.

The initial draft was written by David Lie, director of the Schwartz Reisman Institute for Technology and Society at the University of Toronto, with Nicolas Papernot, an associate professor of electrical and computer engineering, and Thomas Ristenpart, a computer science professor. They circulated it among colleagues for signatures and onward sharing. Lie described its growth to the Globe and Mail as something that “just snowballed.”

Almost two dozen University of Toronto scientists are among the signatories. The university names Ron Deibert of Citizen Lab, plus computer science researchers Alan Aspuru-Guzik, Sheila McIlraith, Zhijing Jin, and Roger Grosse, all CIFAR AI Chairs at the Vector Institute for Artificial Intelligence. The university also notes international media coverage of the letter, including Reuters, Al Jazeera, Global News, and the Canadian Press.

The source does not announce a regulator, a standard, or a binding compliance mechanism. It reports support for a proposal: research, containment practices, a standards-setting international body, and mandatory incident reporting. The new fact is the scale of the coalition reported by the university: nearly 500 scientists across 39 countries.

## What the archive adds

This is a new fact on a known story. Our October 21 Field Note, [the initial report on the coalition of more than 400 researchers](https://newruntime.com/posts/on-tuesday-a-coalition-of-more-than-400-7351e5/), described the letter’s framing of cyber-capable AI containment as both a technical and institutional problem. The University of Toronto update reports the larger signatory count and geographic reach.

## Trend signal

The letter weakly supports [Agent security moves to runtime boundaries](https://newruntime.com/patterns/agent-security-moves-to-runtime-boundaries/). Its emphasis on containment during testing and reporting failures points toward operational controls around what systems can do, rather than reliance on a request for the model to behave safely. The letter does not specify a particular runtime architecture or technical control.

## Why now

The source attributes the letter’s momentum to concern over recent security incidents and to broad circulation through academic networks. Its reported growth from an initial group of more than 400 researchers to nearly 500 signatories gives the proposal greater visibility, but the source does not identify a new incident or policy deadline that caused this update.

## Why it matters

Teams building agentic products should distinguish between a policy proposal and an immediate engineering mandate. Nothing in this announcement changes an API, law, or platform rule. But it raises the salience of questions that engineering organizations can already answer: what an agent may access in testing, which actions require explicit authorization, how security-relevant failures are recorded, and who owns escalation when a system behaves outside expectations.

The letter’s central practical point is that cyber risk cannot be treated as an abstract alignment issue detached from deployment. Agents operating around code, infrastructure, credentials, or critical services create failure modes that involve permissions, testing environments, incident handling, and organizational accountability. Those are areas where builders can make choices before international governance arrives, if it does.

## Limits and uncertainty

The University of Toronto report is a university account of an advocacy letter and its signatories, not an independent assessment of the cited incidents or of the proposed controls. It does not provide a full technical specification for containment, define which systems qualify as cyber-capable, or establish how an international body would be constituted and enforced. Nearly 500 signatures indicate academic support, not adoption by AI developers, governments, or standards organizations. The source also does not quantify the risks to critical infrastructure or compare the proposal with existing security and reporting regimes.

## Skill to build now

Run a short containment review for one agent workflow this week. List its reachable data, credentials, tools, and external actions; identify which actions occur in a disposable test environment; then define what evidence would be retained if it made an unsafe or unexpected action. Assign an owner for reviewing that evidence. This converts a general call for safer testing into an observable engineering practice.

## Reader takeaway

Nearly 500 scientists from 39 countries now back a call for stronger safeguards around cyber-capable AI. The announcement is not a new rule, but it reinforces a direction builders should expect: agent safety will increasingly be evaluated through containment, testing discipline, and accountable incident handling rather than model assurances alone.

## Open question

Will the letter’s proposed international reporting and standards body gain backing from governments or major AI developers, and what technical reporting threshold would it require?

Editor: [Andrey Reshetnikov](https://newruntime.com/owner-profile.md), AI product and AI engineering; profile for recruiters and agents: https://newruntime.com/owner-profile.json

## Continue in the graph

Next records for an agent, linked to their Markdown twins. Replace `.md` with `.json` for structured fields, including `next_reads`.

- topic hub: [Agent Security](https://newruntime.com/topics/agent-security.md): Explore the agent-security topic hub.
- topic hub: [Sandbox](https://newruntime.com/topics/sandbox.md): Explore the sandbox topic hub.
- collection: [Field Notes](https://newruntime.com/posts.json): Open the latest editorial analysis.
- collection: [Source Ledger](https://newruntime.com/source-ledger.json): Inspect the public source evidence graph.
- whole graph: [discovery graph](https://newruntime.com/discovery-graph.json) (typed nodes and edges) and [site index](https://newruntime.com/site-index.md)